$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft File: V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json) Hash identifier: iDTJtubejpKez8SIpZk6tUxfbvd9OnKtd+yEoauQOsc= Subject key identifier: CD:3F:BF:90:B3:8E:2F:D7:0F:68:E5:00:A3:F7:36:05:16:96:90:1E Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53 Certificate issuer: /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 08:32:22 +0000 Manifest this update: Sat 05 Jul 2025 08:32:21 +0000 Manifest next update: Sat 12 Jul 2025 08:32:21 +0000 Files and hashes: 1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: 0ov3yUp2k/tChJ8ZCIXattt15McwNK3y2mqm7+PEOso=) 2: AFC0FD50572F11F088461C69C4F9AE02.roa (hash: nfCf67vpjtYP68lx8zLFvTcNE+LlR0oj7S42csxphUU=) 3: B0316860572F11F088461C69C4F9AE02.roa (hash: 5V0QNOw88FXF/mGu8PltzmfvTB733rLSxbGFqy6I/Rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53 Validity Not Before: Jul 5 08:32:21 2025 GMT Not After : Jul 12 08:32:21 2025 GMT Subject: CN=6868e316-43f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:a7:08:dd:32:ea:67:2e:12:9b:80:72:dc: 68:aa:c9:5c:23:68:46:00:64:3f:ce:3c:6e:ca:7f: d1:b1:18:50:25:1f:97:25:db:0b:47:a2:e2:3d:4a: 73:b4:88:ab:ca:51:e7:c3:0a:be:37:b8:d1:d2:00: ca:9e:6b:93:5a:56:e8:9a:cf:d8:5f:dc:4e:b4:fb: 66:0d:18:73:a4:c1:1a:d8:03:f3:43:79:7e:fe:8e: b3:55:40:63:93:04:1f:39:74:e6:18:6a:20:e3:cf: c8:bb:1e:7f:8c:b0:4c:a8:36:47:dc:e9:73:05:b8: f3:bf:95:66:ca:44:5d:c6:c7:22:b9:ba:b1:aa:be: f5:9d:d1:96:fa:77:d9:29:6d:1f:9a:ae:01:5b:06: bd:84:54:2c:de:08:a6:79:f2:38:c9:e5:b8:82:3d: 71:e9:b3:ff:16:fd:5b:58:70:60:98:fd:d6:34:bb: 55:ec:86:9c:43:2a:37:f5:74:10:e8:6c:2c:4f:a2: 5d:f8:a2:92:01:77:10:d5:2f:8b:9c:bb:ab:07:df: c5:e1:1f:39:49:99:5e:a0:44:84:6c:2d:1e:05:51: 03:c2:7f:24:94:c7:b2:8d:03:96:d8:e4:79:b8:d1: 12:09:25:64:86:3b:c0:28:b1:10:c6:ca:58:3f:4c: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:BF:90:B3:8E:2F:D7:0F:68:E5:00:A3:F7:36:05:16:96:90:1E X509v3 Authority Key Identifier: keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7a:80:09:ab:b8:7f:06:85:c0:2a:03:65:fa:57:20:d6:07: c4:e2:57:06:f6:91:5e:45:d8:c1:28:4f:51:d8:62:6c:61:f3: 6b:7a:59:97:5b:d9:96:8a:2e:c1:56:1d:e4:27:42:37:db:e2: 56:7d:9b:10:42:5d:75:e1:f0:de:c6:a3:a7:60:4d:27:27:a2: a7:f9:18:ee:ef:9f:53:9f:ed:22:3e:3a:f5:3b:43:01:a4:25: 97:12:c7:8f:1f:a2:f0:d5:b7:a6:5e:4f:79:d7:bd:59:d4:c1: 7e:72:4d:74:d0:a7:06:d6:87:ab:53:86:42:e8:13:82:cb:d5: 4c:7e:4b:68:8c:04:79:01:3e:8c:10:c8:c0:bb:f5:4d:6d:51: 8f:d0:28:48:f4:b0:00:20:2c:bf:ed:5c:14:c3:9c:0c:91:57: 22:37:8e:a3:58:69:55:e4:09:63:39:9b:5a:2b:7a:fc:8c:9b: 3d:98:eb:3f:24:16:00:c4:fa:b3:90:48:8c:d3:25:87:42:f7: c1:30:fb:b1:98:0e:d0:c0:8a:c5:3d:67:0e:d2:30:24:ce:10: 16:52:be:22:22:fc:29:d7:65:6f:6c:c6:c1:6d:ed:e0:66:49: 06:b7:92:ac:c6:75:6d:5e:5f:07:26:24:b3:75:1f:40:d2:a6: b3:d0:f7:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTBDNTExMC8GA1UEBRMoNTc4ODQ5QzlCOTRBMzU1QTc2MjBBOTc0Nzk3M0QyMUJC RURBM0Y1MzAeFw0yNTA3MDUwODMyMjFaFw0yNTA3MTIwODMyMjFaMBgxFjAUBgNV BAMTDTY4NjhlMzE2LTQzZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEz6cI3TLqZy4Sm4By3GiqyVwjaEYAZD/OPG7Kf9GxGFAlH5cl2wtHouI9SnO0 iKvKUefDCr43uNHSAMqea5NaVuiaz9hf3E60+2YNGHOkwRrYA/NDeX7+jrNVQGOT BB85dOYYaiDjz8i7Hn+MsEyoNkfc6XMFuPO/lWbKRF3GxyK5urGqvvWd0Zb6d9kp bR+argFbBr2EVCzeCKZ58jjJ5biCPXHps/8W/VtYcGCY/dY0u1XshpxDKjf1dBDo bCxPol34opIBdxDVL4ucu6sH38XhHzlJmV6gRIRsLR4FUQPCfySUx7KNA5bY5Hm4 0RIJJWSGO8AosRDGylg/TAeNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzT+/kLOO L9cPaOUAo/c2BRaWkB4wHwYDVR0jBBgwFoAUV4hJyblKNVp2IKl0eXPSG77aP1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0QxMDlFQkQwNTcy RTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxLTlZwMklLbDBlWFBTRzc3YVAx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjRoSnlibEtOVnAySUtsMGVYUFNHNzdhUDFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MEM1L0QxMDlFQkQwNTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxLTlZw MklLbDBlWFBTRzc3YVAxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACh6gAmruH8GhcAqA2X6VyDWB8TiVwb2kV5F2MEoT1HYYmxh82t6WZdb 2ZaKLsFWHeQnQjfb4lZ9mxBCXXXh8N7Go6dgTScnoqf5GO7vn1Of7SI+OvU7QwGk JZcSx48fovDVt6ZeT3nXvVnUwX5yTXTQpwbWh6tThkLoE4LL1Ux+S2iMBHkBPowQ yMC79U1tUY/QKEj0sAAgLL/tXBTDnAyRVyI3jqNYaVXkCWM5m1orevyMmz2Y6z8k FgDE+rOQSIzTJYdC98Ew+7GYDtDAisU9Zw7SMCTOEBZSviIi/CnXZW9sxsFt7eBm SQa3kqzGdW1eXwcmJLN1H0DSprPQ92M= -----END CERTIFICATE-----Generated at Sun Jul 6 11:35:41 2025 by rpki-client