$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft File: 4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json) Hash identifier: Zp1DtDNRD/sIRGD0FtBNIptnCjac3KZ1onQpIzcvsMk= Subject key identifier: C9:0C:40:06:D3:2F:28:3D:F4:82:02:5F:25:C5:21:33:9A:03:70:47 Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft Manifest number: 8F Signing time: Tue 03 Jun 2025 06:16:14 +0000 Manifest this update: Tue 03 Jun 2025 06:16:14 +0000 Manifest next update: Tue 10 Jun 2025 06:16:14 +0000 Files and hashes: 1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: fh36hPaemb8xrNiBnxI9rhvDC6BnWU5n+EB2V4ODRCI=) 2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Validity Not Before: Jun 3 06:16:14 2025 GMT Not After : Jun 10 06:16:14 2025 GMT Subject: CN=683e932e-068e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:ee:b3:05:60:85:b4:a5:63:51:8a:4e:a4: 53:2c:52:18:85:9b:ed:34:79:22:24:9b:cf:c2:d8: 9a:da:72:3f:30:e8:19:77:9c:d4:6e:83:18:e7:6f: a6:fb:81:07:9e:64:fe:91:30:45:e6:65:14:09:7d: 13:cf:e1:f5:03:c7:1c:f0:83:07:94:ab:df:c5:d8: 33:3b:8e:7f:f0:08:bd:d3:22:af:69:fb:19:5c:03: c6:ea:22:96:9a:95:0e:12:e4:ba:29:4a:f1:53:f6: b8:d9:d4:51:f4:05:c0:eb:08:dc:d1:c6:3e:65:ca: 61:c6:56:18:c7:d1:91:52:c1:65:5d:f2:6b:f0:8c: 6b:9f:55:07:22:5a:59:89:2e:f8:86:78:07:f4:58: 26:63:76:3e:5a:02:ac:06:74:3f:4f:b0:14:64:2a: 82:b9:d3:b5:ca:69:85:73:f0:08:0d:c5:a9:4a:bc: 4a:6c:76:0c:ca:42:b6:73:2a:b7:98:dd:cd:3a:e7: e0:f1:0c:c4:0f:d2:b2:58:ee:d7:2a:62:7f:6d:96: c7:c9:95:33:b8:72:e5:e6:f7:0c:b2:13:ef:09:24: 88:5c:62:ac:23:56:31:a5:fd:5a:42:d5:3a:bf:82: 20:87:1f:b9:8c:16:56:45:fd:d9:b9:b6:71:d4:4a: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0C:40:06:D3:2F:28:3D:F4:82:02:5F:25:C5:21:33:9A:03:70:47 X509v3 Authority Key Identifier: keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:64:81:60:d5:55:26:ca:72:5a:6a:b2:0f:b2:ed:98:d4:b7: 26:82:53:db:22:fb:84:f1:fa:dd:9b:f3:35:03:8e:4b:0c:83: 0d:03:cb:f6:f3:8c:fc:5c:d1:66:3c:31:eb:05:c8:e6:68:01: 32:93:d4:53:01:c2:97:9c:f4:80:12:b3:e6:19:37:b9:3f:de: c4:d5:89:48:1b:15:0a:74:77:69:24:b9:86:2c:d5:31:2b:a6: 34:5c:3d:8c:f7:1e:67:f2:e8:53:df:2d:c7:ec:d3:57:5e:d2: d2:27:64:a3:0c:74:05:3e:17:a9:f3:4a:d5:92:18:10:b2:b0: a6:9d:96:67:c4:e0:1f:3d:ce:cd:c6:7f:a8:e1:8e:1c:16:44: f0:02:8b:19:1a:65:40:0e:6f:e1:74:1d:a6:6d:29:3b:82:4d: 8f:bc:b8:7d:fd:73:6f:be:76:8e:c1:e8:45:a9:cf:ac:5c:06: 02:73:9b:90:32:ad:6c:c4:a1:56:2c:ea:59:01:51:c3:6d:98: c3:b1:33:63:9f:67:e5:c1:b8:38:5a:51:c8:5f:40:ac:13:2d: 94:de:93:37:ce:66:3f:40:64:26:82:39:a9:0e:4d:69:2d:1b: 0f:35:d8:e4:26:0b:50:cb:5a:68:d9:f8:8f:0a:8c:6a:f9:8e: 87:a2:a5:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKEUzQUU3RDA3NEQ2OTY3RTJGNDlGRjlFM0I4RDc5QkJG QTI4MDlBOTIwHhcNMjUwNjAzMDYxNjE0WhcNMjUwNjEwMDYxNjE0WjAYMRYwFAYD VQQDEw02ODNlOTMyZS0wNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXnuswVghbSlY1GKTqRTLFIYhZvtNHkiJJvPwtia2nI/MOgZd5zUboMY52+m +4EHnmT+kTBF5mUUCX0Tz+H1A8cc8IMHlKvfxdgzO45/8Ai90yKvafsZXAPG6iKW mpUOEuS6KUrxU/a42dRR9AXA6wjc0cY+ZcphxlYYx9GRUsFlXfJr8Ixrn1UHIlpZ iS74hngH9FgmY3Y+WgKsBnQ/T7AUZCqCudO1ymmFc/AIDcWpSrxKbHYMykK2cyq3 mN3NOufg8QzED9KyWO7XKmJ/bZbHyZUzuHLl5vcMshPvCSSIXGKsI1Yxpf1aQtU6 v4Ighx+5jBZWRf3ZubZx1EoKbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkMQAbT Lyg99IICXyXFITOaA3BHMB8GA1UdIwQYMBaAFOOufQdNaWfi9J/547jXm7+igJqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS84REVGRTgwRTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFotTDBuX25qdU5lYnY2S0Ft cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTY5NS84REVGRTgwRTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFot TDBuX25qdU5lYnY2S0FtcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgZIFg1VUmynJaarIPsu2Y1LcmglPbIvuE8frdm/M1A45LDIMNA8v2 84z8XNFmPDHrBcjmaAEyk9RTAcKXnPSAErPmGTe5P97E1YlIGxUKdHdpJLmGLNUx K6Y0XD2M9x5n8uhT3y3H7NNXXtLSJ2SjDHQFPhep80rVkhgQsrCmnZZnxOAfPc7N xn+o4Y4cFkTwAosZGmVADm/hdB2mbSk7gk2PvLh9/XNvvnaOwehFqc+sXAYCc5uQ Mq1sxKFWLOpZAVHDbZjDsTNjn2flwbg4WlHIX0CsEy2U3pM3zmY/QGQmgjmpDk1p LRsPNdjkJgtQy1po2fiPCoxq+Y6HoqXk -----END CERTIFICATE-----Generated at Wed Jun 4 00:04:29 2025 by rpki-client