$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: lyfav7YZSWxjSGPopDvmAqtIqtJgRDBr1drvyAstxg4= Subject key identifier: 4F:3F:F5:F4:EC:9E:77:60:E2:58:31:B4:86:1A:1E:86:50:13:36:9D Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 07B4 Signing time: Fri 30 May 2025 21:39:10 +0000 Manifest this update: Fri 30 May 2025 21:39:10 +0000 Manifest next update: Fri 06 Jun 2025 21:39:10 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: XNR7iy5RfeigEOp65BuGyDi5yGcXGdY4kiX3SgmvV98=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: May 30 21:39:10 2025 GMT Not After : Jun 6 21:39:10 2025 GMT Subject: CN=683a257e-2db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:37:c3:4c:24:f8:15:ae:58:f4:8f:14:09:f8: 79:1f:5f:95:2b:5c:97:12:72:7f:1a:90:43:89:fd: 9d:f8:06:cd:76:a6:a9:7b:2a:a1:52:6b:39:c6:3b: fc:cf:ed:e6:57:e6:51:ae:49:08:43:b5:da:a1:b9: 0b:52:87:06:77:bf:3c:ba:35:17:7d:87:82:0b:6e: 18:33:e1:51:f9:e7:ba:40:a8:d7:83:a8:b8:6f:95: 04:04:46:d3:ef:7b:28:43:2f:ae:72:69:d4:7a:94: 92:49:31:61:3d:da:2a:8a:bb:1d:44:03:9e:99:4b: 07:8d:fa:1c:e4:8b:bb:15:43:21:e0:e2:95:a1:16: f9:b4:a0:95:6b:a3:1b:3d:27:52:8a:1b:76:1c:d0: 48:e3:8f:62:a9:8b:7c:3f:ac:d6:83:03:c5:53:3b: c5:1c:ee:db:43:f5:6d:e5:06:07:19:77:81:d2:48: cf:6c:9a:1c:58:e8:60:d0:a7:2e:09:83:0f:cd:3f: 4d:5e:33:f6:52:33:67:4c:60:8a:8e:d1:8e:c5:71: 32:bf:68:34:32:aa:c3:ef:8f:a2:a7:ad:3a:c1:c2: 01:96:6b:b1:dd:2f:5e:2e:34:fb:14:21:a6:79:a1: 6b:ee:2b:f6:d8:f5:f8:96:32:c5:5c:e3:e1:c7:98: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3F:F5:F4:EC:9E:77:60:E2:58:31:B4:86:1A:1E:86:50:13:36:9D X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a2:4f:5b:e8:97:16:57:a4:b5:42:ab:53:17:f1:35:f9:c5: 70:e3:97:44:86:b9:6c:20:21:79:ee:de:85:22:ec:53:2b:60: 34:a3:8d:30:a7:bb:ce:11:49:89:a8:20:df:28:b5:76:5e:56: ff:4a:23:0b:ac:e5:63:16:25:ff:9c:52:84:42:c1:f4:49:1e: e7:c1:1c:4e:d9:3a:ca:a6:8f:88:d1:50:34:40:ae:f0:47:26: 25:88:30:f0:65:10:9a:f4:89:1a:6e:45:b4:2f:5c:59:dc:58: 4f:f2:73:73:06:69:7c:69:08:f2:68:fd:2f:46:b6:a1:82:68: 1d:4d:3b:2e:06:0d:5c:33:7e:d2:69:bb:e6:47:f8:d0:2b:5d: 62:6a:5f:92:f6:cb:1e:89:4a:c6:b6:72:5a:85:7c:17:47:16: cd:20:e0:7d:60:68:0f:6c:e2:99:09:01:7f:3b:24:5a:b5:c3: 0b:2d:aa:8d:0b:19:78:cb:fe:74:3d:75:bb:ae:8b:80:87:08: b6:9d:68:b9:09:90:e9:69:5b:8b:24:2e:ea:f8:0b:f6:30:90: b5:94:e1:82:50:1a:f1:d9:61:5c:57:52:ca:b9:42:0e:85:3d: 02:a2:7f:3b:f3:18:e8:31:80:29:13:41:ed:55:b9:11:82:87: f7:5e:5a:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjUwNTMwMjEzOTEwWhcNMjUwNjA2MjEzOTEwWjAYMRYwFAYD VQQDEw02ODNhMjU3ZS0yZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TfDTCT4Fa5Y9I8UCfh5H1+VK1yXEnJ/GpBDif2d+AbNdqapeyqhUms5xjv8 z+3mV+ZRrkkIQ7XaobkLUocGd788ujUXfYeCC24YM+FR+ee6QKjXg6i4b5UEBEbT 73soQy+ucmnUepSSSTFhPdoqirsdRAOemUsHjfoc5Iu7FUMh4OKVoRb5tKCVa6Mb PSdSiht2HNBI449iqYt8P6zWgwPFUzvFHO7bQ/Vt5QYHGXeB0kjPbJocWOhg0Kcu CYMPzT9NXjP2UjNnTGCKjtGOxXEyv2g0MqrD74+ip606wcIBlmux3S9eLjT7FCGm eaFr7iv22PX4ljLFXOPhx5iM1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8/9fTs nndg4lgxtIYaHoZQEzadMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByok9b6JcWV6S1QqtTF/E1+cVw45dEhrlsICF57t6FIuxTK2A0o40w p7vOEUmJqCDfKLV2Xlb/SiMLrOVjFiX/nFKEQsH0SR7nwRxO2TrKpo+I0VA0QK7w RyYliDDwZRCa9IkabkW0L1xZ3FhP8nNzBml8aQjyaP0vRrahgmgdTTsuBg1cM37S abvmR/jQK11ial+S9sseiUrGtnJahXwXRxbNIOB9YGgPbOKZCQF/OyRatcMLLaqN Cxl4y/50PXW7rouAhwi2nWi5CZDpaVuLJC7q+Av2MJC1lOGCUBrx2WFcV1LKuUIO hT0Con878xjoMYApE0HtVbkRgof3XlrQ -----END CERTIFICATE-----Generated at Sat May 31 17:02:15 2025 by rpki-client