$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: VlJMRro9G+7YtpB7e1+2pW+kls0Joyx3d6uPrU20v+w= Subject key identifier: 05:84:D7:E0:37:28:AD:69:CD:A8:B8:24:03:04:8B:FE:38:51:30:99 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 14 Signing time: Tue 01 Jul 2025 08:50:07 +0000 Manifest this update: Tue 01 Jul 2025 08:50:07 +0000 Manifest next update: Tue 08 Jul 2025 08:50:07 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: VQ9w75pEHsPyBHzmcHJKYqFiBFEbBMs/yDOsYcSV5Co=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Jul 1 08:50:07 2025 GMT Not After : Jul 8 08:50:07 2025 GMT Subject: CN=6863a13f-004d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:73:f8:60:32:31:e8:1a:7e:08:4b:5d:c3: cb:f4:97:62:24:4a:59:10:aa:44:46:06:92:d3:f1: ef:e6:61:5e:b3:0e:06:66:00:aa:3b:b6:e5:94:a2: 2d:6b:6a:7e:17:08:aa:66:e3:28:a6:07:ef:47:9e: 90:dc:88:98:a8:ba:aa:fb:f1:9e:74:6e:b3:b6:75: 9a:18:a2:74:0d:cc:88:5b:80:97:bb:bb:25:65:c0: 2b:b6:38:c3:37:6d:b3:b6:e1:1c:8b:4d:da:db:27: 28:3a:3e:f2:be:c8:c4:18:b0:41:60:bb:c0:af:4e: 4c:d8:52:55:7f:f7:bb:0d:88:c6:10:74:2d:97:ff: bd:1f:10:2f:d2:71:a2:d8:64:51:82:1f:fd:72:58: b5:70:26:69:bf:48:2f:c2:36:5b:00:45:b8:8f:a6: 10:db:04:ce:77:e6:b7:98:16:08:eb:70:da:36:09: d7:fe:91:7f:1e:07:d6:2f:0b:44:bf:e0:8b:35:e3: 3c:e2:81:95:dd:8f:b3:ea:79:04:72:34:65:d3:7e: 01:09:76:49:6b:f9:a3:da:12:60:ff:c6:26:b1:fd: cb:75:f9:bf:db:e5:67:6b:6a:20:31:3d:64:b2:9b: c8:9a:58:ed:07:cd:3c:08:2c:43:7d:37:6d:49:3a: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:D7:E0:37:28:AD:69:CD:A8:B8:24:03:04:8B:FE:38:51:30:99 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:69:ab:29:aa:8a:59:db:bf:ae:3c:f4:0e:df:e2:a5:4e:a4: ca:38:51:28:6d:98:c0:85:2a:8b:20:dd:c1:26:30:eb:fb:63: 74:86:b0:be:d5:09:35:08:0c:f6:30:23:30:2e:51:37:82:08: d5:ce:43:c3:40:39:20:81:bf:e0:e9:78:1f:38:5a:5f:49:e0: 23:e7:ff:34:86:93:25:4d:c7:5c:37:8a:60:20:a7:a5:e4:9f: 52:47:fa:7f:7b:9b:92:ea:85:30:49:1f:4e:91:f2:02:86:af: 82:8d:78:30:d0:33:77:a4:82:3b:62:fa:aa:74:71:7a:c4:1a: 7b:42:26:7b:ac:5c:4f:c6:6b:24:b8:75:8f:63:1c:c3:0a:6f: 80:61:ef:95:ef:68:4b:15:df:f4:4c:42:f3:03:55:dd:b2:2f: 8f:22:0d:0e:71:40:d4:9b:90:c1:e9:63:bc:2c:88:2e:af:35: 63:1e:14:92:c5:91:cc:48:bc:f9:8d:4d:e5:29:2e:ff:b2:79: 4c:60:3f:c3:cf:ec:f2:ac:8f:a5:20:c1:9a:0e:05:3b:2f:49: 61:62:27:37:5e:cd:97:b0:d7:43:74:dd:b7:38:d2:2d:3e:a6: 64:d1:90:af:c6:50:fe:26:a0:6d:09:7b:bd:00:4b:81:0e:b4: ac:0b:cf:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTA3MDEwODUwMDdaFw0yNTA3MDgwODUwMDdaMBgxFjAUBgNV BAMTDTY4NjNhMTNmLTAwNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj8HP4YDIx6Bp+CEtdw8v0l2IkSlkQqkRGBpLT8e/mYV6zDgZmAKo7tuWUoi1r an4XCKpm4yimB+9HnpDciJiouqr78Z50brO2dZoYonQNzIhbgJe7uyVlwCu2OMM3 bbO24RyLTdrbJyg6PvK+yMQYsEFgu8CvTkzYUlV/97sNiMYQdC2X/70fEC/ScaLY ZFGCH/1yWLVwJmm/SC/CNlsARbiPphDbBM535reYFgjrcNo2Cdf+kX8eB9YvC0S/ 4Is14zzigZXdj7PqeQRyNGXTfgEJdklr+aPaEmD/xiax/ct1+b/b5WdraiAxPWSy m8iaWO0HzTwILEN9N21JOmVDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBYTX4Dco rWnNqLgkAwSL/jhRMJkwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAElpqymqilnbv6489A7f4qVOpMo4UShtmMCFKosg3cEmMOv7Y3SGsL7V CTUIDPYwIzAuUTeCCNXOQ8NAOSCBv+DpeB84Wl9J4CPn/zSGkyVNx1w3imAgp6Xk n1JH+n97m5LqhTBJH06R8gKGr4KNeDDQM3ekgjti+qp0cXrEGntCJnusXE/GayS4 dY9jHMMKb4Bh75XvaEsV3/RMQvMDVd2yL48iDQ5xQNSbkMHpY7wsiC6vNWMeFJLF kcxIvPmNTeUpLv+yeUxgP8PP7PKsj6UgwZoOBTsvSWFiJzdezZew10N03bc40i0+ pmTRkK/GUP4moG0Je70AS4EOtKwLz2o= -----END CERTIFICATE-----Generated at Thu Jul 3 07:56:31 2025 by rpki-client