$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json) Hash identifier: bGYhKxxdnD71O2b5LI1qVhzPMmBqkuR857EyMrvqTME= Subject key identifier: C6:03:B3:71:F8:D8:AA:32:70:EC:A0:F3:4D:86:C2:CC:98:C0:E2:57 Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft Manifest number: 4C Signing time: Thu 05 Jun 2025 06:41:33 +0000 Manifest this update: Thu 05 Jun 2025 06:41:33 +0000 Manifest next update: Thu 12 Jun 2025 06:41:33 +0000 Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: M4SXjNk/yRUgPOB8L9aFuIwHJJfNWFELKDIP6SzNV94=) 2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: BnzgVRQY1lWGd2cFrP1xnxB6cOmKQA86fc66ckx28mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Validity Not Before: Jun 5 06:41:33 2025 GMT Not After : Jun 12 06:41:33 2025 GMT Subject: CN=68413c1d-b539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:b3:70:4a:ba:f9:3c:cd:65:2f:68:d9:f0: b8:c4:cd:cb:21:2a:03:51:d2:f8:56:f2:25:07:33: d9:08:ed:69:25:52:d4:74:77:e9:19:5e:ce:a4:50: 99:6c:9b:d2:a1:47:1c:73:d3:18:71:49:3a:84:c9: 57:f3:29:a2:5f:59:e3:e9:82:6b:04:7f:33:1b:05: e0:ca:8f:bb:d8:8d:ad:79:1b:05:35:27:02:26:25: 92:8b:7b:ab:7d:6c:63:b6:81:72:c9:ec:05:44:6d: f2:f6:f3:c5:24:b4:1a:00:e3:49:84:97:b9:90:9c: 97:38:31:0d:ff:cc:49:e8:25:73:7f:18:9b:a0:5c: 76:39:cc:f9:fd:69:54:1e:1b:7b:d1:18:05:e3:09: e4:6e:8f:ec:12:fb:8a:f3:02:05:34:a1:2d:87:09: ad:0e:79:36:67:7e:48:0c:12:fb:03:0d:6f:b2:4d: 37:54:8e:e6:a5:3c:d6:17:73:17:c6:bf:04:8b:d4: 4f:a0:53:b0:c0:74:27:3d:56:22:df:ac:98:56:77: 91:a0:0a:7f:10:50:32:ed:8d:a4:b5:6a:71:54:cb: 28:75:4a:7a:ab:3d:68:24:b5:12:da:ca:ad:c9:be: 6b:8e:e1:2c:a0:37:dc:c8:f1:cd:67:3b:1e:f6:9a: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:03:B3:71:F8:D8:AA:32:70:EC:A0:F3:4D:86:C2:CC:98:C0:E2:57 X509v3 Authority Key Identifier: keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:93:ac:7b:8a:f3:f9:39:b1:d1:cb:fb:d8:de:16:5f:55:e6: 5a:93:d7:8c:e0:94:d1:c6:0f:c4:76:83:fe:14:57:5a:3f:dc: b6:a2:79:16:b8:9e:22:ee:9c:0d:5a:9f:b5:02:e3:17:35:c8: 67:be:22:6a:9e:48:d1:64:a0:55:ef:c3:a2:e5:bd:d5:a1:b8: 37:1c:73:d4:6e:ec:81:18:a1:7f:f2:61:ce:8c:a1:1a:aa:b7: 8d:14:df:e1:2c:ca:c6:92:c3:7b:31:47:a1:99:42:4e:6d:45: a2:b8:a8:fe:d4:90:95:b8:98:a4:b7:46:70:68:cf:dc:0d:71: 2e:b0:a8:25:ce:04:92:23:ae:f6:d9:85:e2:5a:2d:46:fd:c1: 75:8e:ce:a2:16:6f:c1:65:30:6c:21:f9:54:93:b8:98:53:1f: b0:53:9b:c2:42:f4:a2:27:42:30:2c:af:4a:be:77:60:93:39: e1:8e:ab:b1:c8:f7:f5:a3:8a:d2:f1:73:c1:d3:99:2f:fa:af: f2:e4:96:3d:2a:34:6a:9e:dc:cb:81:04:8c:d7:21:72:38:47: 98:74:04:01:ee:b9:06:04:75:61:55:11:58:83:01:97:a6:11: 5a:0a:93:e9:16:27:49:35:44:a0:e1:58:3a:6f:70:16:77:2b: 70:e3:51:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTVEQzExMC8GA1UEBRMoRDM2RTEwNDI2MUY4MTlENjhEMEY3MEJCMjlBREZFOEVG NDYzQjJFRDAeFw0yNTA2MDUwNjQxMzNaFw0yNTA2MTIwNjQxMzNaMBgxFjAUBgNV BAMTDTY4NDEzYzFkLWI1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6zLNwSrr5PM1lL2jZ8LjEzcshKgNR0vhW8iUHM9kI7WklUtR0d+kZXs6kUJls m9KhRxxz0xhxSTqEyVfzKaJfWePpgmsEfzMbBeDKj7vYja15GwU1JwImJZKLe6t9 bGO2gXLJ7AVEbfL288UktBoA40mEl7mQnJc4MQ3/zEnoJXN/GJugXHY5zPn9aVQe G3vRGAXjCeRuj+wS+4rzAgU0oS2HCa0OeTZnfkgMEvsDDW+yTTdUjualPNYXcxfG vwSL1E+gU7DAdCc9ViLfrJhWd5GgCn8QUDLtjaS1anFUyyh1SnqrPWgktRLayq3J vmuO4SygN9zI8c1nOx72mmh9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxgOzcfjY qjJw7KDzTYbCzJjA4lcwHwYDVR0jBBgwFoAU024QQmH4GdaND3C7Ka3+jvRjsu0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzRGRUMxQzA0Q0VF RDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDI0UVFtSDRHZGFORDNDN0thMy1qdlJqc3UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NURDLzRGRUMxQzA0Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2Rh TkQzQzdLYTMtanZSanN1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAESTrHuK8/k5sdHL+9jeFl9V5lqT14zglNHGD8R2g/4UV1o/3LaieRa4 niLunA1an7UC4xc1yGe+ImqeSNFkoFXvw6LlvdWhuDccc9Ru7IEYoX/yYc6MoRqq t40U3+EsysaSw3sxR6GZQk5tRaK4qP7UkJW4mKS3RnBoz9wNcS6wqCXOBJIjrvbZ heJaLUb9wXWOzqIWb8FlMGwh+VSTuJhTH7BTm8JC9KInQjAsr0q+d2CTOeGOq7HI 9/WjitLxc8HTmS/6r/Lklj0qNGqe3MuBBIzXIXI4R5h0BAHuuQYEdWFVEViDAZem EVoKk+kWJ0k1RKDhWDpvcBZ3K3DjUYs= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:51 2025 by rpki-client