$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: R79+G47IOuqidbMj107lo5OoOtUbxr/uT/MZiE5zBLc= Subject key identifier: FF:B7:60:01:58:C4:86:E1:40:2A:2E:CB:43:CF:49:9F:BF:50:08:23 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 013F Signing time: Thu 03 Jul 2025 04:28:49 +0000 Manifest this update: Thu 03 Jul 2025 04:28:48 +0000 Manifest next update: Thu 10 Jul 2025 04:28:48 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: YI2/d4BuojdfSWn55actwtuQuKXj2E0vP2N8tiMO1Io=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Jul 3 04:28:48 2025 GMT Not After : Jul 10 04:28:48 2025 GMT Subject: CN=68660701-753e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:5e:b0:f3:ba:c6:6d:29:63:2d:9c:d9:52: 11:c1:55:dc:60:76:56:01:b5:7f:81:f8:db:1e:ae: 92:29:0f:bf:06:d2:1d:62:6e:5f:d2:40:02:eb:86: 69:27:e5:aa:8b:cc:e0:08:67:e3:18:5c:09:20:93: 63:a7:6e:f3:60:8f:62:c8:f0:14:b0:0c:2e:80:bf: aa:b5:29:2a:fe:0c:7d:fa:18:40:94:0a:9e:19:2f: 1a:56:d7:4e:7e:d7:d9:a5:1f:7d:7d:7e:35:35:2d: b3:10:f7:bf:e1:80:ed:10:bd:51:3a:60:eb:8a:e2: ae:f7:cb:82:7e:4a:7f:4f:00:b3:86:bd:cb:99:cd: 61:be:fd:d0:f4:29:fa:3b:e5:98:2f:47:e9:14:5b: c9:71:bd:91:74:78:17:9f:81:6b:5b:08:c2:a6:6d: a6:ab:04:79:c9:46:5a:97:a2:40:d9:90:20:d9:49: 2d:26:f6:39:1e:63:d3:b1:e9:38:36:d1:f4:9b:70: a1:46:b3:2a:cf:63:71:b2:34:af:4d:d5:a4:96:7d: f5:3e:18:61:73:58:49:ec:ff:ca:7a:d8:7b:13:d5: 39:4e:49:ae:f0:4a:ad:09:1e:e8:e5:4c:78:09:bf: 92:69:69:bd:b2:3f:6e:9e:7c:a3:38:47:d6:0b:5c: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B7:60:01:58:C4:86:E1:40:2A:2E:CB:43:CF:49:9F:BF:50:08:23 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a4:fe:d7:0a:d0:d3:2e:80:05:e9:4f:36:cc:be:12:f6:3e: 68:ba:3c:6d:99:d2:51:be:bd:16:a0:5e:4f:eb:bd:0e:4e:08: d3:96:f3:88:10:e3:92:c4:50:e9:9c:6c:97:79:ae:46:0f:f0: 3e:f9:94:76:5d:aa:9a:9e:ca:34:83:27:c8:f2:8c:5f:a3:df: e7:72:de:c0:21:be:d5:22:91:70:a0:9f:de:43:75:0c:f1:55: 82:d5:05:49:2f:e1:b0:e5:04:60:b8:c2:32:ce:1c:9a:6d:f8: 67:32:e4:ca:f6:75:02:2b:d0:f9:d2:fa:86:82:c6:c8:00:d2: 0e:3e:6c:ac:9e:23:48:30:8a:d5:19:93:81:7c:57:15:c1:e3: 6c:69:59:62:cd:80:d4:0c:b8:66:03:f2:1c:47:a1:10:2b:af: 03:1b:4c:1b:9b:21:bc:7c:90:2f:ba:a4:56:b1:12:a3:d4:65: fc:5f:fa:f2:69:90:c5:bf:cd:e6:7b:ee:6c:e0:b2:05:dd:40: 8d:d5:73:48:7d:9b:00:93:4d:72:a0:3e:9d:1e:46:5a:2b:f1: f3:ef:b7:ff:50:25:04:ab:82:7a:e7:77:0b:de:96:0d:93:75: 87:a6:2b:d1:c8:58:fb:2a:7f:35:25:33:b5:03:f6:e7:7b:5a: e3:37:ef:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUwNzAzMDQyODQ4WhcNMjUwNzEwMDQyODQ4WjAYMRYwFAYD VQQDEw02ODY2MDcwMS03NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn1esPO6xm0pYy2c2VIRwVXcYHZWAbV/gfjbHq6SKQ+/BtIdYm5f0kAC64Zp J+Wqi8zgCGfjGFwJIJNjp27zYI9iyPAUsAwugL+qtSkq/gx9+hhAlAqeGS8aVtdO ftfZpR99fX41NS2zEPe/4YDtEL1ROmDriuKu98uCfkp/TwCzhr3Lmc1hvv3Q9Cn6 O+WYL0fpFFvJcb2RdHgXn4FrWwjCpm2mqwR5yUZal6JA2ZAg2UktJvY5HmPTsek4 NtH0m3ChRrMqz2NxsjSvTdWkln31Phhhc1hJ7P/Keth7E9U5Tkmu8EqtCR7o5Ux4 Cb+SaWm9sj9unnyjOEfWC1xQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+3YAFY xIbhQCouy0PPSZ+/UAgjMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8pP7XCtDTLoAF6U82zL4S9j5oujxtmdJRvr0WoF5P670OTgjTlvOI EOOSxFDpnGyXea5GD/A++ZR2Xaqanso0gyfI8oxfo9/nct7AIb7VIpFwoJ/eQ3UM 8VWC1QVJL+Gw5QRguMIyzhyabfhnMuTK9nUCK9D50vqGgsbIANIOPmysniNIMIrV GZOBfFcVweNsaVlizYDUDLhmA/IcR6EQK68DG0wbmyG8fJAvuqRWsRKj1GX8X/ry aZDFv83me+5s4LIF3UCN1XNIfZsAk01yoD6dHkZaK/Hz77f/UCUEq4J653cL3pYN k3WHpivRyFj7Kn81JTO1A/bne1rjN+/m -----END CERTIFICATE-----Generated at Fri Jul 4 10:15:39 2025 by rpki-client