$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: 1eXTKCMxgDAPxSAuxBSEnWBsF2o1oqAlaM2Gr+91dk0= Subject key identifier: 12:88:F8:CC:8C:DB:1C:D6:72:F0:C6:02:5F:21:8B:46:A2:9C:DD:8D Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: 88 Signing time: Sat 31 May 2025 06:11:37 +0000 Manifest this update: Sat 31 May 2025 06:11:36 +0000 Manifest next update: Sat 07 Jun 2025 06:11:36 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: ovGZDbsgewmQYWCzpKl4UDeM5B79fYOoijIXpgkitUs=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: SEeajkndfK9XKBY3HRdlq0CgTt3jAkAhBVklDZv6c2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: May 31 06:11:36 2025 GMT Not After : Jun 7 06:11:36 2025 GMT Subject: CN=683a9d98-554a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:af:50:bf:00:26:bd:bb:cf:c4:32:2c:03: 66:95:04:95:e5:76:08:33:6d:4b:d9:c8:8f:bc:fc: 29:1c:e3:07:b9:ad:4d:67:a6:3b:17:0c:b8:96:4e: 27:96:b8:4d:35:a7:28:f3:ef:70:e3:ec:e3:ca:cf: d8:a4:46:9d:0e:b1:2e:0f:ab:d9:3e:65:26:c6:71: ae:74:4b:47:74:46:39:b3:d4:d9:b7:fd:61:f0:16: 71:e7:f5:38:01:d4:2f:c9:d0:1e:a0:19:c3:65:8b: 5e:69:46:95:0b:37:7b:c0:e7:12:1a:4d:08:1a:28: ea:65:2c:c3:93:be:ab:d8:24:88:2c:42:95:d8:94: 63:4f:c8:3c:f8:d8:e9:bd:19:8c:ac:d7:c3:24:5a: 0e:b5:72:4b:ac:b0:48:da:63:3a:57:89:b5:7b:01: 44:d4:3d:ff:a8:47:78:81:aa:44:b5:d5:5f:13:40: 7b:ab:b7:c7:d7:e5:bb:7b:b8:f4:a3:3d:40:45:1a: 33:0b:56:25:1e:8e:3a:e3:28:ef:b0:06:d4:c4:c6: 2d:84:f2:95:01:7f:3a:6d:4c:47:22:f2:62:cc:31: fe:29:7e:07:d4:7d:eb:7e:11:85:61:88:1a:8f:79: 8b:7f:ee:e4:e3:47:e2:e3:1a:7c:24:6f:1a:f0:cd: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:88:F8:CC:8C:DB:1C:D6:72:F0:C6:02:5F:21:8B:46:A2:9C:DD:8D X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:0c:8d:2c:39:0a:6d:45:68:db:4d:6d:3b:60:a9:d9:ac:da: 26:c0:4c:c0:58:4e:54:6b:10:04:9f:fa:83:9e:cc:0b:a8:4e: cd:ec:31:a7:d6:42:57:52:18:3b:a8:5d:1e:34:e3:e2:94:29: 96:79:46:6e:1d:ed:31:a7:84:ee:b3:c2:b1:26:8e:a1:90:d8: d4:46:fb:25:fa:06:c6:20:96:ed:03:f5:cc:7d:f7:4e:d4:3e: fd:5b:b6:1f:3d:cb:b6:5a:2a:14:3c:32:f3:9c:df:86:c2:b7: 7c:ed:71:ce:f0:98:b7:f7:04:03:6b:05:be:47:41:92:98:8f: 97:a2:1e:e5:d7:2b:36:9c:1a:a6:53:1f:e6:a2:09:ab:30:05: e0:0f:e9:71:b6:b5:bf:1e:63:5e:39:d6:85:cc:ea:2b:81:e3: 37:f7:f2:83:11:9c:35:a9:4b:ef:6e:df:b2:09:bd:43:07:72: a4:68:a3:10:6c:6a:9d:59:03:95:2c:23:60:a3:a6:2c:3e:1b: 09:7a:4e:64:58:b9:99:aa:f2:c3:ca:fd:fd:88:8a:af:b0:4e: 0c:23:af:b5:19:94:38:c5:ee:15:28:54:ef:19:62:58:4d:34: 6f:ab:9a:a5:0e:a1:26:14:f9:16:f6:bf:ac:ef:ae:50:cc:7e: 36:88:0a:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1 RkYxMTg5NTMwHhcNMjUwNTMxMDYxMTM2WhcNMjUwNjA3MDYxMTM2WjAYMRYwFAYD VQQDEw02ODNhOWQ5OC01NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoivUL8AJr27z8QyLANmlQSV5XYIM21L2ciPvPwpHOMHua1NZ6Y7Fwy4lk4n lrhNNaco8+9w4+zjys/YpEadDrEuD6vZPmUmxnGudEtHdEY5s9TZt/1h8BZx5/U4 AdQvydAeoBnDZYteaUaVCzd7wOcSGk0IGijqZSzDk76r2CSILEKV2JRjT8g8+Njp vRmMrNfDJFoOtXJLrLBI2mM6V4m1ewFE1D3/qEd4gapEtdVfE0B7q7fH1+W7e7j0 oz1ARRozC1YlHo464yjvsAbUxMYthPKVAX86bUxHIvJizDH+KX4H1H3rfhGFYYga j3mLf+7k40fi4xp8JG8a8M0zUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKI+MyM 2xzWcvDGAl8hi0ainN2NMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEDI0sOQptRWjbTW07YKnZrNomwEzAWE5UaxAEn/qDnswLqE7N7DGn 1kJXUhg7qF0eNOPilCmWeUZuHe0xp4Tus8KxJo6hkNjURvsl+gbGIJbtA/XMffdO 1D79W7YfPcu2WioUPDLznN+Gwrd87XHO8Ji39wQDawW+R0GSmI+Xoh7l1ys2nBqm Ux/mogmrMAXgD+lxtrW/HmNeOdaFzOorgeM39/KDEZw1qUvvbt+yCb1DB3KkaKMQ bGqdWQOVLCNgo6YsPhsJek5kWLmZqvLDyv39iIqvsE4MI6+1GZQ4xe4VKFTvGWJY TTRvq5qlDqEmFPkW9r+s765QzH42iApR -----END CERTIFICATE-----Generated at Sat May 31 17:09:00 2025 by rpki-client