$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: 6sOgs6fp5I8kpY6BxOR9XZK/2lZ5CWFLSYB+yOM3gks= Subject key identifier: CF:EB:4D:3C:C6:AC:2C:37:38:C8:B9:ED:60:67:43:2B:32:76:DF:21 Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: 95 Signing time: Sun 29 Jun 2025 05:26:35 +0000 Manifest this update: Sun 29 Jun 2025 05:26:35 +0000 Manifest next update: Sun 06 Jul 2025 05:26:35 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: W5DEEt4JEjHvJEa3ChaNzUS0/TbomLlRcECAaMgCqZo=) 2: 2EC0897A740C11EFB881CE37C4F9AE02.roa (hash: jK7WeiMtYEjncK+3WbHQbUVCOX5jz02RAdo98TCxxKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: Jun 29 05:26:35 2025 GMT Not After : Jul 6 05:26:35 2025 GMT Subject: CN=6860ce8b-bf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:27:02:25:39:ae:ef:cf:fe:0a:2a:98:65: 93:53:b8:e4:2f:a5:09:c1:b9:95:88:97:67:b8:aa: 19:21:fe:32:e2:d0:ff:71:83:c4:2f:42:61:4f:97: b2:20:bf:f2:0a:7e:70:ac:19:4b:a1:66:f2:de:4f: 9e:db:fd:56:03:b4:f5:aa:e3:e0:45:e4:e8:58:36: f9:07:a0:e3:e0:94:f8:72:f1:fb:a8:7e:fa:53:0f: 39:34:d9:4d:9f:30:fe:dc:ae:4c:d4:8a:6d:88:b6: ec:2a:d6:43:30:2b:f4:64:fc:78:91:2f:f4:b6:15: 8e:42:84:42:f2:fe:d0:24:89:aa:bc:03:13:eb:19: 0f:56:f3:9c:2b:12:a0:98:cb:52:ea:7f:c7:21:72: d6:f8:d0:a3:1d:98:8a:f2:47:25:35:65:af:46:41: ed:38:d1:8b:bf:c8:15:f7:52:ab:a7:27:cd:05:76: 35:c6:ac:15:e3:ab:9d:b5:63:dd:b1:1a:dc:23:11: 6a:7e:bd:75:19:1b:2e:13:c9:fc:01:b7:06:05:bf: 9f:a9:fa:6e:ef:3c:d6:b2:5a:8c:df:06:d1:60:89: 3c:48:d9:56:1f:4e:3e:11:25:29:21:7b:87:60:28: db:42:06:98:21:05:5d:f1:f3:0c:c4:89:08:44:36: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EB:4D:3C:C6:AC:2C:37:38:C8:B9:ED:60:67:43:2B:32:76:DF:21 X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e2:54:b0:ba:b2:79:f9:a9:04:03:59:99:02:3b:93:21:c2: f5:5f:bb:0a:bc:97:0c:72:71:3b:74:3e:a2:65:0d:6d:a6:50: 50:c5:d2:71:5a:37:cc:2d:06:e4:09:85:3e:6a:2c:1e:f4:f4: 65:c9:c6:43:c7:ee:aa:ed:96:8a:f2:51:e9:25:7d:01:ee:81: 42:3b:70:ef:cf:27:e5:da:07:9c:70:1a:f3:e3:e1:12:4b:94: 27:38:74:a7:b2:6a:ca:5d:81:f7:e0:20:05:40:23:e1:57:57: f2:90:63:76:7d:73:bd:b1:4d:4c:db:1b:89:2d:db:17:13:c5: c2:6d:68:65:ea:5c:ba:d1:eb:13:41:9c:c2:50:59:14:df:83: cd:06:ac:9c:ef:5a:ad:2d:6f:6b:3f:7e:9d:8a:e3:c8:06:ce: cd:32:a2:d3:a1:b9:29:59:3a:70:e8:77:d5:30:69:8a:01:d4: 17:e0:93:26:84:48:16:ae:e5:d8:a7:9a:23:8e:0e:d8:03:3f: 1f:54:da:8e:05:50:9f:0c:ba:29:65:6d:2b:5b:73:38:f0:a1: 71:2d:1a:f5:95:e5:23:85:1f:a6:5a:5e:c4:8c:d0:af:ba:ea: f2:c1:3f:e5:8c:8c:7c:45:7f:70:34:32:5e:d3:3e:fe:59:0a: 8a:95:ca:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKEUxRDc4MzdFQkNDN0E5QTREMTc1MTY1Nzg2MDQ3NjNB MkJEMDQyNzIwHhcNMjUwNjI5MDUyNjM1WhcNMjUwNzA2MDUyNjM1WjAYMRYwFAYD VQQDEw02ODYwY2U4Yi1iZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWInAiU5ru/P/goqmGWTU7jkL6UJwbmViJdnuKoZIf4y4tD/cYPEL0JhT5ey IL/yCn5wrBlLoWby3k+e2/1WA7T1quPgReToWDb5B6Dj4JT4cvH7qH76Uw85NNlN nzD+3K5M1IptiLbsKtZDMCv0ZPx4kS/0thWOQoRC8v7QJImqvAMT6xkPVvOcKxKg mMtS6n/HIXLW+NCjHZiK8kclNWWvRkHtONGLv8gV91KrpyfNBXY1xqwV46udtWPd sRrcIxFqfr11GRsuE8n8AbcGBb+fqfpu7zzWslqM3wbRYIk8SNlWH04+ESUpIXuH YCjbQgaYIQVd8fMMxIkIRDYeWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/rTTzG rCw3OMi57WBnQysydt8hMB8GA1UdIwQYMBaAFOHXg368x6mk0XUWV4YEdjor0EJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xQjI5MEI1RTc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFhVFJkUlpYaGdSMk9pdlFR bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xQjI5MEI1RTc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFh VFJkUlpYaGdSMk9pdlFRbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+4lSwurJ5+akEA1mZAjuTIcL1X7sKvJcMcnE7dD6iZQ1tplBQxdJx WjfMLQbkCYU+aiwe9PRlycZDx+6q7ZaK8lHpJX0B7oFCO3Dvzyfl2geccBrz4+ES S5QnOHSnsmrKXYH34CAFQCPhV1fykGN2fXO9sU1M2xuJLdsXE8XCbWhl6ly60esT QZzCUFkU34PNBqyc71qtLW9rP36diuPIBs7NMqLTobkpWTpw6HfVMGmKAdQX4JMm hEgWruXYp5ojjg7YAz8fVNqOBVCfDLopZW0rW3M48KFxLRr1leUjhR+mWl7EjNCv uurywT/ljIx8RX9wNDJe0z7+WQqKlcrU -----END CERTIFICATE-----Generated at Sun Jun 29 16:10:49 2025 by rpki-client