$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: hBGy8+sYdFoxRQ76iGWwgyUwtJIYXV1kCqBDOZELuvM= Subject key identifier: AF:4A:4D:BC:9D:7F:5C:02:9E:E7:40:D7:57:C7:46:A7:0C:3E:EF:9A Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B50 Signing time: Mon 30 Jun 2025 16:27:02 +0000 Manifest this update: Mon 30 Jun 2025 16:27:01 +0000 Manifest next update: Mon 07 Jul 2025 16:27:01 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: ANmkCLghwqd19+2XANtr2OzU8gLHSv1LvCNBGcGVt4s=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7005 (0x1b5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Jun 30 16:27:01 2025 GMT Not After : Jul 7 16:27:01 2025 GMT Subject: CN=6862bad5-cfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:0f:58:57:25:a6:9a:bd:db:94:5b:6e:11: 3f:cd:d8:bd:a9:7c:2f:1a:aa:5f:52:8a:f9:c4:eb: 48:d5:0f:62:2d:50:e0:61:71:49:3e:bb:76:e3:10: 97:bd:b8:15:65:3c:45:1a:6e:75:3f:7e:12:d7:d2: c3:de:e2:09:24:85:8c:e6:d0:29:3f:87:39:58:5e: 66:13:f9:fa:19:32:ad:2d:9d:9b:8d:f7:90:43:88: ac:80:f3:76:59:b6:98:0c:71:90:a1:09:ed:8a:59: 9e:1e:8a:c0:9e:8c:88:be:eb:57:33:e7:a1:fb:f1: ca:dd:5d:1c:9e:4e:40:dc:d8:3f:a2:bb:15:12:f5: 0b:5c:e3:b1:7d:df:f5:4a:66:cd:57:62:43:43:a3: 9d:7b:29:d8:c4:28:45:d4:d1:8d:fc:fd:76:5b:38: 3e:65:9d:c1:0e:7c:de:8e:bc:8a:f5:06:d6:f7:a7: 41:14:ec:6d:d0:01:04:b4:33:69:7a:39:db:84:34: b0:01:4f:eb:0c:55:48:5d:c5:8a:df:cc:47:8a:2c: 10:b7:11:a6:68:e0:5b:f7:c2:d8:e0:a4:09:c9:5a: 7f:c1:cb:1a:0c:5b:b9:74:35:95:ea:93:a9:60:5f: a7:79:b3:8e:fc:fb:75:d2:71:15:57:1f:3d:88:03: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4A:4D:BC:9D:7F:5C:02:9E:E7:40:D7:57:C7:46:A7:0C:3E:EF:9A X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:75:bc:5d:e9:5b:62:65:ec:4b:f6:77:bc:d2:fb:d3:b6:83: 6b:a3:fb:96:2c:30:98:64:18:4e:96:c5:9b:d0:73:67:db:d6: 36:51:10:c1:73:ed:06:b7:1e:25:1f:6e:10:07:a0:7a:2a:41: 3a:8a:cf:55:6b:e7:70:b0:45:a9:16:1d:c8:4a:61:07:95:d3: 7c:31:30:51:3f:bc:0d:54:bc:f7:00:87:d7:bd:c5:35:7a:a0: b0:30:67:f9:a3:d3:29:e1:00:c8:58:19:ec:70:25:96:74:cb: 74:aa:64:e6:86:cd:7b:09:98:70:6b:66:33:7e:f1:cd:48:95: 7d:3c:8e:56:f9:82:46:db:93:46:5c:22:c0:53:12:de:12:49: f4:56:9d:77:75:0b:b5:72:47:33:f1:55:c1:5c:b1:27:0b:c9: 09:e1:52:5b:28:0b:b7:1e:d1:a1:b8:5d:16:b6:07:aa:eb:bf: 56:48:58:55:d5:fc:47:18:ca:af:34:ab:21:fd:21:35:3e:cf: 05:be:fa:17:e1:26:97:2d:f1:36:6e:3c:df:d8:f5:27:b2:bf: 7e:95:60:bb:de:a8:29:db:10:30:27:3e:95:41:5e:7a:b5:c6: 0a:af:67:92:7e:f2:ed:9a:cc:d0:bd:46:46:7c:8c:be:4b:4d: fc:a9:07:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUwNjMwMTYyNzAxWhcNMjUwNzA3MTYyNzAxWjAYMRYwFAYD VQQDEw02ODYyYmFkNS1jZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxEPWFclppq925RbbhE/zdi9qXwvGqpfUor5xOtI1Q9iLVDgYXFJPrt24xCX vbgVZTxFGm51P34S19LD3uIJJIWM5tApP4c5WF5mE/n6GTKtLZ2bjfeQQ4isgPN2 WbaYDHGQoQntilmeHorAnoyIvutXM+eh+/HK3V0cnk5A3Ng/orsVEvULXOOxfd/1 SmbNV2JDQ6OdeynYxChF1NGN/P12Wzg+ZZ3BDnzejryK9QbW96dBFOxt0AEEtDNp ejnbhDSwAU/rDFVIXcWK38xHiiwQtxGmaOBb98LY4KQJyVp/wcsaDFu5dDWV6pOp YF+nebOO/Pt10nEVVx89iAOb/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9KTbyd f1wCnudA11fHRqcMPu+aMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjdbxd6VtiZexL9ne80vvTtoNro/uWLDCYZBhOlsWb0HNn29Y2URDB c+0Gtx4lH24QB6B6KkE6is9Va+dwsEWpFh3ISmEHldN8MTBRP7wNVLz3AIfXvcU1 eqCwMGf5o9Mp4QDIWBnscCWWdMt0qmTmhs17CZhwa2YzfvHNSJV9PI5W+YJG25NG XCLAUxLeEkn0Vp13dQu1ckcz8VXBXLEnC8kJ4VJbKAu3HtGhuF0Wtgeq679WSFhV 1fxHGMqvNKsh/SE1Ps8FvvoX4SaXLfE2bjzf2PUnsr9+lWC73qgp2xAwJz6VQV56 tcYKr2eSfvLtmszQvUZGfIy+S038qQfy -----END CERTIFICATE-----Generated at Tue Jul 1 03:13:56 2025 by rpki-client