$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: vrN/QhEAiX81+o7o/kig5ENk4JHu0H5wPoPNpAFqQQk= Subject key identifier: 1E:63:3D:61:6D:E7:16:C8:DD:4C:64:42:9F:93:0E:10:75:FA:89:FF Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 028B Signing time: Thu 03 Jul 2025 02:01:40 +0000 Manifest this update: Thu 03 Jul 2025 02:01:40 +0000 Manifest next update: Thu 10 Jul 2025 02:01:40 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: w917+FVfnl/aAvJVfcmLiXoIjD7vGhp5wnj7yr3Jz78=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Jul 3 02:01:40 2025 GMT Not After : Jul 10 02:01:40 2025 GMT Subject: CN=6865e484-a933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:62:a8:b7:a2:16:51:34:eb:c6:b4:be:ea: 6d:7a:e3:ca:ec:53:d0:ba:d7:c0:48:0f:5f:1a:a9: 3b:46:0c:0d:15:ca:5d:d9:a1:3b:e4:bc:ee:2a:ae: e2:10:39:48:38:76:f6:df:2e:fe:f7:60:80:cc:da: a9:4f:43:8d:6a:bf:79:38:16:6a:2d:e6:20:0b:29: ea:84:90:78:34:9a:46:6f:93:1c:e9:26:82:a8:c2: cc:43:2e:e3:25:ce:e1:0b:0a:c0:6a:34:6a:14:d1: 45:39:7d:55:c8:33:76:a2:e1:83:cf:92:d7:d6:e6: fa:e7:6c:36:cc:2d:9d:67:70:18:74:82:fd:21:5e: fc:6b:fe:82:f7:12:27:d5:35:22:62:49:cb:65:4d: 89:79:05:81:1f:9d:59:7c:73:0a:95:d0:ec:45:1a: 85:f6:d6:37:55:f6:84:19:33:ae:c0:fa:a6:d5:e5: 3e:49:73:d3:1f:fc:d5:38:7a:e3:2c:40:31:19:9b: 59:f7:d1:33:0b:ed:76:0a:23:2b:ff:c6:94:df:fc: c7:e0:94:dc:c4:92:9e:4b:d1:49:4d:3d:99:c4:eb: f7:21:0f:de:81:41:7c:f1:c6:4e:41:13:b7:5a:1f: 48:92:2b:d3:4a:1d:96:59:1c:8b:4d:f3:c2:fa:77: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:63:3D:61:6D:E7:16:C8:DD:4C:64:42:9F:93:0E:10:75:FA:89:FF X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:63:40:2a:a4:81:31:24:5c:75:5b:63:c7:47:95:55:ef:76: f6:2e:4a:83:f4:62:82:9e:2c:29:7a:5d:95:d0:2e:f2:05:06: 68:c6:42:c5:c3:ab:ee:96:e7:8f:15:98:e5:96:b4:a6:dc:17: 3d:1d:7a:85:b4:dd:fb:d2:0c:17:e4:a4:a1:65:42:f7:57:4a: 42:22:df:25:42:c7:a0:6d:e9:47:16:eb:b2:9b:51:5a:f7:c3: ea:8d:e7:24:b1:a5:0d:51:91:ff:fc:87:80:d3:4e:5a:b7:25: 21:27:a2:9f:8c:d4:f8:51:bf:c9:f1:d0:1a:b9:5e:c3:d4:e5: 05:16:1b:4f:4a:66:d3:6f:6d:7a:52:5d:23:4b:8a:53:44:a7: d0:7b:18:0e:ad:57:78:6c:40:64:ec:3a:c4:c4:dd:c5:5d:7b: 88:8b:09:b3:29:96:4e:99:fa:0a:31:a9:e5:7a:2a:10:33:1e: c5:1f:7c:03:14:d0:5e:62:5d:a3:6a:97:4b:2d:3d:ee:48:0f: a5:bc:75:a2:32:87:85:05:e1:4e:24:4e:d9:f6:01:4c:3b:68: fe:0f:b7:9f:62:1b:c8:1f:7f:03:36:63:6c:77:28:ce:f7:15: 17:21:3c:49:b2:4c:92:0e:6f:5a:32:8a:c4:8b:5b:40:42:15: 9a:f7:0f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwNzAzMDIwMTQwWhcNMjUwNzEwMDIwMTQwWjAYMRYwFAYD VQQDEw02ODY1ZTQ4NC1hOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7RiqLeiFlE068a0vupteuPK7FPQutfASA9fGqk7RgwNFcpd2aE75LzuKq7i EDlIOHb23y7+92CAzNqpT0ONar95OBZqLeYgCynqhJB4NJpGb5Mc6SaCqMLMQy7j Jc7hCwrAajRqFNFFOX1VyDN2ouGDz5LX1ub652w2zC2dZ3AYdIL9IV78a/6C9xIn 1TUiYknLZU2JeQWBH51ZfHMKldDsRRqF9tY3VfaEGTOuwPqm1eU+SXPTH/zVOHrj LEAxGZtZ99EzC+12CiMr/8aU3/zH4JTcxJKeS9FJTT2ZxOv3IQ/egUF88cZOQRO3 Wh9IkivTSh2WWRyLTfPC+ncJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5jPWFt 5xbI3UxkQp+TDhB1+on/MB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtY0AqpIExJFx1W2PHR5VV73b2LkqD9GKCniwpel2V0C7yBQZoxkLF w6vuluePFZjllrSm3Bc9HXqFtN370gwX5KShZUL3V0pCIt8lQsegbelHFuuym1Fa 98PqjecksaUNUZH//IeA005atyUhJ6KfjNT4Ub/J8dAauV7D1OUFFhtPSmbTb216 Ul0jS4pTRKfQexgOrVd4bEBk7DrExN3FXXuIiwmzKZZOmfoKManleioQMx7FH3wD FNBeYl2japdLLT3uSA+lvHWiMoeFBeFOJE7Z9gFMO2j+D7efYhvIH38DNmNsdyjO 9xUXITxJskySDm9aMorEi1tAQhWa9w/Z -----END CERTIFICATE-----Generated at Fri Jul 4 10:51:05 2025 by rpki-client