$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: u3+m5Qnw0FstWtFRw9meqeVAvqPgyf0sTXFd4QaXEGA= Subject key identifier: 00:04:D4:19:88:2B:43:9A:AE:3C:9A:90:62:3F:54:44:7E:90:0A:A8 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01EA Signing time: Thu 03 Jul 2025 02:37:55 +0000 Manifest this update: Thu 03 Jul 2025 02:37:54 +0000 Manifest next update: Thu 10 Jul 2025 02:37:54 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: HP2T1lYncZLWoU8BGWA0qo2AyARaNVaidhbmtCoDyL8=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Jul 3 02:37:54 2025 GMT Not After : Jul 10 02:37:54 2025 GMT Subject: CN=6865ed02-161f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:a3:2d:0c:39:7a:cb:9f:ca:d5:b2:fd:d1: c7:11:88:d7:fd:9f:cf:5d:c5:a4:9d:71:33:29:31: 67:9f:24:de:17:9f:a5:4e:61:b1:00:45:9b:cc:a9: dd:59:b2:13:98:9c:74:38:6c:27:d2:bd:fa:96:3c: d6:d3:a6:70:31:28:3e:9a:06:b1:9e:80:23:83:8c: ca:eb:17:68:0e:30:b3:30:e9:6e:b2:14:30:b0:e4: 01:ca:7e:3a:dc:57:f9:5f:51:2e:9d:18:7b:79:3d: aa:b0:f6:6f:d6:1d:85:fc:8c:36:2c:41:86:34:73: 51:f7:16:8d:48:f3:79:5d:16:ce:e9:de:8e:12:11: ec:5e:77:0e:ac:68:e3:99:02:a9:cb:60:ec:57:20: 2a:f0:07:ea:18:30:c6:83:3a:d3:3a:41:12:88:96: fd:8e:f0:29:03:de:91:fb:49:f1:c8:b1:45:e1:75: a0:0b:be:87:f4:7e:6f:a6:8e:57:f0:d0:8b:0e:ac: d5:a6:00:3c:c1:5c:f9:0d:18:83:f9:fc:32:58:00: b4:66:30:64:4d:97:62:6b:a7:a0:85:dc:03:6e:42: 15:b9:6e:c8:82:42:e5:7a:2d:f9:74:5e:ac:99:34: fc:49:73:75:50:4c:80:1e:9f:2a:37:e1:9f:b3:b0: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:04:D4:19:88:2B:43:9A:AE:3C:9A:90:62:3F:54:44:7E:90:0A:A8 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c2:20:1c:5e:48:33:d9:de:a0:7d:91:ad:d2:e3:f2:2b:5d: e7:b8:b5:d0:13:92:8d:45:f8:a2:a1:fe:57:1a:53:28:6d:0b: 55:af:ff:f1:6b:f6:a0:b6:b3:f2:84:3f:61:76:0c:2a:f8:4a: d9:5b:82:76:95:9e:87:08:c4:23:9d:85:24:2e:1b:db:7a:0f: 13:ef:d5:b7:6e:14:d2:58:35:46:a9:5a:66:1a:fa:b6:1c:50: 7e:b8:1e:ce:8d:1a:67:8a:cf:2e:40:8c:94:79:b1:b7:44:85: a2:0f:9a:d7:08:14:71:fc:36:28:52:d4:0d:c5:43:41:26:14: 3f:06:ca:38:d2:b4:ea:64:c2:18:5f:27:b1:ee:ea:fa:9c:04: ff:1c:cd:51:77:11:6c:ae:b3:e1:0d:d3:98:79:ce:aa:75:20: 47:4d:4b:35:c2:13:cf:f3:0a:5d:9b:40:05:19:94:bc:97:a5: 81:73:7a:50:80:43:33:1b:c3:10:e2:67:3a:7f:26:c0:4e:be: 40:d7:db:76:d9:41:dc:71:10:a9:22:4a:92:3c:4b:5d:f1:98: f5:15:ce:b9:e8:87:5e:23:e7:dc:85:33:13:32:5f:e9:bd:84: a4:03:ed:69:f2:ca:ee:fc:8d:c8:be:b8:11:82:a0:04:68:31: 9d:72:5f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNzAzMDIzNzU0WhcNMjUwNzEwMDIzNzU0WjAYMRYwFAYD VQQDEw02ODY1ZWQwMi0xNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0ajLQw5esufytWy/dHHEYjX/Z/PXcWknXEzKTFnnyTeF5+lTmGxAEWbzKnd WbITmJx0OGwn0r36ljzW06ZwMSg+mgaxnoAjg4zK6xdoDjCzMOlushQwsOQByn46 3Ff5X1EunRh7eT2qsPZv1h2F/Iw2LEGGNHNR9xaNSPN5XRbO6d6OEhHsXncOrGjj mQKpy2DsVyAq8AfqGDDGgzrTOkESiJb9jvApA96R+0nxyLFF4XWgC76H9H5vpo5X 8NCLDqzVpgA8wVz5DRiD+fwyWAC0ZjBkTZdia6eghdwDbkIVuW7IgkLlei35dF6s mTT8SXN1UEyAHp8qN+Gfs7CpxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAE1BmI K0OarjyakGI/VER+kAqoMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlwiAcXkgz2d6gfZGt0uPyK13nuLXQE5KNRfiiof5XGlMobQtVr//x a/agtrPyhD9hdgwq+ErZW4J2lZ6HCMQjnYUkLhvbeg8T79W3bhTSWDVGqVpmGvq2 HFB+uB7OjRpnis8uQIyUebG3RIWiD5rXCBRx/DYoUtQNxUNBJhQ/Bso40rTqZMIY Xyex7ur6nAT/HM1RdxFsrrPhDdOYec6qdSBHTUs1whPP8wpdm0AFGZS8l6WBc3pQ gEMzG8MQ4mc6fybATr5A19t22UHccRCpIkqSPEtd8Zj1Fc656IdeI+fchTMTMl/p vYSkA+1p8sru/I3IvrgRgqAEaDGdcl/y -----END CERTIFICATE-----Generated at Thu Jul 3 11:58:54 2025 by rpki-client