$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft File: r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json) Hash identifier: SdmwuiFg+SCq6k/GQH+Jjb2Nr29215dxZR1DMcC/fxo= Subject key identifier: 6B:31:92:2A:35:C0:0E:63:3A:8A:EC:1F:C1:CE:30:94:45:9E:75:FA Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 Certificate issuer: /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft Manifest number: 0732 Signing time: Fri 30 May 2025 21:59:19 +0000 Manifest this update: Fri 30 May 2025 21:59:18 +0000 Manifest next update: Fri 06 Jun 2025 21:59:18 +0000 Files and hashes: 1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: j99zzxTHqh2WFJkN9CXOGxxlZAR8hlLOiqg/fADok4I=) 2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: kntkOaZrAaOx4SVIiImPb0s+dVekp3sawuWhb73K14Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Validity Not Before: May 30 21:59:18 2025 GMT Not After : Jun 6 21:59:18 2025 GMT Subject: CN=683a2a36-ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:f7:e1:70:fa:ad:68:f6:92:af:e4:9d:f9: 86:e5:d5:1b:ac:6c:bd:57:23:6d:b2:3c:6c:8c:fd: b7:01:56:45:91:a3:a1:84:15:3c:7b:fd:d0:b3:b1: 31:e8:13:b9:a8:15:20:d3:48:24:41:d1:c7:8d:d3: 0b:88:5b:24:21:14:d7:31:d6:de:97:20:7c:37:c0: e1:1f:1b:d1:de:45:c2:8f:60:72:82:d9:be:bb:74: f1:96:62:7f:c1:d0:73:45:8e:d8:d5:d7:5f:86:a8: 6a:f0:6c:b3:72:46:b4:bc:a5:02:9c:eb:52:49:e8: 29:2a:19:56:36:80:da:ed:d2:10:7b:39:a5:85:72: 14:ee:3a:c9:04:5c:64:5b:7a:02:ea:e4:5b:01:70: 79:c8:88:b6:23:38:63:77:29:db:a2:d2:55:a5:1d: 68:d7:5b:6f:66:96:29:bd:9b:d3:dd:9f:72:6b:01: 8d:9f:7d:50:ac:98:3e:24:e9:60:df:a9:9a:97:6d: 4c:98:c4:3e:16:2b:ac:86:e3:d6:46:00:bc:7f:5d: 1a:4c:d0:03:7a:ac:24:1a:4b:71:bc:d7:ea:18:56: cb:30:09:f4:29:56:29:5b:d5:22:4f:4a:77:ee:49: f0:f2:1f:a9:7b:d4:fa:62:42:fd:a1:9f:d4:0a:72: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:31:92:2A:35:C0:0E:63:3A:8A:EC:1F:C1:CE:30:94:45:9E:75:FA X509v3 Authority Key Identifier: keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f4:b1:a2:1d:70:22:08:3e:06:8e:91:88:19:8b:22:08:fa: 80:dd:b2:26:3e:43:ac:9a:aa:83:93:9e:fe:33:fc:29:09:17: e6:7a:ff:c3:cc:4a:28:eb:6c:5c:24:52:85:f9:20:a2:8c:15: 88:de:8d:56:37:12:ad:73:9c:fb:30:d9:10:6d:19:ba:77:d3: cc:2a:c1:8d:bd:15:4c:89:b4:b8:c1:28:1a:e7:8e:e8:f4:c7: 43:ab:e3:27:31:81:fc:54:d5:9b:56:4e:78:e3:6a:1a:2b:c5: af:27:30:b5:c2:26:a8:70:06:2d:06:fa:3d:9a:32:fc:4f:db: 54:db:f2:f6:88:f9:f3:6b:a4:40:17:1c:c9:d6:87:d3:63:98: 98:d0:f0:01:20:c8:ea:c5:cd:7c:02:2d:0f:cf:ae:a9:69:eb: d0:6c:49:2a:13:21:aa:bb:c6:fc:2a:d9:f0:5f:54:44:50:53: a7:6c:83:eb:c4:1d:13:2b:a3:1f:26:f4:7c:ae:9e:81:3a:61: 75:54:c9:aa:d9:40:1f:8c:e2:74:52:8d:0c:1a:7d:32:b7:e9: 56:d2:1a:02:9e:a8:5c:5e:a4:1b:94:10:f2:d4:fa:b9:9a:da: f5:58:f0:48:91:a6:a5:b7:cf:3d:bb:3b:23:51:4a:c9:71:3b: fb:f0:11:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1M0ExMTAvBgNVBAUTKEFGODU3ODhCOEM1MkQxMjhENTM0MEE3NTA5NUI4RjBG MTE3NzlDNDgwHhcNMjUwNTMwMjE1OTE4WhcNMjUwNjA2MjE1OTE4WjAYMRYwFAYD VQQDEw02ODNhMmEzNi1jZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppv34XD6rWj2kq/knfmG5dUbrGy9VyNtsjxsjP23AVZFkaOhhBU8e/3Qs7Ex 6BO5qBUg00gkQdHHjdMLiFskIRTXMdbelyB8N8DhHxvR3kXCj2Bygtm+u3TxlmJ/ wdBzRY7Y1ddfhqhq8Gyzcka0vKUCnOtSSegpKhlWNoDa7dIQezmlhXIU7jrJBFxk W3oC6uRbAXB5yIi2IzhjdynbotJVpR1o11tvZpYpvZvT3Z9yawGNn31QrJg+JOlg 36mal21MmMQ+FiushuPWRgC8f10aTNADeqwkGktxvNfqGFbLMAn0KVYpW9UiT0p3 7knw8h+pe9T6YkL9oZ/UCnLAMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsxkio1 wA5jOorsH8HOMJRFnnX6MB8GA1UdIwQYMBaAFK+FeIuMUtEo1TQKdQlbjw8Rd5xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUzQS8zNkI1MkRGQTJG QzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBTalZOQXAxQ1Z1UER4RjNu RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0VjRpNHhTMFNqVk5BcDFDVnVQRHhGM25FZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUzQS8zNkI1MkRGQTJGQzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBT alZOQXAxQ1Z1UER4RjNuRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe9LGiHXAiCD4GjpGIGYsiCPqA3bImPkOsmqqDk57+M/wpCRfmev/D zEoo62xcJFKF+SCijBWI3o1WNxKtc5z7MNkQbRm6d9PMKsGNvRVMibS4wSga547o 9MdDq+MnMYH8VNWbVk5442oaK8WvJzC1wiaocAYtBvo9mjL8T9tU2/L2iPnza6RA FxzJ1ofTY5iY0PABIMjqxc18Ai0Pz66paevQbEkqEyGqu8b8KtnwX1REUFOnbIPr xB0TK6MfJvR8rp6BOmF1VMmq2UAfjOJ0Uo0MGn0yt+lW0hoCnqhcXqQblBDy1Pq5 mtr1WPBIkaalt889uzsjUUrJcTv78BF7 -----END CERTIFICATE-----Generated at Sat May 31 17:01:23 2025 by rpki-client