$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: omznEWwQAH39TQmqCDh4kWRsCmJRmsoNWXlE4zGdF8c= Subject key identifier: A5:D6:59:16:09:82:54:F6:17:8F:46:13:6E:2B:F6:BA:D7:D1:13:23 Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 08DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 08D0 Signing time: Sat 28 Jun 2025 20:08:49 +0000 Manifest this update: Sat 28 Jun 2025 20:08:49 +0000 Manifest next update: Sat 05 Jul 2025 20:08:49 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: kebNkqWRRbExP5wSLTqmQb3ErAqVlKL1nqtht1yfdUE=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: LQpBHD/6AS6W0OQnBLuqSE1x8/uA+xxXkzDajQvXSSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Jun 28 20:08:49 2025 GMT Not After : Jul 5 20:08:49 2025 GMT Subject: CN=68604bd1-26c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:d1:46:ba:9c:cc:b7:83:e9:2b:e6:72:56: 8b:4a:69:7c:89:3c:15:ed:f2:5b:6b:03:5d:9a:c8: e7:7c:2b:47:d2:ef:03:de:4e:c4:99:ec:15:84:32: 12:17:c7:75:9b:52:cf:5e:24:c0:d5:05:bd:74:30: a2:50:c7:bf:e6:27:56:11:58:e0:b3:47:ec:48:bd: 4a:3f:5f:8e:f3:cf:c6:5e:b8:75:d4:52:bd:2c:21: d6:97:ff:ca:0b:3d:3b:62:7b:ed:55:ad:0c:98:15: 20:46:bb:b5:89:2c:78:0d:6d:62:d4:00:00:94:5e: 89:85:a3:c2:62:46:da:80:a5:ed:c9:33:de:e1:05: 37:eb:54:c9:ac:42:25:a5:9b:6f:3c:74:a4:53:cb: af:14:8a:81:2b:46:87:08:88:e3:5c:56:d2:73:23: c3:c7:ef:e8:2a:c5:3f:4e:b3:61:58:32:2d:a6:96: cf:f9:70:62:70:f1:3c:e7:a8:c0:2b:d4:cb:a7:60: 70:fb:73:0f:23:5b:b9:08:f5:0a:fb:4a:cc:c5:ed: ab:3e:ab:d9:e3:bc:cb:25:f1:be:48:52:b4:2c:25: 9d:25:39:b5:17:2f:3e:b8:0b:ce:1a:4b:6b:d1:3e: 14:72:e6:dd:2d:97:0b:b2:61:c9:44:bf:c3:9f:26: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D6:59:16:09:82:54:F6:17:8F:46:13:6E:2B:F6:BA:D7:D1:13:23 X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2c:40:75:bb:a6:fb:71:ba:ce:cf:b9:60:21:b6:af:61:75: 31:e4:3d:53:f3:48:10:12:5f:40:01:3b:b4:c1:18:0a:d9:d8: 21:ef:c3:5c:e7:fe:e9:95:73:8e:34:88:36:20:5f:be:ae:9e: 43:18:d7:d0:a4:5e:d1:45:cf:d6:cb:af:02:ab:41:60:c8:53: 53:28:cb:5f:31:66:d8:3b:21:28:3c:43:0a:40:7c:2d:7c:a4: 0f:c9:ca:6a:fe:36:98:80:a9:0b:f3:f1:5d:38:60:60:71:44: ae:db:1b:20:26:a1:98:66:10:b2:e3:53:38:71:bb:2f:c9:6f: 04:f7:a0:cb:44:ef:30:86:a0:37:c6:8d:7c:3d:ed:05:98:63: 74:f7:cb:68:ed:1d:6a:50:56:df:fe:f5:84:67:c3:44:6b:53: b8:82:a1:b4:2f:93:6c:3b:3a:54:c9:ef:b1:fe:c9:2c:fb:2c: 96:7c:6d:b9:63:59:11:43:68:1a:3a:f3:b4:3a:fa:56:dd:17: 4f:a0:8f:0c:5b:9a:5f:f8:0c:d6:26:35:c4:92:0e:a7:76:38: 22:cc:0f:ad:18:8e:36:88:19:04:ca:55:5c:fe:8e:bd:83:88: 8b:99:17:97:62:83:1b:cd:2e:1e:86:ff:92:5f:d3:42:78:88: 69:8f:1d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUwNjI4MjAwODQ5WhcNMjUwNzA1MjAwODQ5WjAYMRYwFAYD VQQDEw02ODYwNGJkMS0yNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswnRRrqczLeD6SvmclaLSml8iTwV7fJbawNdmsjnfCtH0u8D3k7EmewVhDIS F8d1m1LPXiTA1QW9dDCiUMe/5idWEVjgs0fsSL1KP1+O88/GXrh11FK9LCHWl//K Cz07YnvtVa0MmBUgRru1iSx4DW1i1AAAlF6JhaPCYkbagKXtyTPe4QU361TJrEIl pZtvPHSkU8uvFIqBK0aHCIjjXFbScyPDx+/oKsU/TrNhWDItppbP+XBicPE856jA K9TLp2Bw+3MPI1u5CPUK+0rMxe2rPqvZ47zLJfG+SFK0LCWdJTm1Fy8+uAvOGktr 0T4UcubdLZcLsmHJRL/DnyaSUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXWWRYJ glT2F49GE24r9rrX0RMjMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtLEB1u6b7cbrOz7lgIbavYXUx5D1T80gQEl9AATu0wRgK2dgh78Nc 5/7plXOONIg2IF++rp5DGNfQpF7RRc/Wy68Cq0FgyFNTKMtfMWbYOyEoPEMKQHwt fKQPycpq/jaYgKkL8/FdOGBgcUSu2xsgJqGYZhCy41M4cbsvyW8E96DLRO8whqA3 xo18Pe0FmGN098to7R1qUFbf/vWEZ8NEa1O4gqG0L5NsOzpUye+x/sks+yyWfG25 Y1kRQ2gaOvO0OvpW3RdPoI8MW5pf+AzWJjXEkg6ndjgizA+tGI42iBkEylVc/o69 g4iLmReXYoMbzS4ehv+SX9NCeIhpjx2J -----END CERTIFICATE-----Generated at Sun Jun 29 19:46:19 2025 by rpki-client