$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: 0Hq6LFP8hPJnmfR7o66HScM//Y2e3R2YHa19U1cF4Zg= Subject key identifier: 2D:67:7A:35:1C:A9:85:F6:D8:25:D0:87:6D:39:60:4E:2D:52:94:BE Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 07DC Signing time: Fri 30 May 2025 21:15:21 +0000 Manifest this update: Fri 30 May 2025 21:15:20 +0000 Manifest next update: Fri 06 Jun 2025 21:15:20 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: 8hg+upmvIP3q2onyo9bvqlfEQcP4MHq1AMqfsMxPtIU=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: May 30 21:15:20 2025 GMT Not After : Jun 6 21:15:20 2025 GMT Subject: CN=683a1fe8-d7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:54:0c:ba:fb:eb:51:a0:b8:c7:a1:45:6a: f1:bb:8d:c5:ff:4f:86:69:ee:f6:5e:61:e3:9f:c7: 75:ce:ad:a9:ca:be:6e:c1:9b:c0:3d:7a:e8:72:60: a9:b4:1c:d5:fa:06:77:03:be:57:79:99:7e:8f:98: de:ec:94:9a:99:ee:dd:fa:39:1d:8f:de:7f:cb:f9: 53:01:92:33:e9:e1:cd:41:ab:3d:a1:14:b3:e9:f3: 32:72:3f:c2:39:b3:8e:94:8c:6c:b6:36:cf:1e:b5: 13:e4:8a:a5:ed:30:26:d9:c4:e6:85:cf:5d:22:ad: 32:55:8d:aa:5e:40:56:ae:b7:d2:29:cb:83:94:81: a4:66:e7:04:5a:34:99:37:db:43:1d:2c:41:ad:35: 9b:37:50:6d:c1:2e:7b:26:18:7d:cc:19:a6:26:09: f2:65:bc:67:88:6f:54:e8:bc:99:67:60:bc:b8:5b: 94:02:bf:5f:8b:ba:97:b6:e9:ea:a0:0a:fe:51:85: e0:04:5f:59:64:e3:2b:f0:8c:c8:b7:bf:e3:17:6f: f0:fa:2e:35:52:11:5b:4e:e5:e8:4a:5f:c1:f8:7c: e9:f4:6e:e0:0d:21:e5:3f:8b:83:6b:3b:d3:2e:79: d9:d4:d8:3e:c0:7d:5e:9d:ec:b2:97:b3:d0:cc:97: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:67:7A:35:1C:A9:85:F6:D8:25:D0:87:6D:39:60:4E:2D:52:94:BE X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:73:aa:56:4e:d8:b8:78:d0:bf:08:54:5a:f3:e4:f6:2d:64: c7:4e:71:da:2f:46:6e:e4:94:73:26:88:11:a5:e5:03:44:13: 49:66:b5:6a:3a:bb:da:75:03:65:49:2f:72:39:84:ac:f8:06: a4:35:b2:ba:fc:ac:7b:2d:d5:5c:cb:df:1c:ce:be:c2:0c:cc: 35:ff:9b:10:09:9a:33:b3:e7:d9:c0:cb:f6:0f:51:84:13:36: 59:f4:46:01:cf:c2:9a:1a:8a:fc:10:63:63:4c:43:2d:bd:0b: 19:e1:41:eb:eb:cd:e7:98:f3:f2:15:43:cd:e6:a7:01:38:01: 6d:0c:c1:55:30:46:7c:e8:3e:26:e0:08:e9:9f:e9:9f:ee:a0: b2:d1:7d:41:ff:bf:29:5c:11:37:5b:41:84:16:fa:ce:6a:34: ea:3b:2c:34:f2:65:09:11:cd:75:f1:ca:ac:12:d0:c5:7c:4d: fa:94:99:50:d7:63:0b:8a:77:20:4f:bb:19:22:59:d9:a7:6c: 9d:c1:bb:ce:ea:da:0c:96:ff:a7:72:4c:9f:4e:ef:b7:07:8f: e1:76:25:b7:ba:4f:92:4b:4a:1a:44:76:78:98:35:3e:0c:c4: 17:e9:c2:a2:ec:30:2e:5e:93:6b:d3:03:e3:f8:e9:5a:cb:8d: 54:9f:05:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjUwNTMwMjExNTIwWhcNMjUwNjA2MjExNTIwWjAYMRYwFAYD VQQDEw02ODNhMWZlOC1kN2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAma1UDLr761GguMehRWrxu43F/0+Gae72XmHjn8d1zq2pyr5uwZvAPXrocmCp tBzV+gZ3A75XeZl+j5je7JSame7d+jkdj95/y/lTAZIz6eHNQas9oRSz6fMycj/C ObOOlIxstjbPHrUT5Iql7TAm2cTmhc9dIq0yVY2qXkBWrrfSKcuDlIGkZucEWjSZ N9tDHSxBrTWbN1BtwS57Jhh9zBmmJgnyZbxniG9U6LyZZ2C8uFuUAr9fi7qXtunq oAr+UYXgBF9ZZOMr8IzIt7/jF2/w+i41UhFbTuXoSl/B+Hzp9G7gDSHlP4uDazvT LnnZ1Ng+wH1eneyyl7PQzJcrbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1nejUc qYX22CXQh205YE4tUpS+MB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8c6pWTti4eNC/CFRa8+T2LWTHTnHaL0Zu5JRzJogRpeUDRBNJZrVq OrvadQNlSS9yOYSs+AakNbK6/Kx7LdVcy98czr7CDMw1/5sQCZozs+fZwMv2D1GE EzZZ9EYBz8KaGor8EGNjTEMtvQsZ4UHr683nmPPyFUPN5qcBOAFtDMFVMEZ86D4m 4Ajpn+mf7qCy0X1B/78pXBE3W0GEFvrOajTqOyw08mUJEc118cqsEtDFfE36lJlQ 12MLincgT7sZIlnZp2ydwbvO6toMlv+nckyfTu+3B4/hdiW3uk+SS0oaRHZ4mDU+ DMQX6cKi7DAuXpNr0wPj+Olay41UnwXu -----END CERTIFICATE-----Generated at Sat May 31 17:16:15 2025 by rpki-client