$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: 4MkjMIxXlQ+KIgOnAHEnhVUuLcvcd4ZeYZDI+Zdi2D0= Subject key identifier: B2:38:4A:32:1B:32:A4:2E:89:BE:77:DC:DB:BF:A3:0C:B6:D5:85:A4 Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: 98 Signing time: Thu 03 Jul 2025 06:35:46 +0000 Manifest this update: Thu 03 Jul 2025 06:35:46 +0000 Manifest next update: Thu 10 Jul 2025 06:35:46 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: oBr7tFBkNYA1ZzVQUbGk1/ZbL3cOnkBaJjuzu21tMuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Jul 3 06:35:46 2025 GMT Not After : Jul 10 06:35:46 2025 GMT Subject: CN=686624c2-a4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ad:b3:6c:9c:77:c9:46:c2:2f:4b:ea:8e:7c: ce:61:9e:a2:13:34:7e:1e:b7:eb:9b:61:49:7b:74: 63:e6:d7:45:31:14:a8:c5:ee:a9:63:5c:ec:f7:6b: c9:c4:3b:55:23:e3:64:e4:45:41:43:c7:35:73:c5: bc:56:43:df:30:8c:6a:c4:fb:41:6e:4b:32:8e:bb: 56:f2:ed:89:89:27:a1:d9:be:37:54:be:42:fa:c4: 7d:46:59:a3:1e:85:16:b7:85:7a:fb:c9:20:d6:b4: fc:7f:24:4e:c9:a4:d6:fa:cf:24:a7:22:c0:a6:11: 6b:eb:c3:2f:f6:46:5b:dd:98:6f:d8:10:26:c2:bc: fc:e4:a8:c1:46:ab:fe:88:9d:56:6e:fd:82:a2:08: 89:20:28:60:f7:4a:8d:b7:0c:62:5d:ff:99:6b:7f: 75:1b:1a:fe:ec:80:6a:97:08:2d:74:35:f5:25:fa: df:67:e0:bc:b7:26:e5:a4:6b:aa:6e:b4:40:70:7e: 46:4b:01:81:b0:d3:06:e6:1d:6a:16:ec:ed:bb:bc: 86:05:2f:3d:28:7c:bb:3e:17:9e:b2:dc:3c:a3:bb: 61:2a:c2:69:59:aa:93:16:eb:cd:9e:cc:fa:0c:85: 7b:87:8b:80:95:99:74:25:e1:a4:2f:15:4a:8d:c3: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:38:4A:32:1B:32:A4:2E:89:BE:77:DC:DB:BF:A3:0C:B6:D5:85:A4 X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:22:4a:45:c4:2a:f5:2c:17:3c:b7:2f:ae:2f:d4:01:e6:84: 05:79:fb:af:f8:bc:26:05:76:5f:40:e0:a1:07:78:88:4a:39: 58:ec:02:32:12:44:28:20:2a:fc:01:80:39:65:c2:9e:ce:14: f5:07:41:e4:74:a3:d3:0c:ef:e5:16:1c:7d:a0:eb:62:06:bd: aa:e8:f0:cd:4d:08:0a:36:27:6a:3e:35:54:fa:83:59:1a:72: 4d:15:1c:58:94:4d:cf:5f:c1:2b:04:c2:61:30:00:5f:1d:ed: c2:16:b0:24:25:7f:4a:48:3f:9d:f6:18:18:49:eb:12:91:4e: dd:aa:42:a1:c8:53:bd:6f:3c:f3:ab:14:d2:66:e3:7a:83:58: f2:5f:62:6d:8a:92:b7:a0:a1:1f:73:53:e4:a6:e4:bb:0e:6d: db:9b:55:9b:98:bd:9d:cd:f8:3a:e6:0e:1f:0d:5a:c1:75:d3: 0f:f2:83:8d:80:93:f2:3c:64:ac:2f:8e:2c:53:a0:4e:aa:d3: 59:54:ec:7c:f6:21:d1:ae:c1:77:07:5e:40:99:c5:3e:e6:98: bd:eb:fb:36:f7:b3:b7:f1:7f:41:d2:07:fe:ff:73:0a:5a:6b: 2e:96:ac:b4:bf:e6:7f:7e:5c:2b:84:54:c3:b3:7a:cd:f5:62: e9:ad:04:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBQ0QxMTAvBgNVBAUTKEUxNEE1OTNCMzEyQTk4ODU3M0Q3QTVEREZBRTA3Rjkx MjY5M0M4ODIwHhcNMjUwNzAzMDYzNTQ2WhcNMjUwNzEwMDYzNTQ2WjAYMRYwFAYD VQQDEw02ODY2MjRjMi1hNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1q2zbJx3yUbCL0vqjnzOYZ6iEzR+Hrfrm2FJe3Rj5tdFMRSoxe6pY1zs92vJ xDtVI+Nk5EVBQ8c1c8W8VkPfMIxqxPtBbksyjrtW8u2JiSeh2b43VL5C+sR9Rlmj HoUWt4V6+8kg1rT8fyROyaTW+s8kpyLAphFr68Mv9kZb3Zhv2BAmwrz85KjBRqv+ iJ1Wbv2CogiJIChg90qNtwxiXf+Za391Gxr+7IBqlwgtdDX1JfrfZ+C8tyblpGuq brRAcH5GSwGBsNMG5h1qFuztu7yGBS89KHy7Pheestw8o7thKsJpWaqTFuvNnsz6 DIV7h4uAlZl0JeGkLxVKjcOCcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI4SjIb MqQuib533Nu/owy21YWkMB8GA1UdIwQYMBaAFOFKWTsxKpiFc9el3frgf5Emk8iC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8yOTAzMUEzQTc1 NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1JVnoxNlhkLXVCX2tTYVR5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEFDRC8yOTAzMUEzQTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1J VnoxNlhkLXVCX2tTYVR5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZIkpFxCr1LBc8ty+uL9QB5oQFefuv+LwmBXZfQOChB3iISjlY7AIy EkQoICr8AYA5ZcKezhT1B0HkdKPTDO/lFhx9oOtiBr2q6PDNTQgKNidqPjVU+oNZ GnJNFRxYlE3PX8ErBMJhMABfHe3CFrAkJX9KSD+d9hgYSesSkU7dqkKhyFO9bzzz qxTSZuN6g1jyX2JtipK3oKEfc1PkpuS7Dm3bm1WbmL2dzfg65g4fDVrBddMP8oON gJPyPGSsL44sU6BOqtNZVOx89iHRrsF3B15AmcU+5pi96/s297O38X9B0gf+/3MK Wmsulqy0v+Z/flwrhFTDs3rN9WLprQQ1 -----END CERTIFICATE-----Generated at Fri Jul 4 00:20:09 2025 by rpki-client