$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: amgQyRpyRr9oCsutdvD/lyllyRE0pl35K1o0a2UlIRg= Subject key identifier: 07:C0:00:BC:71:BD:90:3E:18:B2:36:E4:12:12:14:9B:5A:AD:23:C3 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01F3 Signing time: Mon 21 Jul 2025 02:30:58 +0000 Manifest this update: Mon 21 Jul 2025 02:30:58 +0000 Manifest next update: Mon 28 Jul 2025 02:30:58 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: 5K8UWwxxebZIuiRt7obT27dE1T3KlinsdulTcM0Fino=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Jul 21 02:30:58 2025 GMT Not After : Jul 28 02:30:58 2025 GMT Subject: CN=687da662-9957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3c:06:fa:05:cd:01:6c:8a:e5:4f:7f:0e:97: b1:2b:17:91:54:2f:df:85:2f:67:e4:c1:65:46:57: 3b:89:c9:1e:f7:21:90:06:6a:34:06:fe:20:c8:bb: 86:ab:5a:2d:77:f8:27:22:f0:99:23:40:e1:01:78: a4:68:82:b4:75:5e:c7:dc:c7:b8:f9:53:f7:57:c2: d2:56:ab:1a:3b:07:31:14:8a:13:f8:62:2c:f0:2f: 78:ba:7f:4a:16:a6:ca:00:c5:ed:51:38:e6:3a:dc: 75:e3:7a:3f:b1:33:46:c4:26:f6:d6:e9:e1:86:44: 5c:92:01:6f:30:0a:29:20:70:78:23:e7:df:c8:5e: ca:41:a9:a8:79:32:9c:74:aa:09:98:df:a4:a1:18: c0:bb:d6:1e:39:68:c5:9c:62:67:6a:48:a1:9e:ad: a6:1c:6c:1f:d5:d4:0f:4d:d7:9f:70:9e:e8:42:8e: fc:b2:cd:1e:b6:e7:3a:83:b3:59:e3:f8:ba:bc:0d: 0d:05:35:0a:db:53:e8:d4:9f:ad:34:11:c5:64:dd: 46:9f:54:16:de:a7:ac:95:41:59:20:f5:12:21:3b: 3a:d8:a2:54:6b:0f:df:fe:9e:0d:d7:6e:5f:3c:c3: c8:7a:4c:0d:94:9f:d6:a0:f5:1b:42:ae:99:24:80: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C0:00:BC:71:BD:90:3E:18:B2:36:E4:12:12:14:9B:5A:AD:23:C3 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:34:96:19:6d:58:75:64:11:fd:05:71:f4:5d:3f:82:a3:9e: e3:5a:6a:91:3d:b6:29:df:01:12:0a:db:7d:3b:a5:84:e2:29: 4a:17:01:e1:7a:2d:15:b5:e0:7c:02:64:b7:8f:cc:c7:00:e5: a2:c7:1d:01:90:3d:e2:ce:68:30:91:69:eb:d0:ad:d5:46:50: 00:28:38:93:5c:25:13:e8:72:61:52:d1:5c:46:b6:1e:cf:6c: 14:09:3e:08:6a:09:2b:d7:bf:8f:3f:a6:cf:a6:09:6d:ec:a5: 15:14:be:2d:fd:80:07:70:b2:46:ff:bd:07:23:7b:0c:3e:47: 08:94:98:4a:7b:8f:f4:de:44:f8:c5:10:23:e0:7f:ca:b4:e7: 43:eb:26:74:ac:f2:e4:58:c7:67:fa:46:54:77:47:47:09:76: 0e:91:59:ac:f4:52:f9:c3:01:d2:c2:05:30:04:c6:7d:0b:63: 64:94:61:0c:2f:81:63:c2:55:76:5a:4a:8c:b3:65:07:bc:95: 7f:5e:46:d3:3b:0c:59:82:71:55:ca:c4:c2:11:c5:99:3d:b8: b3:81:af:0a:d4:6d:dd:f9:1d:ac:e1:9f:3d:7c:4d:89:ab:e2: f6:43:b7:27:8f:67:e5:db:30:f1:0d:5c:5e:76:62:77:5d:c7: 6b:ba:1a:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNzIxMDIzMDU4WhcNMjUwNzI4MDIzMDU4WjAYMRYwFAYD VQQDEw02ODdkYTY2Mi05OTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jwG+gXNAWyK5U9/DpexKxeRVC/fhS9n5MFlRlc7icke9yGQBmo0Bv4gyLuG q1otd/gnIvCZI0DhAXikaIK0dV7H3Me4+VP3V8LSVqsaOwcxFIoT+GIs8C94un9K FqbKAMXtUTjmOtx143o/sTNGxCb21unhhkRckgFvMAopIHB4I+ffyF7KQamoeTKc dKoJmN+koRjAu9YeOWjFnGJnakihnq2mHGwf1dQPTdefcJ7oQo78ss0etuc6g7NZ 4/i6vA0NBTUK21Po1J+tNBHFZN1Gn1QW3qeslUFZIPUSITs62KJUaw/f/p4N125f PMPIekwNlJ/WoPUbQq6ZJIBOowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfAALxx vZA+GLI25BISFJtarSPDMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbNJYZbVh1ZBH9BXH0XT+Co57jWmqRPbYp3wESCtt9O6WE4ilKFwHh ei0VteB8AmS3j8zHAOWixx0BkD3izmgwkWnr0K3VRlAAKDiTXCUT6HJhUtFcRrYe z2wUCT4Iagkr17+PP6bPpglt7KUVFL4t/YAHcLJG/70HI3sMPkcIlJhKe4/03kT4 xRAj4H/KtOdD6yZ0rPLkWMdn+kZUd0dHCXYOkVms9FL5wwHSwgUwBMZ9C2NklGEM L4FjwlV2WkqMs2UHvJV/XkbTOwxZgnFVysTCEcWZPbizga8K1G3d+R2s4Z89fE2J q+L2Q7cnj2fl2zDxDVxedmJ3Xcdruhr8 -----END CERTIFICATE-----Generated at Mon Jul 21 08:07:58 2025 by rpki-client