$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: SLsa0fgo1ZZ0Bgq48zN1BU9ygngWBqpEn/Tk50QUm2Y= Subject key identifier: 5A:41:08:DD:AC:BD:64:19:00:91:8C:BD:43:71:D8:4B:AA:5B:E6:17 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 027C Signing time: Sun 01 Jun 2025 01:54:33 +0000 Manifest this update: Sun 01 Jun 2025 01:54:32 +0000 Manifest next update: Sun 08 Jun 2025 01:54:32 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: j+3kpWyWzqZpltpuK8PPaYZ6HaIw6Bd+rI5tkwOI9tI=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: cG28lDeyahzWWkmTahaq+sCJHYmimDEkICh6+dm+qWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Jun 1 01:54:32 2025 GMT Not After : Jun 8 01:54:32 2025 GMT Subject: CN=683bb2d9-e666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:34:86:e7:ce:ca:80:f5:ca:6f:fe:3a:11: d9:50:59:f6:ea:cf:03:a0:a8:9e:15:9c:dd:72:6f: 02:bf:d3:9a:5d:e4:18:b0:10:6b:51:28:4c:63:69: 46:9f:92:f4:3f:83:15:73:ff:21:36:05:f0:32:ed: b6:98:ec:02:13:61:37:a0:47:6a:be:ea:4b:4c:17: 59:ed:cc:85:b1:d0:b6:3f:9f:dd:9a:7d:aa:bc:ba: 4e:a8:f3:40:d4:c3:9f:50:60:71:50:1f:ea:f8:d8: 7e:7e:8f:49:12:b0:01:a9:a0:c7:64:97:65:d6:14: 17:61:77:78:cd:93:1d:42:75:09:05:57:3d:77:44: af:aa:12:af:c3:3d:bb:02:86:f7:e0:90:f2:13:50: 3a:75:aa:77:47:e7:4e:3f:eb:f2:12:29:93:ad:d4: b2:5e:d0:fc:05:dc:0c:d3:3a:30:18:43:14:33:36: 59:72:03:55:c5:e9:a6:78:67:a9:3d:af:98:41:aa: c0:f4:00:52:ef:dd:ae:23:a6:71:c4:fe:1f:ff:8e: 27:4a:dc:21:a4:33:25:14:35:e9:49:da:dd:85:1b: d9:10:1e:ce:d1:b4:6b:ef:67:05:55:7d:5c:ff:ee: f6:57:ab:4e:55:dc:8e:42:ed:be:72:88:53:14:93: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:41:08:DD:AC:BD:64:19:00:91:8C:BD:43:71:D8:4B:AA:5B:E6:17 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:58:90:3a:da:32:df:02:5b:3e:76:d2:7a:df:35:12:fe:7f: e6:b6:01:48:3e:1f:dd:05:9b:16:6f:8f:b2:ee:ab:3c:8d:3a: 2e:0e:17:2d:b4:75:c1:fa:0c:47:86:5e:76:39:09:30:cb:fd: 1e:b9:8a:14:aa:30:8e:6e:c9:df:54:41:1b:ff:18:5b:9b:42: 2c:e0:d9:64:1f:2d:a1:f9:b8:c2:33:fc:07:8b:bc:14:2a:62: dc:a6:49:3a:41:eb:16:e8:42:39:ab:e4:0d:29:7f:bf:a0:3b: 41:84:ef:e6:3d:94:39:f7:8a:fa:a2:b9:ac:74:5e:d8:f0:fd: 59:76:89:3a:ca:01:e9:d2:60:01:33:8c:b1:61:3a:05:99:99: de:5a:94:66:c1:f2:71:23:2a:cd:39:53:26:06:7e:14:37:69: 7e:af:6b:4f:00:e8:c1:fe:6f:3a:ad:5c:8f:61:f2:7c:fb:24: bd:35:dc:78:0d:f8:fd:50:6b:1e:38:db:6a:11:c1:12:59:f6: 20:9e:98:e0:ee:ae:c7:ba:4a:c9:ed:b0:92:f6:31:8e:76:3b: 43:cf:52:68:10:a5:38:2e:ac:3b:e3:b7:83:c1:65:ca:09:99: c4:37:76:b6:61:a7:2c:46:33:19:85:8b:87:11:d9:91:c3:6a: 61:f0:4d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUwNjAxMDE1NDMyWhcNMjUwNjA4MDE1NDMyWjAYMRYwFAYD VQQDEw02ODNiYjJkOS1lNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/Y0hufOyoD1ym/+OhHZUFn26s8DoKieFZzdcm8Cv9OaXeQYsBBrUShMY2lG n5L0P4MVc/8hNgXwMu22mOwCE2E3oEdqvupLTBdZ7cyFsdC2P5/dmn2qvLpOqPNA 1MOfUGBxUB/q+Nh+fo9JErABqaDHZJdl1hQXYXd4zZMdQnUJBVc9d0SvqhKvwz27 Aob34JDyE1A6dap3R+dOP+vyEimTrdSyXtD8BdwM0zowGEMUMzZZcgNVxemmeGep Pa+YQarA9ABS792uI6ZxxP4f/44nStwhpDMlFDXpSdrdhRvZEB7O0bRr72cFVX1c /+72V6tOVdyOQu2+cohTFJPDJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpBCN2s vWQZAJGMvUNx2EuqW+YXMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGWJA62jLfAls+dtJ63zUS/n/mtgFIPh/dBZsWb4+y7qs8jTouDhct tHXB+gxHhl52OQkwy/0euYoUqjCObsnfVEEb/xhbm0Is4NlkHy2h+bjCM/wHi7wU KmLcpkk6QesW6EI5q+QNKX+/oDtBhO/mPZQ594r6ormsdF7Y8P1Zdok6ygHp0mAB M4yxYToFmZneWpRmwfJxIyrNOVMmBn4UN2l+r2tPAOjB/m86rVyPYfJ8+yS9Ndx4 Dfj9UGseONtqEcESWfYgnpjg7q7HukrJ7bCS9jGOdjtDz1JoEKU4Lqw747eDwWXK CZnEN3a2YacsRjMZhYuHEdmRw2ph8E1t -----END CERTIFICATE-----Generated at Mon Jun 2 18:40:52 2025 by rpki-client