$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: AdxFAaSXCIlYwagXz4cn4sr42HqpKqy3RaiMps8jTak= Subject key identifier: EC:FC:A5:BD:2D:2A:DC:33:BE:44:81:89:D7:74:01:B3:37:B3:60:0F Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 0404 Signing time: Sat 07 Jun 2025 01:24:56 +0000 Manifest this update: Sat 07 Jun 2025 01:24:55 +0000 Manifest next update: Sat 14 Jun 2025 01:24:55 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: zWCn6RKtcxGh9giw7FeulcaiLE1ItFiBoKqyGrR4oXk=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: 1zvSdpAHw0fs7lwNzlneLRJlvrtEo2uuRtlcQwqc+2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Jun 7 01:24:55 2025 GMT Not After : Jun 14 01:24:55 2025 GMT Subject: CN=684394e7-eae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:42:e9:2f:cc:b5:4b:b0:17:c2:fa:eb:4e: f9:11:c1:bd:c7:2f:88:9e:0d:ea:b2:49:48:5e:d4: cd:fa:5a:8c:c9:09:d8:5f:62:5a:52:e9:db:21:66: 09:36:a8:c1:ef:15:a5:f2:4f:5e:60:65:ce:11:52: d1:6c:fc:6a:dd:15:d8:8c:b5:87:53:79:c9:c8:0c: 13:c0:2f:bc:40:74:5c:ef:84:9f:8d:ca:15:a9:8c: 6c:8f:5b:0d:3c:7c:1b:e7:6a:67:db:08:3d:19:6f: c0:ef:87:5d:bb:6d:2f:68:3c:68:bb:0e:d9:a0:46: 04:98:5a:25:4d:8c:37:26:8f:d9:a4:38:ff:9f:ea: 1e:31:2d:da:33:fd:09:1b:2b:57:94:8e:05:57:dc: 34:f4:e5:23:0c:7e:3b:af:3a:f2:ec:5b:e2:be:8b: c9:24:6f:67:85:f5:db:80:a3:64:67:45:7f:58:a2: 7f:9b:fe:60:30:85:24:be:4e:36:42:ff:75:24:89: 3e:1a:e7:f7:e7:f5:51:78:37:dd:ab:b0:b6:2d:0d: e4:b1:93:73:5c:ee:01:95:63:45:c6:06:18:bd:bb: cd:7a:a4:83:80:02:4a:24:a8:94:99:c0:43:33:be: 9a:82:4a:4e:00:e5:75:43:5b:66:99:d0:49:e7:6a: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FC:A5:BD:2D:2A:DC:33:BE:44:81:89:D7:74:01:B3:37:B3:60:0F X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bb:67:6c:0b:ed:6d:f8:45:ee:d7:99:df:87:bb:f2:05:58: c0:51:cc:fd:51:06:4f:95:c0:ca:ab:c0:90:4f:ed:2c:3c:c4: 92:92:27:80:3b:26:5b:6f:d5:96:8c:a1:21:63:6d:56:b0:aa: e8:86:83:3f:fc:ca:a1:42:70:c2:bc:d1:43:00:b5:1f:f5:77: a5:4b:c0:7e:60:cc:51:d7:7d:d4:1b:57:33:4c:24:4b:c8:84: cc:5c:53:30:54:58:66:46:68:95:d0:b3:7c:5c:46:4e:4c:fc: 65:0f:64:ce:f6:0a:4a:51:b3:ea:22:66:e9:12:1c:48:23:16: 5e:51:54:7d:78:02:3b:70:29:b9:04:aa:77:a2:b7:a3:83:44: 1e:21:f5:53:64:a4:c9:59:25:1d:4a:f6:1e:47:ae:2e:d3:ac: 3a:96:28:3a:7b:44:ee:77:aa:34:bd:31:c6:1a:5b:98:4e:ca: 85:9e:df:a7:da:9f:37:0e:a1:16:c1:af:c5:85:b8:7a:2d:07: 36:25:2c:b9:cf:f0:11:1b:ab:0d:62:e8:6d:0c:72:4b:24:7c: 9d:51:6b:b0:2a:8e:2a:01:7d:88:88:2e:8f:51:60:29:9e:58: 31:bb:13:b8:8d:c6:43:42:af:e5:49:7e:89:ae:53:00:53:f9: d3:e9:18:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjUwNjA3MDEyNDU1WhcNMjUwNjE0MDEyNDU1WjAYMRYwFAYD VQQDEw02ODQzOTRlNy1lYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU1C6S/MtUuwF8L66075EcG9xy+Ing3qsklIXtTN+lqMyQnYX2JaUunbIWYJ NqjB7xWl8k9eYGXOEVLRbPxq3RXYjLWHU3nJyAwTwC+8QHRc74SfjcoVqYxsj1sN PHwb52pn2wg9GW/A74ddu20vaDxouw7ZoEYEmFolTYw3Jo/ZpDj/n+oeMS3aM/0J GytXlI4FV9w09OUjDH47rzry7FvivovJJG9nhfXbgKNkZ0V/WKJ/m/5gMIUkvk42 Qv91JIk+Guf35/VReDfdq7C2LQ3ksZNzXO4BlWNFxgYYvbvNeqSDgAJKJKiUmcBD M76agkpOAOV1Q1tmmdBJ52pOTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz8pb0t KtwzvkSBidd0AbM3s2APMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRu2dsC+1t+EXu15nfh7vyBVjAUcz9UQZPlcDKq8CQT+0sPMSSkieA OyZbb9WWjKEhY21WsKrohoM//MqhQnDCvNFDALUf9XelS8B+YMxR133UG1czTCRL yITMXFMwVFhmRmiV0LN8XEZOTPxlD2TO9gpKUbPqImbpEhxIIxZeUVR9eAI7cCm5 BKp3orejg0QeIfVTZKTJWSUdSvYeR64u06w6lig6e0Tud6o0vTHGGluYTsqFnt+n 2p83DqEWwa/Fhbh6LQc2JSy5z/ARG6sNYuhtDHJLJHydUWuwKo4qAX2IiC6PUWAp nlgxuxO4jcZDQq/lSX6JrlMAU/nT6Rgl -----END CERTIFICATE-----Generated at Sat Jun 7 15:27:07 2025 by rpki-client