$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: TJMArsqPdPrOhIMIs9dlm7A/1OOF2CkCSkTI95j9pvo= Subject key identifier: 86:B9:F5:E3:4D:55:59:DA:0B:3F:CA:71:9F:37:8D:BA:E2:BF:D2:DC Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 016A Signing time: Tue 01 Jul 2025 04:24:21 +0000 Manifest this update: Tue 01 Jul 2025 04:24:21 +0000 Manifest next update: Tue 08 Jul 2025 04:24:21 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: p1J23+5Vxl6CdQeytWY0RAh583pxPz1vdmvyL+KveXQ=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Jul 1 04:24:21 2025 GMT Not After : Jul 8 04:24:21 2025 GMT Subject: CN=686362f5-a73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:5a:59:70:26:78:76:d4:cc:44:a4:c3:37: 8f:48:af:32:f5:4f:5e:c8:21:04:b6:f3:08:ed:29: 86:4c:3b:78:24:cb:fe:b1:fd:cf:3f:5d:ab:50:28: 4d:78:4e:c4:b4:8f:73:22:80:ff:78:82:d5:bd:54: 68:c3:24:f2:0a:fd:83:a3:5c:bd:a6:1a:a2:e7:73: d2:80:eb:5d:d9:3c:0a:5b:7b:86:21:83:ef:51:83: af:62:09:24:be:e0:da:44:f1:35:06:7f:e5:44:de: b3:a4:56:46:23:fb:2f:f1:99:e8:35:a2:a2:86:13: 48:e7:9e:b0:65:b6:12:5c:fa:0d:b3:d5:5b:ec:75: b2:7e:7b:47:0f:4b:2c:cd:4a:64:1f:a6:90:5b:da: a0:a4:55:83:05:a2:34:1b:32:60:a9:ae:ec:b7:aa: af:31:b6:54:1e:5c:97:8b:1b:f1:9e:1f:b3:d5:36: a2:a6:26:8d:79:45:b9:63:f5:d1:43:a0:fa:e2:8f: ae:d0:54:e7:9a:c6:ac:81:04:77:1a:18:53:41:93: 83:d7:28:f5:54:6d:7e:d7:56:9f:8a:a4:77:75:8a: ef:e2:66:70:c3:30:b6:17:d5:d8:4a:c0:47:85:b1: e1:b8:a2:40:9a:da:e7:45:90:10:97:a3:a6:d5:41: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B9:F5:E3:4D:55:59:DA:0B:3F:CA:71:9F:37:8D:BA:E2:BF:D2:DC X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:09:0e:21:d2:d8:f4:38:8d:e0:e6:e1:18:ac:c6:61:f9:e3: 42:99:7e:cc:06:31:8f:13:43:31:d3:8c:0b:c0:9c:d3:c0:3b: 18:bc:29:c1:b8:ca:1f:57:fb:12:96:8b:72:e6:aa:7e:f4:3e: 38:a3:5b:5e:82:70:a9:32:15:94:60:80:d4:94:8c:5f:c7:5b: 92:60:8f:29:a7:9f:35:f3:af:fd:b5:e2:81:f0:ec:d1:22:bd: 71:94:08:7a:ce:0b:9c:d8:c1:77:f6:b7:bd:ef:19:6d:1b:94: 72:77:85:59:a6:35:cc:e8:68:a0:73:1c:fe:32:3c:51:a7:0a: 3d:09:45:0c:8c:c2:24:58:a0:31:f7:55:ef:b1:db:9a:67:51: 1a:61:be:2a:fd:7f:f1:c2:f9:41:5d:ef:4b:05:54:5e:a3:75: d6:9b:35:71:3d:0e:5c:07:1b:a9:f7:1a:4a:6f:c8:c9:9c:61: bd:b5:50:35:6e:a2:94:60:62:2e:70:0c:f2:41:a7:13:ff:f7: 77:d6:de:8d:26:7e:ef:e5:46:64:a2:cf:3b:f0:94:8c:c7:0c: 14:0e:7b:fc:0f:da:07:71:39:22:b8:d4:40:77:0f:0a:b1:a0: 38:8d:5c:1f:f3:5b:0b:39:61:15:7a:7b:21:12:f4:7d:8c:67: 2c:e4:69:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwNzAxMDQyNDIxWhcNMjUwNzA4MDQyNDIxWjAYMRYwFAYD VQQDEw02ODYzNjJmNS1hNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4haWXAmeHbUzESkwzePSK8y9U9eyCEEtvMI7SmGTDt4JMv+sf3PP12rUChN eE7EtI9zIoD/eILVvVRowyTyCv2Do1y9phqi53PSgOtd2TwKW3uGIYPvUYOvYgkk vuDaRPE1Bn/lRN6zpFZGI/sv8ZnoNaKihhNI556wZbYSXPoNs9Vb7HWyfntHD0ss zUpkH6aQW9qgpFWDBaI0GzJgqa7st6qvMbZUHlyXixvxnh+z1TaipiaNeUW5Y/XR Q6D64o+u0FTnmsasgQR3GhhTQZOD1yj1VG1+11afiqR3dYrv4mZwwzC2F9XYSsBH hbHhuKJAmtrnRZAQl6Om1UGcmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIa59eNN VVnaCz/KcZ83jbriv9LcMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJCQ4h0tj0OI3g5uEYrMZh+eNCmX7MBjGPE0Mx04wLwJzTwDsYvCnB uMofV/sSloty5qp+9D44o1tegnCpMhWUYIDUlIxfx1uSYI8pp58186/9teKB8OzR Ir1xlAh6zguc2MF39re97xltG5Ryd4VZpjXM6Gigcxz+MjxRpwo9CUUMjMIkWKAx 91XvsduaZ1EaYb4q/X/xwvlBXe9LBVReo3XWmzVxPQ5cBxup9xpKb8jJnGG9tVA1 bqKUYGIucAzyQacT//d31t6NJn7v5UZkos878JSMxwwUDnv8D9oHcTkiuNRAdw8K saA4jVwf81sLOWEVenshEvR9jGcs5Gno -----END CERTIFICATE-----Generated at Wed Jul 2 22:37:11 2025 by rpki-client