$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json) Hash identifier: YLbEB3ect0yog25U4QTbDVDrCPO9wzZjpqiWdVyIa08= Subject key identifier: 8D:2A:7D:1D:10:55:2E:3D:17:CA:C0:8D:00:D8:4F:F9:56:15:BB:84 Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 Certificate issuer: /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft Manifest number: 078B Signing time: Wed 02 Jul 2025 21:40:29 +0000 Manifest this update: Wed 02 Jul 2025 21:40:28 +0000 Manifest next update: Wed 09 Jul 2025 21:40:28 +0000 Files and hashes: 1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: CaSCp+aUXLETeiOkjIiSvZ4epkQbAd1iKc6EAAgwk/4=) 2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: HDw255HT5Qq+WExObAcGQTxVC/IMJorhiCibpd+wpAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Validity Not Before: Jul 2 21:40:28 2025 GMT Not After : Jul 9 21:40:28 2025 GMT Subject: CN=6865a74d-b214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:bc:d0:c3:c4:56:05:d7:21:36:6d:9a:bb: b3:b0:71:52:2a:e7:47:c6:79:ad:b3:2d:58:77:84: 29:d9:e0:a4:e5:8a:97:08:1d:5a:6d:f8:8e:32:40: 73:eb:80:75:a2:59:94:07:ca:be:d4:3a:1f:c0:ff: 30:25:f5:c9:d4:b8:d0:54:2e:5d:c2:61:3d:92:7c: 96:1b:bb:27:da:74:a7:b6:e9:94:e7:62:65:57:8d: 8f:ef:0c:9e:3e:dd:9a:9a:0c:86:e2:cc:24:5d:59: fb:a2:b1:92:26:3c:01:55:98:3e:15:3c:32:cc:17: 63:ea:75:9b:7f:d6:eb:84:48:e1:4a:b2:8d:72:e9: 24:42:3b:39:5f:a1:88:81:8e:18:02:95:82:db:bf: 20:53:ea:71:40:ac:9e:7f:20:f4:ee:dc:10:6c:7e: 6c:80:ed:ec:f8:e4:23:39:d5:c5:84:37:fb:f5:4c: 4b:bf:8d:2c:56:d0:35:54:8f:36:86:a1:88:dc:d8: ca:62:29:f1:24:2b:ca:b9:e0:88:19:55:c8:81:d6: 98:2f:fb:08:eb:c6:15:0a:99:02:44:d1:3d:1f:16: f7:13:08:47:4a:02:95:21:dc:e3:44:64:a6:70:d1: ab:ff:29:84:75:c6:7d:d4:59:e4:78:d1:19:93:2d: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2A:7D:1D:10:55:2E:3D:17:CA:C0:8D:00:D8:4F:F9:56:15:BB:84 X509v3 Authority Key Identifier: keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:08:b7:f7:1a:5d:a7:b4:c8:d5:68:a6:63:59:98:83:88:ab: cf:f0:72:92:9f:da:d1:27:47:be:5c:94:d4:35:17:53:7b:a4: 14:18:f3:32:56:5b:bc:35:77:68:46:6c:0e:e1:6d:19:85:16: 24:c6:61:6a:86:3b:85:4f:1e:00:05:58:30:4d:cc:c5:c3:48: 41:ea:6f:fd:70:c5:71:34:f3:a0:98:6d:54:81:ed:d9:bf:ed: 91:73:76:54:8d:a2:54:2b:2c:92:d4:e1:c4:3a:27:46:00:e2: 43:75:1e:20:82:61:76:4d:26:0f:2f:71:83:cd:56:ee:11:b6: 39:cd:aa:3d:2d:02:87:fa:bd:83:23:c8:f9:07:f7:f5:c2:6d: e0:d8:8e:8a:3b:a7:9a:86:7c:5d:44:58:3c:ca:97:c1:7b:91: 13:c0:29:f1:9c:dd:bb:c3:cb:61:fd:5c:87:13:e5:ee:4f:1b: 7f:7b:fc:b5:89:57:54:9b:38:d6:b6:39:f7:f2:03:2f:f5:2c: fc:8e:c6:0b:f5:3f:08:95:91:ab:18:f0:24:11:f8:f1:df:19: f3:7b:5d:59:43:56:06:73:d4:2a:27:d0:82:1a:7a:c5:bb:c6: 33:21:46:0c:48:53:63:0d:c4:eb:a7:bb:f3:a3:13:36:69:45: 01:7c:ad:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDNTIxMTAvBgNVBAUTKDRCODU2N0ZCMzg3QkZENzQwNzZCNTA5NzcwMDEzMkM3 QUM4NkU2MjAwHhcNMjUwNzAyMjE0MDI4WhcNMjUwNzA5MjE0MDI4WjAYMRYwFAYD VQQDEw02ODY1YTc0ZC1iMjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDK80MPEVgXXITZtmruzsHFSKudHxnmtsy1Yd4Qp2eCk5YqXCB1abfiOMkBz 64B1olmUB8q+1DofwP8wJfXJ1LjQVC5dwmE9knyWG7sn2nSntumU52JlV42P7wye Pt2amgyG4swkXVn7orGSJjwBVZg+FTwyzBdj6nWbf9brhEjhSrKNcukkQjs5X6GI gY4YApWC278gU+pxQKyefyD07twQbH5sgO3s+OQjOdXFhDf79UxLv40sVtA1VI82 hqGI3NjKYinxJCvKueCIGVXIgdaYL/sI68YVCpkCRNE9Hxb3EwhHSgKVIdzjRGSm cNGr/ymEdcZ91FnkeNEZky0nzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0qfR0Q VS49F8rAjQDYT/lWFbuEMB8GA1UdIwQYMBaAFEuFZ/s4e/10B2tQl3ABMseshuYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0M1Mi82NTI4MzZFODEz OEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19YUUhhMUNYY0FFeXg2eUc1 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M0Vm4temg3X1hRSGExQ1hjQUV5eDZ5RzVpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0M1Mi82NTI4MzZFODEzOEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19Y UUhhMUNYY0FFeXg2eUc1aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7CLf3Gl2ntMjVaKZjWZiDiKvP8HKSn9rRJ0e+XJTUNRdTe6QUGPMy Vlu8NXdoRmwO4W0ZhRYkxmFqhjuFTx4ABVgwTczFw0hB6m/9cMVxNPOgmG1Uge3Z v+2Rc3ZUjaJUKyyS1OHEOidGAOJDdR4ggmF2TSYPL3GDzVbuEbY5zao9LQKH+r2D I8j5B/f1wm3g2I6KO6eahnxdRFg8ypfBe5ETwCnxnN27w8th/VyHE+XuTxt/e/y1 iVdUmzjWtjn38gMv9Sz8jsYL9T8IlZGrGPAkEfjx3xnze11ZQ1YGc9QqJ9CCGnrF u8YzIUYMSFNjDcTrp7vzoxM2aUUBfK3s -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:12 2025 by rpki-client