$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: asqTPQASWxMDTSv3wziObdcJ+TTvTtkAv3+E+ZpZd9E= Subject key identifier: 49:06:4B:0D:10:A7:26:0A:D6:16:64:1D:E1:F8:21:68:DB:EF:C0:57 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 012F Signing time: Tue 01 Jul 2025 05:00:31 +0000 Manifest this update: Tue 01 Jul 2025 05:00:31 +0000 Manifest next update: Tue 08 Jul 2025 05:00:31 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: w4zCG8A+r6oVKtkL5TIaBuqjEEBKiK2CYgyrIuOufww=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Jul 1 05:00:31 2025 GMT Not After : Jul 8 05:00:31 2025 GMT Subject: CN=68636b6f-6a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:a4:16:2e:32:c0:f5:82:dd:64:cf:42:12: cd:ad:4c:2c:ab:9c:6e:a9:83:57:42:4a:d7:81:57: 1f:a3:d5:5b:12:34:95:4a:15:1a:4d:ea:80:47:c9: 03:12:88:3f:88:23:cc:19:d6:b0:f5:98:87:a1:e7: 73:dc:db:b6:6e:c0:a9:35:41:f3:ff:10:ee:7a:33: b5:1d:1c:f9:b7:d5:e5:62:3e:4b:a1:df:dd:37:b6: d2:54:95:4f:b5:65:3d:eb:aa:e3:9c:9b:df:08:43: 97:91:82:0c:d6:71:7a:1e:f6:09:fb:90:88:5a:38: ea:27:53:75:26:68:37:94:f7:b4:49:bc:f9:af:f9: bc:90:03:36:a3:82:c7:85:53:8a:31:8d:e1:f0:b0: a5:a9:72:cc:69:61:96:9f:53:2c:a4:ef:42:40:15: 7c:f5:b9:94:a0:38:0e:64:c2:91:a5:1c:d3:0f:24: 75:09:6c:1c:d4:9a:56:bb:5c:c6:de:8a:de:40:09: eb:98:3a:60:1a:28:6f:70:a5:39:fa:de:3b:4e:b5: ff:4d:44:bc:33:7a:58:32:bd:18:3d:df:a2:6d:58: 17:8f:56:c8:ea:91:f2:03:ef:1e:ab:ab:c9:96:c8: 14:23:ad:3a:d2:a6:11:09:12:a4:2d:a9:b5:27:8a: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:06:4B:0D:10:A7:26:0A:D6:16:64:1D:E1:F8:21:68:DB:EF:C0:57 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:75:ef:e0:5e:ac:bb:ed:20:d3:d3:08:57:4b:9e:cc:28:12: 6c:d2:69:c8:03:c6:73:72:77:0e:90:40:04:28:ad:97:4f:c4: 0f:e4:86:a2:bb:85:c1:b4:0e:23:25:91:d9:8a:ad:75:82:fc: d4:eb:02:cf:4d:fe:c2:48:c9:aa:a0:4f:f0:91:b3:0c:13:b9: e2:d0:ac:d2:6a:cd:fe:6e:88:27:c5:db:3c:95:af:61:95:d7: 16:4f:6a:b8:b7:0e:87:3d:86:ef:89:32:3c:0d:47:ed:ad:59: 7a:fa:84:97:3d:2a:bb:15:20:75:f0:11:d4:b1:f9:69:d5:2a: e4:e2:59:0b:5c:77:e1:09:d6:49:87:72:71:be:21:6a:1b:28: d2:da:d4:8a:ff:66:4c:a3:7f:35:3e:85:8b:57:d2:2c:19:60: 87:9a:c3:78:da:b0:ee:af:29:bb:30:be:ea:f3:ed:15:05:bb: 58:6f:09:e7:d8:42:90:c6:6e:50:f8:8e:e7:5c:e5:11:3f:97: b0:79:ef:f9:f5:b9:77:f8:4a:22:c8:aa:b2:1e:b2:08:da:2a: a9:2d:2b:af:ff:b4:b6:2f:71:90:23:c3:8e:f9:90:2f:b5:f5: 42:68:7e:d8:f0:2f:8a:2f:2e:c9:21:1e:89:74:16:d7:2b:d6: 67:6c:4d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUwNzAxMDUwMDMxWhcNMjUwNzA4MDUwMDMxWjAYMRYwFAYD VQQDEw02ODYzNmI2Zi02YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY2kFi4ywPWC3WTPQhLNrUwsq5xuqYNXQkrXgVcfo9VbEjSVShUaTeqAR8kD Eog/iCPMGdaw9ZiHoedz3Nu2bsCpNUHz/xDuejO1HRz5t9XlYj5Lod/dN7bSVJVP tWU966rjnJvfCEOXkYIM1nF6HvYJ+5CIWjjqJ1N1Jmg3lPe0Sbz5r/m8kAM2o4LH hVOKMY3h8LClqXLMaWGWn1MspO9CQBV89bmUoDgOZMKRpRzTDyR1CWwc1JpWu1zG 3oreQAnrmDpgGihvcKU5+t47TrX/TUS8M3pYMr0YPd+ibVgXj1bI6pHyA+8eq6vJ lsgUI6060qYRCRKkLam1J4q9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkGSw0Q pyYK1hZkHeH4IWjb78BXMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4de/gXqy77SDT0whXS57MKBJs0mnIA8ZzcncOkEAEKK2XT8QP5Iai u4XBtA4jJZHZiq11gvzU6wLPTf7CSMmqoE/wkbMME7ni0KzSas3+bognxds8la9h ldcWT2q4tw6HPYbviTI8DUftrVl6+oSXPSq7FSB18BHUsflp1Srk4lkLXHfhCdZJ h3JxviFqGyjS2tSK/2ZMo381PoWLV9IsGWCHmsN42rDurym7ML7q8+0VBbtYbwnn 2EKQxm5Q+I7nXOURP5ewee/59bl3+EoiyKqyHrII2iqpLSuv/7S2L3GQI8OO+ZAv tfVCaH7Y8C+KLy7JIR6JdBbXK9ZnbE3M -----END CERTIFICATE-----Generated at Tue Jul 1 20:36:23 2025 by rpki-client