$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft File: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json) Hash identifier: CIxOWgujyB97ADE3CvkWJDh5WjWuFJGZSPr+McbD6tg= Subject key identifier: 66:32:5E:CD:35:F6:3B:DC:94:2A:B2:30:E5:BE:4D:E6:BE:B4:9A:A5 Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft Manifest number: 04F4 Signing time: Sat 28 Jun 2025 23:16:45 +0000 Manifest this update: Sat 28 Jun 2025 23:16:45 +0000 Manifest next update: Sat 05 Jul 2025 23:16:45 +0000 Files and hashes: 1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: puPkDmfpeNZX+MtaeZ1XzTKsP+crwC+0D2lReSxxl9E=) 2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: DgUDwmkN0T0UntF7QmQLHNafJtdHs9vt+l0U9HNHmvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Validity Not Before: Jun 28 23:16:45 2025 GMT Not After : Jul 5 23:16:45 2025 GMT Subject: CN=686077dd-c3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:b2:a2:09:12:d7:56:b8:e1:0c:60:02:da: 4a:18:fa:be:b3:bf:3f:1d:76:c4:f4:89:33:6b:1f: 36:1c:3e:aa:59:e5:c5:56:bf:58:1d:a6:53:05:00: bf:17:e4:c1:0f:4d:7b:8f:d7:aa:f5:68:76:4e:1f: f1:bb:02:6c:34:2a:99:43:85:e1:42:20:ef:b9:21: af:8a:86:5c:14:ea:34:3e:c2:aa:df:19:72:ff:6b: 46:73:73:cb:b0:f3:e4:c2:e5:eb:9e:c3:4a:5b:25: 13:24:fd:9f:a4:b1:04:cf:9e:46:c1:d7:90:74:9f: 0b:69:93:3e:31:d6:bb:53:f1:b3:97:68:98:d6:c1: ff:95:4e:bf:c8:b6:c0:9a:07:d4:aa:77:12:d3:0b: 51:3e:f8:ed:3f:6f:33:17:8d:3e:27:fd:de:7d:43: e5:87:b7:4a:8b:7a:dd:ff:10:bd:8b:a2:87:da:50: 18:ed:5c:f9:0b:74:76:ac:74:b1:82:a9:2c:c1:1f: f4:71:cd:f2:67:f1:fd:c0:b5:46:a7:4b:2b:2c:5b: b6:f7:07:16:c1:be:dd:68:67:7f:be:01:b9:1f:81: a4:da:6c:5a:fb:d8:c0:cc:7d:5e:06:d2:13:dd:d1: 71:1d:51:31:b7:db:05:76:a7:03:78:13:5d:64:6f: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:5E:CD:35:F6:3B:DC:94:2A:B2:30:E5:BE:4D:E6:BE:B4:9A:A5 X509v3 Authority Key Identifier: keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:01:ad:3b:4a:c9:de:a3:c3:ca:75:b0:bc:d0:dd:a9:92:08: 30:65:ab:3b:5e:b1:55:5d:28:d2:be:1d:cf:b8:06:f7:72:53: eb:46:b2:bc:4e:b5:87:44:a3:2f:9c:e2:bd:e5:ef:11:60:a8: ec:1b:02:34:55:65:44:f2:45:62:42:f0:27:52:b8:1e:59:f3: fb:e6:98:2e:4f:fc:53:17:9b:d3:a3:b1:c4:e1:a2:7d:a8:b8: 2a:6c:5d:8e:11:bd:bc:7d:37:bc:1b:ec:4a:0a:ec:d8:ca:9e: 1a:17:2b:77:c1:2c:1c:9a:77:f9:2c:2e:c7:fb:e2:af:cb:d4: 17:d4:4d:cb:36:79:62:50:92:b0:32:3c:7a:6a:f2:14:3d:1e: de:d2:cd:9d:d9:7b:9f:98:af:ef:d0:b9:ae:2a:96:4c:dd:d0: 48:91:7a:81:3e:61:e0:9e:bd:37:a1:3e:31:74:ac:3e:9c:c1: 06:77:56:19:13:c5:c5:cc:52:d8:88:28:dd:90:6b:11:5f:25: cf:2e:6e:ac:6e:ff:78:96:8b:f9:05:92:81:d3:ff:fe:36:66: e9:06:0f:a7:71:3f:d4:fa:6f:10:9b:f5:b5:0d:ed:a8:87:84: 10:a6:d4:a3:0d:b6:ee:b7:48:79:ec:f8:02:4b:a9:50:30:97: 14:7f:fc:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy NjA1NzUzRUYwHhcNMjUwNjI4MjMxNjQ1WhcNMjUwNzA1MjMxNjQ1WjAYMRYwFAYD VQQDEw02ODYwNzdkZC1jM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sCyogkS11a44QxgAtpKGPq+s78/HXbE9Ikzax82HD6qWeXFVr9YHaZTBQC/ F+TBD017j9eq9Wh2Th/xuwJsNCqZQ4XhQiDvuSGvioZcFOo0PsKq3xly/2tGc3PL sPPkwuXrnsNKWyUTJP2fpLEEz55GwdeQdJ8LaZM+Mda7U/Gzl2iY1sH/lU6/yLbA mgfUqncS0wtRPvjtP28zF40+J/3efUPlh7dKi3rd/xC9i6KH2lAY7Vz5C3R2rHSx gqkswR/0cc3yZ/H9wLVGp0srLFu29wcWwb7daGd/vgG5H4Gk2mxa+9jAzH1eBtIT 3dFxHVExt9sFdqcDeBNdZG8PxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYyXs01 9jvclCqyMOW+Tea+tJqlMB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQwQy84MTRGNkQwNDFBMUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdv NGJMZFlQaVBZN29tQlhVLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEAa07Ssneo8PKdbC80N2pkggwZas7XrFVXSjSvh3PuAb3clPrRrK8 TrWHRKMvnOK95e8RYKjsGwI0VWVE8kViQvAnUrgeWfP75pguT/xTF5vTo7HE4aJ9 qLgqbF2OEb28fTe8G+xKCuzYyp4aFyt3wSwcmnf5LC7H++Kvy9QX1E3LNnliUJKw Mjx6avIUPR7e0s2d2XufmK/v0LmuKpZM3dBIkXqBPmHgnr03oT4xdKw+nMEGd1YZ E8XFzFLYiCjdkGsRXyXPLm6sbv94lov5BZKB0//+NmbpBg+ncT/U+m8Qm/W1De2o h4QQptSjDbbut0h57PgCS6lQMJcUf/zg -----END CERTIFICATE-----Generated at Mon Jun 30 11:18:59 2025 by rpki-client