$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: mlCYghsn5R8LMaphvQ/i64vcMcgYJiOBTdUcIYBgF/M= Subject key identifier: 6F:33:57:17:55:69:AC:98:9B:F5:E5:0D:09:37:42:FC:7A:F9:16:DF Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07A7 Signing time: Fri 30 May 2025 21:28:52 +0000 Manifest this update: Fri 30 May 2025 21:28:52 +0000 Manifest next update: Fri 06 Jun 2025 21:28:52 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: 9H/ZqCGbVcUcFXPmffIGCiE2oWEW80g7EnM+2Kkh7cQ=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: May 30 21:28:52 2025 GMT Not After : Jun 6 21:28:52 2025 GMT Subject: CN=683a2314-0f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:81:82:c2:7b:84:cc:26:b4:aa:e9:7d:99: 52:99:6a:71:76:15:7f:a6:4e:1a:ff:44:38:6a:41: 22:b3:bd:85:71:a1:d0:15:3e:5a:c3:13:9d:8f:31: fd:70:4e:bd:e4:89:b2:2f:ca:97:35:26:c0:fd:ce: 8c:3f:b1:7a:fd:ae:4a:65:00:d0:5b:71:e7:d9:73: 28:1d:a5:28:cc:29:fa:8a:c4:d4:b1:4b:ff:1c:13: a0:2b:40:11:6e:30:fa:9b:fc:a8:ad:79:49:ef:b5: 97:49:af:28:fc:56:37:e3:63:9a:17:fb:2e:e4:88: f6:2f:ce:0f:46:17:ce:50:23:e9:20:8e:a6:6e:cf: ce:c7:ee:42:84:cf:f6:50:db:ca:63:4f:6f:5e:d7: a0:89:da:bd:c9:a4:e0:4f:7d:98:8e:97:2c:5e:89: 66:ad:2b:71:82:e8:c7:06:c9:10:20:ab:cf:c5:85: e1:23:8c:96:ec:bf:8c:3b:69:93:20:88:98:4a:95: 36:49:b4:6f:7d:95:f4:1b:06:12:6d:c9:a9:f3:72: 0d:c4:f7:bf:a9:cf:b1:57:8b:8b:0c:46:12:46:da: f1:f6:e5:2c:ae:3a:c0:60:9d:0c:75:9a:4b:62:e1: 10:29:e9:d5:8d:3e:40:4e:3f:eb:6a:81:c9:0e:36: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:33:57:17:55:69:AC:98:9B:F5:E5:0D:09:37:42:FC:7A:F9:16:DF X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:05:3c:d9:bd:4b:ea:e6:ab:74:05:79:2a:13:86:7c:30:83: dc:cd:9d:03:1c:16:24:f8:a6:b9:0a:30:26:1a:d6:96:bc:6e: d8:93:e3:9d:22:7f:20:f9:a5:63:ae:82:24:ca:9c:b6:e4:97: 32:9c:c4:29:8d:84:97:ce:7f:12:22:2b:07:f4:6b:c5:e1:f5: 2b:e8:d6:16:56:da:26:99:84:32:f0:d3:e5:cc:c8:c3:70:f8: cf:1b:f1:ea:2c:f5:2e:b1:2c:09:be:6e:80:14:7b:f4:de:fc: 46:54:7f:ee:90:01:7c:19:3a:ef:b2:6a:67:6c:7b:42:23:24: 7f:52:e5:b6:84:ef:f6:13:e7:50:51:02:cc:b4:c9:7b:d6:9e: 3e:c0:11:76:b2:1f:70:11:09:1c:7c:e6:68:04:77:10:04:5d: 0e:2c:d2:c4:52:09:87:03:5d:8d:dc:be:a8:52:bd:98:2a:97: 33:49:64:c7:8f:13:04:17:05:27:22:7f:e6:99:7c:d2:15:0b: a2:77:25:32:27:80:3a:6e:f9:4c:1c:a4:a4:84:f7:d8:c1:ca: 2b:47:c3:cb:3e:22:2c:f4:0d:66:64:22:bd:0d:c8:26:11:14: 08:d7:aa:d5:fa:42:c8:fd:02:48:d0:41:b8:34:8f:92:cd:2e: 4d:c1:7f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwNTMwMjEyODUyWhcNMjUwNjA2MjEyODUyWjAYMRYwFAYD VQQDEw02ODNhMjMxNC0wZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1iBgsJ7hMwmtKrpfZlSmWpxdhV/pk4a/0Q4akEis72FcaHQFT5awxOdjzH9 cE695ImyL8qXNSbA/c6MP7F6/a5KZQDQW3Hn2XMoHaUozCn6isTUsUv/HBOgK0AR bjD6m/yorXlJ77WXSa8o/FY342OaF/su5Ij2L84PRhfOUCPpII6mbs/Ox+5ChM/2 UNvKY09vXtegidq9yaTgT32YjpcsXolmrStxgujHBskQIKvPxYXhI4yW7L+MO2mT IIiYSpU2SbRvfZX0GwYSbcmp83INxPe/qc+xV4uLDEYSRtrx9uUsrjrAYJ0MdZpL YuEQKenVjT5ATj/raoHJDjbpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8zVxdV aayYm/XlDQk3Qvx6+RbfMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPBTzZvUvq5qt0BXkqE4Z8MIPczZ0DHBYk+Ka5CjAmGtaWvG7Yk+Od In8g+aVjroIkypy25JcynMQpjYSXzn8SIisH9GvF4fUr6NYWVtommYQy8NPlzMjD cPjPG/HqLPUusSwJvm6AFHv03vxGVH/ukAF8GTrvsmpnbHtCIyR/UuW2hO/2E+dQ UQLMtMl71p4+wBF2sh9wEQkcfOZoBHcQBF0OLNLEUgmHA12N3L6oUr2YKpczSWTH jxMEFwUnIn/mmXzSFQuidyUyJ4A6bvlMHKSkhPfYwcorR8PLPiIs9A1mZCK9Dcgm ERQI16rV+kLI/QJI0EG4NI+SzS5NwX8l -----END CERTIFICATE-----Generated at Sat May 31 16:35:55 2025 by rpki-client