$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: ZZ2rFbOTuxzyj2Z201EW9JELDT/jojgz3Ee2ZQq0Rrw= Subject key identifier: 74:FC:EC:5B:DB:42:85:B8:C5:1A:CE:E2:F6:6F:1E:D4:A8:C7:7D:91 Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: 6C Signing time: Tue 01 Jul 2025 07:41:40 +0000 Manifest this update: Tue 01 Jul 2025 07:41:39 +0000 Manifest next update: Tue 08 Jul 2025 07:41:39 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: 8fpUg+4DuvAZxeR2KAKC3mK01kf3wwm4lEAw4g7q6j0=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Jul 1 07:41:39 2025 GMT Not After : Jul 8 07:41:39 2025 GMT Subject: CN=68639133-ca5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:3a:ab:83:42:0a:0a:66:97:48:3b:6a:6d: 7e:b1:48:75:16:ff:90:de:2f:98:fe:9f:73:cb:ad: 48:24:f7:df:31:93:8f:cc:df:54:e3:5b:ee:44:c8: a9:40:78:0f:2d:83:3e:7b:51:52:b9:d8:8e:74:3f: 14:ce:62:9f:52:ab:22:79:db:38:78:99:f8:b2:84: d3:3d:ea:a0:51:0f:9f:8e:0c:43:ff:bb:c9:25:f5: 4a:db:ce:83:73:9d:df:cf:87:d7:79:e2:a1:19:29: 54:8a:de:df:d8:36:e7:b4:15:88:56:80:72:5e:b4: 5c:1f:3c:1b:c8:c9:7b:00:b5:b8:e4:e7:6e:3c:ab: a9:4d:ac:c1:7e:c1:bd:ea:ca:ee:e2:9c:49:11:b0: b0:f8:3a:ec:6b:65:b1:a7:ed:25:82:1f:2f:13:49: dd:fd:d1:4b:55:b5:a2:00:e7:9a:6b:97:95:6e:67: 79:4e:28:54:3c:5b:cb:78:32:68:ea:27:62:5b:1c: d1:96:1e:0b:7f:54:55:ce:3f:d2:3e:6e:6e:48:dd: b7:ab:ab:c1:f8:0e:1c:8e:73:ce:84:91:4e:f9:21: b6:ff:fc:7e:96:65:58:41:44:7d:60:0f:9c:22:9f: 61:17:b6:39:84:e1:5f:5c:37:83:9d:9d:6e:b8:84: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FC:EC:5B:DB:42:85:B8:C5:1A:CE:E2:F6:6F:1E:D4:A8:C7:7D:91 X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:be:29:23:bc:5f:e9:b6:0d:83:ac:d3:e2:7c:f1:53:cc:c2: c2:86:42:df:48:cc:df:02:fa:f4:01:27:40:ea:d2:4b:02:c4: 7e:24:03:5f:3a:02:31:8a:82:12:02:15:03:3a:75:56:0a:8b: 05:ed:04:ac:41:37:0a:84:ef:4c:19:b2:69:18:e2:12:19:76: 68:d2:3a:e3:74:47:93:c3:77:f1:2b:55:f6:21:90:a6:00:d5: 3a:98:40:b6:0d:34:93:b1:2b:90:cc:73:82:ff:c1:59:c8:29: d1:c6:8b:9c:c4:4d:fa:4d:4c:9a:5d:e1:2b:fc:17:92:de:a7: 00:3a:96:11:12:0f:31:d1:17:82:78:20:c7:de:05:34:cb:28: 29:e1:3f:80:cb:da:bc:83:5a:cd:8a:36:6b:4c:e5:27:74:c6: 92:dd:da:26:95:6f:a5:f1:8a:35:16:9a:ce:cd:f2:70:b2:85: 61:f7:79:c4:ac:67:12:c7:cd:36:bb:60:af:f0:33:56:1d:55: 1a:74:2e:6d:c1:4f:3c:67:ed:c3:c6:50:fb:06:c7:40:ac:e6: f6:fb:54:4e:e4:b1:1c:56:5e:82:be:8b:88:96:b5:b1:92:a3: 9e:83:fb:4e:7b:7b:ad:01:65:cb:73:e8:b3:e4:54:0e:2d:40: a0:45:d0:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUIxMzExMC8GA1UEBRMoRTNGMTZGOUQ3M0NDRUUyNjkzOTE1QTI0NEY0NEI1NTNB NERCM0RDQzAeFw0yNTA3MDEwNzQxMzlaFw0yNTA3MDgwNzQxMzlaMBgxFjAUBgNV BAMTDTY4NjM5MTMzLWNhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1/Tqrg0IKCmaXSDtqbX6xSHUW/5DeL5j+n3PLrUgk998xk4/M31TjW+5EyKlA eA8tgz57UVK52I50PxTOYp9SqyJ52zh4mfiyhNM96qBRD5+ODEP/u8kl9UrbzoNz nd/Ph9d54qEZKVSK3t/YNue0FYhWgHJetFwfPBvIyXsAtbjk5248q6lNrMF+wb3q yu7inEkRsLD4OuxrZbGn7SWCHy8TSd390UtVtaIA55prl5VuZ3lOKFQ8W8t4Mmjq J2JbHNGWHgt/VFXOP9I+bm5I3berq8H4DhyOc86EkU75Ibb//H6WZVhBRH1gD5wi n2EXtjmE4V9cN4OdnW64hDopAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdPzsW9tC hbjFGs7i9m8e1KjHfZEwHwYDVR0jBBgwFoAU4/FvnXPM7iaTkVokT0S1U6TbPcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzQ2MzdGQkYyQjEy ODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNF9Gdm5YUE03aWFUa1Zva1QwUzFVNlRiUGN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjEzLzQ2MzdGQkYyQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lh VGtWb2tUMFMxVTZUYlBjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2+KSO8X+m2DYOs0+J88VPMwsKGQt9IzN8C+vQBJ0Dq0ksCxH4kA186 AjGKghICFQM6dVYKiwXtBKxBNwqE70wZsmkY4hIZdmjSOuN0R5PDd/ErVfYhkKYA 1TqYQLYNNJOxK5DMc4L/wVnIKdHGi5zETfpNTJpd4Sv8F5LepwA6lhESDzHRF4J4 IMfeBTTLKCnhP4DL2ryDWs2KNmtM5Sd0xpLd2iaVb6XxijUWms7N8nCyhWH3ecSs ZxLHzTa7YK/wM1YdVRp0Lm3BTzxn7cPGUPsGx0Cs5vb7VE7ksRxWXoK+i4iWtbGS o56D+057e60BZctz6LPkVA4tQKBF0CA= -----END CERTIFICATE-----Generated at Wed Jul 2 13:26:23 2025 by rpki-client