$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json) Hash identifier: uKHkWpQRi5hVDbNvfZuijGFZK+gQTNrGPXE6pfBa/8Y= Subject key identifier: 7D:AE:FE:34:86:DC:26:BD:43:30:10:53:90:E6:29:D3:09:7B:E1:F6 Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Certificate serial: 1186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft Manifest number: 117D Signing time: Wed 02 Jul 2025 17:25:32 +0000 Manifest this update: Wed 02 Jul 2025 17:25:31 +0000 Manifest next update: Wed 09 Jul 2025 17:25:31 +0000 Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: Z3ybzCRh2/BJF+gSRq0zSSta6sMd5kWwvsEtzrZF2ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4486 (0x1186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF645, serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Validity Not Before: Jul 2 17:25:31 2025 GMT Not After : Jul 9 17:25:31 2025 GMT Subject: CN=68656b8c-34ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:5e:e9:1f:23:c3:bc:d4:0e:c1:50:b4:f1: da:45:95:05:0f:d1:1d:18:e2:40:f8:3b:a5:f1:ac: 3d:5c:6d:35:53:c0:18:b9:c4:e3:64:93:32:03:e3: aa:fe:b4:ca:ff:fe:5e:03:02:f9:fc:76:83:54:fc: 39:89:ab:76:8d:c0:bd:c1:a8:03:1e:6a:94:28:dc: 43:34:3a:5e:1a:69:ea:6e:e2:71:0c:68:50:27:c1: e1:c1:c6:f5:ec:02:cd:54:24:11:5a:67:69:b1:bb: 48:16:db:d2:e6:26:11:17:84:c8:bc:f0:f5:1b:2b: 61:f9:bc:c5:bc:e1:dc:c9:21:0d:0b:39:20:c5:09: 7f:68:f0:d0:c0:df:92:11:9e:0a:0b:6c:c6:24:ee: e3:64:0c:81:5c:7d:b7:08:77:89:11:02:7b:a2:ca: 1e:aa:70:66:dd:6e:ab:b3:67:4a:c5:4c:31:82:8a: 3c:6e:2e:d4:ef:25:ea:09:30:28:73:ed:2e:33:fd: e2:41:4d:20:4e:f3:ad:86:47:31:d0:d2:16:aa:e7: e6:65:1a:98:68:44:52:fa:eb:c1:99:fe:e4:c9:40: 4b:99:35:81:1d:87:ea:c0:f8:6b:74:b2:ed:33:b5: d0:dc:b8:b1:72:b7:68:e0:b9:bb:5a:04:92:9e:23: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AE:FE:34:86:DC:26:BD:43:30:10:53:90:E6:29:D3:09:7B:E1:F6 X509v3 Authority Key Identifier: keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b9:a7:1c:0d:85:6f:6a:d0:0a:68:79:4e:92:1f:bc:f8:b3: b4:2e:48:a4:a6:df:e6:b5:92:16:2c:eb:2a:06:2d:1a:9a:2c: 6d:95:62:5e:35:93:db:63:1c:bb:bf:99:76:85:75:a2:29:7a: cc:21:19:55:4f:d6:7a:60:72:01:e8:69:ab:0e:4e:03:4f:fe: 16:a9:a6:c6:80:05:07:da:46:e2:ec:c7:da:12:69:d2:31:e0: e7:a9:8f:66:c9:81:bb:9b:4c:49:9d:01:de:63:c5:3e:30:d0: e9:46:9e:5f:4b:e5:e9:45:9b:a3:4e:53:23:85:6e:58:d3:cb: 61:9d:c1:60:b2:42:3e:7b:55:92:70:60:fc:7c:19:15:8e:dd: 68:23:1c:99:14:04:ff:d3:45:ad:2d:48:2e:1b:5d:c6:4f:14: 26:cb:0b:74:1f:55:17:ed:b8:26:f6:01:02:c7:58:b3:68:31: 85:84:7c:5e:fe:d2:93:78:72:2e:4e:fa:a9:da:78:cf:10:8a: 5e:7c:34:6f:d7:96:39:bb:03:c6:52:ce:72:48:8b:d0:12:df: 6c:7c:20:78:5d:0c:20:7e:34:9f:48:21:92:1d:89:8e:18:04: 74:c2:ee:9b:44:a9:36:ea:a3:1f:51:da:dd:d6:46:0b:0d:0d: 7e:21:5e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY2NDUxMTAvBgNVBAUTKEUyM0U1Njg4M0E2RTM3QURFNTIyM0M0MTNCM0IzQjBG NzgxQkM5MjkwHhcNMjUwNzAyMTcyNTMxWhcNMjUwNzA5MTcyNTMxWjAYMRYwFAYD VQQDEw02ODY1NmI4Yy0zNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqxe6R8jw7zUDsFQtPHaRZUFD9EdGOJA+Dul8aw9XG01U8AYucTjZJMyA+Oq /rTK//5eAwL5/HaDVPw5iat2jcC9wagDHmqUKNxDNDpeGmnqbuJxDGhQJ8Hhwcb1 7ALNVCQRWmdpsbtIFtvS5iYRF4TIvPD1Gyth+bzFvOHcySENCzkgxQl/aPDQwN+S EZ4KC2zGJO7jZAyBXH23CHeJEQJ7osoeqnBm3W6rs2dKxUwxgoo8bi7U7yXqCTAo c+0uM/3iQU0gTvOthkcx0NIWqufmZRqYaERS+uvBmf7kyUBLmTWBHYfqwPhrdLLt M7XQ3Lixcrdo4Lm7WgSSniPqDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2u/jSG 3Ca9QzAQU5DmKdMJe+H2MB8GA1UdIwQYMBaAFOI+Vog6bjet5SI8QTs7Ow94G8kp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjY0NS9BQjE2RTU1MjAx RjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42M2xJanhCT3pzN0QzZ2J5 U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqNVdpRHB1TjYzbElqeEJPenM3RDNnYnlTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjY0NS9BQjE2RTU1MjAxRjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42 M2xJanhCT3pzN0QzZ2J5U2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsuaccDYVvatAKaHlOkh+8+LO0Lkikpt/mtZIWLOsqBi0amixtlWJe NZPbYxy7v5l2hXWiKXrMIRlVT9Z6YHIB6GmrDk4DT/4WqabGgAUH2kbi7MfaEmnS MeDnqY9myYG7m0xJnQHeY8U+MNDpRp5fS+XpRZujTlMjhW5Y08thncFgskI+e1WS cGD8fBkVjt1oIxyZFAT/00WtLUguG13GTxQmywt0H1UX7bgm9gECx1izaDGFhHxe /tKTeHIuTvqp2njPEIpefDRv15Y5uwPGUs5ySIvQEt9sfCB4XQwgfjSfSCGSHYmO GAR0wu6bRKk26qMfUdrd1kYLDQ1+IV7x -----END CERTIFICATE-----Generated at Thu Jul 3 21:25:36 2025 by rpki-client