$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: pdimA2gbqwh5WlXvGBRQy28FbzunZ0ajDVU1Rx88WN0= Subject key identifier: B9:1F:7F:4B:C9:F1:A9:28:E9:55:9A:C5:50:37:3A:50:FA:A1:F6:A7 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B1A Signing time: Mon 30 Jun 2025 19:24:45 +0000 Manifest this update: Mon 30 Jun 2025 19:24:45 +0000 Manifest next update: Mon 07 Jul 2025 19:24:45 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: YnzI/jmTTdv+fNnSSRwWEuRCVnJlzmpW0DYpTOdOOW0=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Jun 30 19:24:45 2025 GMT Not After : Jul 7 19:24:45 2025 GMT Subject: CN=6862e47d-9cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:46:90:ea:6a:60:40:4e:86:c2:8e:87:73: 65:a8:c4:01:39:8b:a3:99:23:c7:71:0c:f9:29:27: b1:78:8f:d6:77:24:d3:a1:3d:6d:2d:06:f2:64:5a: f5:e9:5b:13:14:3b:af:0d:be:db:3f:dc:b7:4e:f3: 1c:65:a9:eb:a9:d6:8e:ad:e4:74:3f:8c:30:b2:0e: cf:28:6d:3a:3d:2d:08:0b:ec:be:c7:b2:35:c0:b9: c8:65:5e:0a:08:1a:87:bd:cb:2c:1c:a4:a8:c4:50: 0d:36:00:86:8a:e9:0f:6f:b2:98:0f:17:d2:8d:73: e0:bb:bc:32:c7:0a:6f:db:19:31:09:6a:a2:96:90: 20:11:b3:7d:5a:72:9e:a5:39:86:6f:3b:7a:19:e7: d5:8e:42:f6:5d:7f:07:f3:08:27:ef:04:9e:2c:33: e3:2a:50:79:f4:be:e3:ae:3a:ee:43:1e:cb:bf:9b: 52:58:95:9c:28:fa:ad:55:ad:f8:9a:cd:33:bc:d1: ad:bb:2b:10:81:bc:cd:01:5f:21:2c:bb:0e:ed:19: cb:1c:3f:a1:c5:44:e9:5d:e5:9d:14:f5:68:37:86: 1b:3f:1f:22:64:05:ab:36:95:80:ef:c0:0a:42:ed: ca:56:08:5f:18:a9:18:52:58:19:b1:89:e6:ea:3b: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:7F:4B:C9:F1:A9:28:E9:55:9A:C5:50:37:3A:50:FA:A1:F6:A7 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:4a:39:a0:e6:70:d0:f0:ea:9f:a6:4a:07:b6:b7:7f:a4:cb: 09:ff:83:c8:92:74:cc:8d:a3:92:03:15:ca:94:11:c5:42:30: bf:70:32:07:8f:5a:a3:7f:11:7d:b4:57:76:35:b5:2f:0c:6f: 28:cb:a2:7a:c2:f7:26:6c:d5:28:eb:e7:46:db:65:c6:7c:d5: 6b:5d:17:91:2a:40:63:a4:4d:6d:13:7d:95:2f:56:0f:ea:f9: 46:55:00:a8:d2:63:36:44:ba:4f:4e:9c:f7:8a:b9:80:18:59: 89:c3:08:3e:ee:cc:2e:3e:ed:bb:19:c4:fc:cb:12:5a:71:8f: 5a:7b:08:e7:45:cf:f3:1e:ce:3c:22:cd:fd:d2:86:1e:36:0a: 66:ca:51:e1:ca:d4:08:6d:b6:2d:e3:56:78:70:f3:a0:29:bf: b6:74:5e:56:f4:83:99:ce:d1:74:cb:6b:a2:65:d8:fc:04:36: b4:1b:fb:e2:63:7f:13:f8:41:65:dd:e5:d6:31:d2:78:0f:e3: 5e:37:9b:3b:d1:17:e5:48:99:e7:01:36:7a:86:e8:b6:a5:5a: 50:d9:fc:27:29:be:16:ea:b9:c4:53:ad:11:56:90:e7:bb:55: 9a:8a:9a:d6:b7:e4:11:e7:c2:60:91:80:2e:4d:dd:0f:d6:db: 3b:c1:ab:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUwNjMwMTkyNDQ1WhcNMjUwNzA3MTkyNDQ1WjAYMRYwFAYD VQQDEw02ODYyZTQ3ZC05Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWxGkOpqYEBOhsKOh3NlqMQBOYujmSPHcQz5KSexeI/WdyTToT1tLQbyZFr1 6VsTFDuvDb7bP9y3TvMcZanrqdaOreR0P4wwsg7PKG06PS0IC+y+x7I1wLnIZV4K CBqHvcssHKSoxFANNgCGiukPb7KYDxfSjXPgu7wyxwpv2xkxCWqilpAgEbN9WnKe pTmGbzt6GefVjkL2XX8H8wgn7wSeLDPjKlB59L7jrjruQx7Lv5tSWJWcKPqtVa34 ms0zvNGtuysQgbzNAV8hLLsO7RnLHD+hxUTpXeWdFPVoN4YbPx8iZAWrNpWA78AK Qu3KVghfGKkYUlgZsYnm6juVQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkff0vJ 8ako6VWaxVA3OlD6ofanMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQSjmg5nDQ8OqfpkoHtrd/pMsJ/4PIknTMjaOSAxXKlBHFQjC/cDIH j1qjfxF9tFd2NbUvDG8oy6J6wvcmbNUo6+dG22XGfNVrXReRKkBjpE1tE32VL1YP 6vlGVQCo0mM2RLpPTpz3irmAGFmJwwg+7swuPu27GcT8yxJacY9aewjnRc/zHs48 Is390oYeNgpmylHhytQIbbYt41Z4cPOgKb+2dF5W9IOZztF0y2uiZdj8BDa0G/vi Y38T+EFl3eXWMdJ4D+NeN5s70RflSJnnATZ6hui2pVpQ2fwnKb4W6rnEU60RVpDn u1WaiprWt+QR58JgkYAuTd0P1ts7wav8 -----END CERTIFICATE-----Generated at Tue Jul 1 19:10:32 2025 by rpki-client