$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft File: M4vXge0h5dsUBXs3uQOipAjiQgI.mft (raw, json) Hash identifier: mVCJ5nqiXjTIgvpfc0tSsQm+G1rp+QhDZewIABUDPkY= Subject key identifier: 4E:53:DC:17:DD:43:DF:19:42:67:4D:BF:F4:1B:96:CD:FE:E4:8D:C4 Authority key identifier: 33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 Certificate issuer: /CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft Manifest number: 34AF Signing time: Wed 02 Jul 2025 14:55:07 +0000 Manifest this update: Wed 02 Jul 2025 14:55:07 +0000 Manifest next update: Wed 09 Jul 2025 14:55:07 +0000 Files and hashes: 1: M4vXge0h5dsUBXs3uQOipAjiQgI.crl (hash: h1KDVuhWIgvYfJOC6ldXb5df7xjVuiGNOsHei3ytZV8=) 2: 5F114FB2C28811EB8BB7245FC4F9AE02.roa (hash: NTEzu1pSF4sdWy2GcCcEDp/gqX9S2zLnxs3jJP1dXh4=) 3: 5DF144D4C28811EB8BB7245FC4F9AE02.roa (hash: MtAXGpGxLYC9TQTRbnJyAY8nZ+XjjJVEjf45TgfTD7c=) 4: 5CD84EBCC28811EB8BB7245FC4F9AE02.roa (hash: +MuzD9gM5AUhBlmI5x0tCQas+CPjWTVYziN5P4guwtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E38C1, serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Validity Not Before: Jul 2 14:55:07 2025 GMT Not After : Jul 9 14:55:07 2025 GMT Subject: CN=6865484b-661c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:c3:a3:80:93:a2:8c:fa:ab:7b:c0:b4:20: 56:8a:dd:35:f5:9c:16:2e:fa:1e:72:ae:3d:35:64: df:87:a9:92:cf:7c:c1:ed:d8:84:de:89:62:56:c2: 77:77:ae:71:12:35:a2:f0:6d:9f:a2:30:0f:1c:2c: fe:84:bd:f0:d1:21:da:b9:c1:b0:81:af:e9:5d:3d: 29:ba:c5:31:be:87:80:d6:d0:c9:29:d9:52:62:4e: 93:99:97:e5:b0:8d:4d:e8:9b:32:12:6f:2e:02:1d: 70:3a:83:29:ad:bc:45:fd:e0:e5:69:50:fd:98:14: 62:b1:25:93:85:f6:c2:59:c7:1b:1f:14:8c:01:2d: 63:ba:3b:76:26:f0:f6:96:ef:c9:86:97:38:92:84: 56:1b:01:06:c3:69:03:83:80:7a:dd:a8:2d:1c:2d: a1:91:64:8f:0b:89:01:e5:bf:9e:a9:bf:00:a9:a6: 45:66:fb:4e:4d:71:e7:91:14:f0:87:20:9a:34:24: bb:29:f4:d7:8e:0b:8a:ca:91:cc:86:7d:26:b1:bb: f3:cf:21:aa:fc:e2:d3:cb:4d:06:f9:f0:48:92:0a: 66:5c:fa:cb:ca:13:53:a6:2d:1d:fa:9f:c7:c5:ac: 7a:c9:39:5f:1e:75:e7:65:b7:e3:68:7b:fe:14:99: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:53:DC:17:DD:43:DF:19:42:67:4D:BF:F4:1B:96:CD:FE:E4:8D:C4 X509v3 Authority Key Identifier: keyid:33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1a:1b:c3:e3:11:b9:56:ad:20:fb:7a:31:27:92:93:91:c1: 5c:68:cd:1d:31:41:59:f7:29:e7:11:72:b9:7f:1b:39:27:3e: 00:9e:65:f8:4e:92:14:be:40:12:0b:e5:0d:10:36:e1:a9:7f: ac:84:11:bb:46:b3:d7:a7:6a:d6:4b:63:c1:80:ef:de:ae:cd: 95:a8:08:b7:ed:05:2d:c2:42:e9:06:ff:01:cf:c8:b9:4e:f7: 3a:79:f2:4b:a6:6f:64:c2:dc:9d:6d:2f:f5:4d:dd:0f:58:e6: 11:a8:3f:6f:c9:8e:99:f9:a9:8c:b4:0f:e2:d4:b6:13:82:69: 8a:f1:f6:8a:98:de:ee:c2:fb:da:44:a3:d1:cd:f2:70:f8:c7: a4:df:1f:49:b0:ff:ca:4f:76:20:e5:3a:0f:c1:8e:c1:d8:09: 11:d1:f6:65:b0:d0:aa:21:a9:39:84:b7:88:09:6a:c0:2c:e8: 6d:2b:f2:ac:d2:50:c2:d0:0d:35:a4:13:fc:56:ff:ca:b2:15: 69:6c:28:a2:25:56:ee:b6:b4:71:d0:48:25:b2:02:e2:fc:f7: 89:ea:0b:df:87:38:27:0e:cc:04:05:42:ca:b0:3a:b6:f4:17: 34:18:ba:af:2d:c4:00:19:e0:6f:c0:3c:8d:54:6a:66:74:79: 97:20:d1:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4QzExMTAvBgNVBAUTKDMzOEJENzgxRUQyMUU1REIxNDA1N0IzN0I5MDNBMkE0 MDhFMjQyMDIwHhcNMjUwNzAyMTQ1NTA3WhcNMjUwNzA5MTQ1NTA3WjAYMRYwFAYD VQQDEw02ODY1NDg0Yi02NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgzDo4CTooz6q3vAtCBWit019ZwWLvoecq49NWTfh6mSz3zB7diE3oliVsJ3 d65xEjWi8G2fojAPHCz+hL3w0SHaucGwga/pXT0pusUxvoeA1tDJKdlSYk6TmZfl sI1N6JsyEm8uAh1wOoMprbxF/eDlaVD9mBRisSWThfbCWccbHxSMAS1jujt2JvD2 lu/Jhpc4koRWGwEGw2kDg4B63agtHC2hkWSPC4kB5b+eqb8AqaZFZvtOTXHnkRTw hyCaNCS7KfTXjguKypHMhn0msbvzzyGq/OLTy00G+fBIkgpmXPrLyhNTpi0d+p/H xax6yTlfHnXnZbfjaHv+FJld/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5T3Bfd Q98ZQmdNv/Qbls3+5I3EMB8GA1UdIwQYMBaAFDOL14HtIeXbFAV7N7kDoqQI4kIC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzhDMS9FNzVBQzI2MjFE OTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVkc1VCWHMzdVFPaXBBamlR Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL000dlhnZTBoNWRzVUJYczN1UU9pcEFqaVFnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzhDMS9FNzVBQzI2MjFEOTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVk c1VCWHMzdVFPaXBBamlRZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKGhvD4xG5Vq0g+3oxJ5KTkcFcaM0dMUFZ9ynnEXK5fxs5Jz4AnmX4 TpIUvkASC+UNEDbhqX+shBG7RrPXp2rWS2PBgO/ers2VqAi37QUtwkLpBv8Bz8i5 Tvc6efJLpm9kwtydbS/1Td0PWOYRqD9vyY6Z+amMtA/i1LYTgmmK8faKmN7uwvva RKPRzfJw+Mek3x9JsP/KT3Yg5ToPwY7B2AkR0fZlsNCqIak5hLeICWrALOhtK/Ks 0lDC0A01pBP8Vv/KshVpbCiiJVbutrRx0EglsgLi/PeJ6gvfhzgnDswEBULKsDq2 9Bc0GLqvLcQAGeBvwDyNVGpmdHmXING+ -----END CERTIFICATE-----Generated at Fri Jul 4 07:37:32 2025 by rpki-client