$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: z0WZ5xXuccvTljI2qmE11p0c4IuUGVUIZC2FiKUojWY= Subject key identifier: 21:85:D3:26:E3:23:1B:B0:F8:E2:52:5E:B2:6B:A4:16:72:0D:62:92 Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 04BD Signing time: Thu 12 Jun 2025 23:30:54 +0000 Manifest this update: Thu 12 Jun 2025 23:30:54 +0000 Manifest next update: Thu 19 Jun 2025 23:30:54 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: KxsGbD8MwygVIVPbrgWtXjJZ9J/yUEpXl4eCltuh8Ms=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: Jun 12 23:30:54 2025 GMT Not After : Jun 19 23:30:54 2025 GMT Subject: CN=684b632e-46de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:ec:7a:e4:c4:41:85:57:3e:91:fa:c5:40: e0:14:73:e5:6a:b8:ef:d8:b1:b1:18:c0:f7:93:90: 57:53:dd:0e:fd:38:63:a1:c0:94:9e:c1:a6:d0:d4: 34:d6:c2:52:eb:b1:e7:d9:a1:16:21:03:2f:5d:37: 31:f5:50:d1:47:34:1d:9f:f4:a3:fc:94:b3:51:55: 61:1f:20:a3:6b:5e:35:89:19:da:1b:48:b2:3a:1f: 9b:33:2a:f1:08:ef:02:50:7f:20:b5:da:6c:7a:c4: 21:f3:37:91:a1:54:93:35:55:b2:58:d7:8b:bc:99: 0b:fe:47:9c:ae:c2:6b:4c:66:78:eb:fb:ad:6c:1c: e0:5d:b2:47:14:f6:17:ec:08:83:77:3b:ee:ea:1f: 00:ca:eb:04:f4:db:1d:3f:a4:96:bb:29:bd:38:16: f7:e2:5e:56:a7:15:d6:f3:45:76:d4:40:37:74:02: e1:68:65:83:27:f0:f9:3b:e2:40:22:ed:cc:ba:c5: b4:74:ef:00:f5:7b:49:02:07:45:b8:12:16:23:0e: 30:a8:c4:f5:23:57:ec:b4:a9:0a:d3:cd:b7:e9:08: b8:7d:62:48:a8:48:c2:e1:2f:f9:15:ca:32:c6:f8: 28:6b:78:20:99:bd:9e:fe:89:9a:a1:15:09:b2:b7: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:85:D3:26:E3:23:1B:B0:F8:E2:52:5E:B2:6B:A4:16:72:0D:62:92 X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b1:f4:8d:ac:41:7d:95:b6:18:6a:7f:f5:92:ea:fd:f7:26: cd:df:d7:b0:a3:d5:9b:cc:1a:83:d0:74:cb:16:2d:74:73:45: c4:46:ce:07:e5:ba:10:40:f5:48:cc:03:a0:0d:c5:8f:58:9c: 66:98:90:64:bd:8a:93:4a:c6:5f:be:c6:58:9d:bf:97:8e:42: 15:85:5d:d2:f9:a7:14:10:55:da:6f:23:b3:b1:b1:f2:f1:9c: 7d:ee:df:3c:c4:53:80:22:79:81:fc:15:9f:63:65:97:99:01: aa:8d:ab:33:1f:d9:0f:ef:e0:13:26:47:d4:39:48:e4:70:f1: 8d:a0:1a:1d:fe:48:30:e6:d4:06:f3:1f:17:d6:9e:91:2e:52: 8d:1b:ce:8c:23:b6:b6:34:e3:8c:ea:1f:c4:3d:4d:c7:f9:1d: cd:52:db:5e:8a:80:3f:49:26:b3:c5:d2:bb:b7:a3:d7:c8:a5: d8:0e:bd:e2:cb:42:2e:6e:2a:39:d0:5e:23:bf:f4:42:5f:f3: a7:39:19:5c:16:1d:03:e3:35:13:47:4b:13:35:07:4b:c4:4f: 5b:db:c2:27:59:de:2d:f1:2a:28:34:07:98:d4:b5:94:f4:97: fc:9d:ee:06:02:c6:80:06:f3:32:44:01:6a:90:b5:29:94:b8: 07:7e:6b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjUwNjEyMjMzMDU0WhcNMjUwNjE5MjMzMDU0WjAYMRYwFAYD VQQDEw02ODRiNjMyZS00NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/DseuTEQYVXPpH6xUDgFHPlarjv2LGxGMD3k5BXU90O/ThjocCUnsGm0NQ0 1sJS67Hn2aEWIQMvXTcx9VDRRzQdn/Sj/JSzUVVhHyCja141iRnaG0iyOh+bMyrx CO8CUH8gtdpsesQh8zeRoVSTNVWyWNeLvJkL/kecrsJrTGZ46/utbBzgXbJHFPYX 7AiDdzvu6h8AyusE9NsdP6SWuym9OBb34l5WpxXW80V21EA3dALhaGWDJ/D5O+JA Iu3MusW0dO8A9XtJAgdFuBIWIw4wqMT1I1fstKkK08236Qi4fWJIqEjC4S/5Fcoy xvgoa3ggmb2e/omaoRUJsrdRlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGF0ybj Ixuw+OJSXrJrpBZyDWKSMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAesfSNrEF9lbYYan/1kur99ybN39ewo9WbzBqD0HTLFi10c0XERs4H 5boQQPVIzAOgDcWPWJxmmJBkvYqTSsZfvsZYnb+XjkIVhV3S+acUEFXabyOzsbHy 8Zx97t88xFOAInmB/BWfY2WXmQGqjaszH9kP7+ATJkfUOUjkcPGNoBod/kgw5tQG 8x8X1p6RLlKNG86MI7a2NOOM6h/EPU3H+R3NUtteioA/SSazxdK7t6PXyKXYDr3i y0Iubio50F4jv/RCX/OnORlcFh0D4zUTR0sTNQdLxE9b28InWd4t8SooNAeY1LWU 9Jf8ne4GAsaABvMyRAFqkLUplLgHfmvP -----END CERTIFICATE-----Generated at Fri Jun 13 15:22:05 2025 by rpki-client