$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: RjpXGArrYozb20Iw7epe4JSDi867M49mFGMtxDMt1P8= Subject key identifier: B2:8A:BB:65:01:57:37:87:58:8C:15:52:C6:61:CB:FB:58:B8:2F:AF Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 05F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 05EC Signing time: Mon 30 Jun 2025 23:17:43 +0000 Manifest this update: Mon 30 Jun 2025 23:17:42 +0000 Manifest next update: Mon 07 Jul 2025 23:17:42 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: IMzh8lApfRNI1YFpZ8giEx9X8ejblTT27YGexPdoafE=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: UVYU38/2P4ZcsBnZKHRUezkcR8i0kOVNyl3hZT7lyzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Jun 30 23:17:42 2025 GMT Not After : Jul 7 23:17:42 2025 GMT Subject: CN=68631b17-03f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:07:76:f4:ee:c2:30:87:9a:7f:ec:75:f7:47: 81:4a:8a:5d:24:6f:b6:41:cf:51:a3:ea:ed:49:c8: 0b:0d:e9:bd:10:47:ff:d3:f6:8b:56:56:2a:8a:b4: bb:53:84:b6:e2:60:5f:60:e8:78:bd:84:bb:a0:8d: 68:bb:fd:00:f5:b2:06:f7:91:19:dd:4a:3f:88:ea: 1e:54:e6:c4:8f:1f:d8:93:08:94:2e:ed:f5:45:26: ef:b4:9d:56:e2:8a:f9:7b:3d:f4:ff:71:71:9e:dc: 9b:3d:0e:c0:7d:96:df:e0:94:8d:a8:68:4e:e6:bf: 97:67:0c:aa:84:e1:2e:97:15:74:8c:0d:2e:01:25: bf:ba:1a:64:4a:28:23:59:69:27:f6:fc:ab:b4:a9: d8:3f:4d:0c:89:20:54:93:b5:e5:9a:53:71:9b:71: f6:ad:8e:6b:3f:2c:fc:c9:a7:7f:02:25:d8:50:f4: f0:fe:8f:d7:cc:35:e5:91:cf:1e:07:2f:a3:72:cd: 59:88:02:0a:68:45:17:59:8a:a0:bc:90:df:f4:62: 45:f7:b9:c9:02:85:b8:69:e9:bd:a0:87:63:14:2e: 21:4d:9a:05:e7:f9:2e:31:e0:83:b3:97:5f:25:e2: 43:fd:c8:97:86:cd:1e:a6:a6:f6:38:df:20:b2:2d: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8A:BB:65:01:57:37:87:58:8C:15:52:C6:61:CB:FB:58:B8:2F:AF X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:43:82:0c:09:02:cd:26:ff:e9:66:e6:d5:59:dc:98:5f:13: 79:da:f0:d6:56:cd:05:a0:b5:f9:48:14:04:86:d7:20:1b:00: 85:69:35:51:3c:76:20:92:b3:a6:7f:9b:5e:6c:d3:84:5e:19: d9:3a:3a:30:b6:9e:b6:1f:7a:6d:a4:a6:6a:27:d7:e9:3c:e8: e5:de:82:28:40:c9:6e:b7:36:66:0a:7e:15:59:a1:50:0a:aa: 67:a7:2e:2f:8d:60:4c:d0:84:5c:c9:8a:28:ed:9e:3f:71:c0: 5d:df:df:df:e0:c1:3d:93:77:7c:50:08:a3:03:5b:e2:ec:b2: 65:ca:e1:2d:25:2d:05:ff:5d:75:90:8a:1f:16:62:b7:e1:f9: 9e:ff:24:2d:d9:6e:75:ee:6c:41:40:e8:90:bb:2b:ca:a1:bd: 02:c2:c4:7d:eb:45:e0:12:88:92:f2:c1:c6:44:ad:c8:03:03: 5e:3d:58:35:4e:dd:50:42:00:4e:af:86:10:92:75:60:7e:e7: 55:2a:31:29:e1:1c:85:a9:ab:57:d7:18:23:f7:46:56:5b:e7: 2f:88:5c:49:00:19:70:9a:04:5c:ea:f5:59:8b:60:fa:e0:97: 07:40:39:f5:74:8f:31:ba:5e:0f:b3:f2:33:61:5a:71:85:3e: d5:94:86:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUwNjMwMjMxNzQyWhcNMjUwNzA3MjMxNzQyWjAYMRYwFAYD VQQDEw02ODYzMWIxNy0wM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQd29O7CMIeaf+x190eBSopdJG+2Qc9Ro+rtScgLDem9EEf/0/aLVlYqirS7 U4S24mBfYOh4vYS7oI1ou/0A9bIG95EZ3Uo/iOoeVObEjx/YkwiULu31RSbvtJ1W 4or5ez30/3FxntybPQ7AfZbf4JSNqGhO5r+XZwyqhOEulxV0jA0uASW/uhpkSigj WWkn9vyrtKnYP00MiSBUk7XlmlNxm3H2rY5rPyz8yad/AiXYUPTw/o/XzDXlkc8e By+jcs1ZiAIKaEUXWYqgvJDf9GJF97nJAoW4aem9oIdjFC4hTZoF5/kuMeCDs5df JeJD/ciXhs0epqb2ON8gsi2R2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKKu2UB VzeHWIwVUsZhy/tYuC+vMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWQ4IMCQLNJv/pZubVWdyYXxN52vDWVs0FoLX5SBQEhtcgGwCFaTVR PHYgkrOmf5tebNOEXhnZOjowtp62H3ptpKZqJ9fpPOjl3oIoQMlutzZmCn4VWaFQ Cqpnpy4vjWBM0IRcyYoo7Z4/ccBd39/f4ME9k3d8UAijA1vi7LJlyuEtJS0F/111 kIofFmK34fme/yQt2W517mxBQOiQuyvKob0CwsR960XgEoiS8sHGRK3IAwNePVg1 Tt1QQgBOr4YQknVgfudVKjEp4RyFqatX1xgj90ZWW+cviFxJABlwmgRc6vVZi2D6 4JcHQDn1dI8xul4Ps/IzYVpxhT7VlIZS -----END CERTIFICATE-----Generated at Wed Jul 2 15:52:29 2025 by rpki-client