$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: XDEpVWXkWSbrR4er4obZKmyIQJB49+AazF7zTIZGIy4= Subject key identifier: 70:1A:5D:99:72:D6:7F:1D:22:30:01:24:D0:12:82:8F:A3:A9:5B:15 Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0D78 Signing time: Sun 08 Jun 2025 17:49:49 +0000 Manifest this update: Sun 08 Jun 2025 17:49:48 +0000 Manifest next update: Sun 15 Jun 2025 17:49:48 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: d4dQ6iWpsnkFVyWTIAZLmEJr9j8lCTlCt+1ZbvJbrq4=) 2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: 1jUxwWAX6KnigOFs20Vg85yLzTjyxdO59rmGUv5qs2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Jun 8 17:49:48 2025 GMT Not After : Jun 15 17:49:48 2025 GMT Subject: CN=6845cd3d-99c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:f8:43:ca:f3:85:37:ef:6b:a3:ce:fe:58: 98:87:30:07:71:a3:f8:19:aa:f7:83:29:3c:65:f6: 9a:2c:31:d2:ed:14:0b:cb:eb:da:b1:dc:2a:45:60: 79:5d:74:78:69:d1:61:67:c1:55:62:d2:60:4a:b3: b6:7c:a8:3e:dd:7e:dc:78:9b:6d:35:77:2c:02:74: 7f:0d:c9:99:11:3d:c4:10:2d:3c:50:8e:6b:c7:00: 20:d8:99:9d:3a:c2:f4:ab:f5:45:b2:17:bd:18:4b: ec:72:5b:cd:ca:aa:30:0c:31:5d:b5:92:24:3c:a5: ca:50:b0:fd:84:67:f8:95:80:38:dd:5c:e9:f4:2d: fb:3f:02:f7:66:90:48:1b:a3:b6:a1:14:2d:f5:c8: e3:1a:5b:a5:04:56:bf:49:ce:ba:95:44:d7:f1:18: 07:af:53:60:aa:27:2c:c1:e3:87:12:b6:c4:fd:4a: 65:94:89:eb:03:ed:99:55:74:84:39:60:ba:4b:83: 31:e2:76:de:8e:d9:c6:9d:dd:d5:97:1a:bf:2b:bd: 7a:a8:d5:10:9b:45:8d:75:c4:07:27:a5:92:66:44: 91:c1:4b:2b:0b:e3:4f:28:e5:bc:cc:a7:36:a8:54: 37:45:49:6c:22:c1:7f:13:3b:14:0d:04:5b:d9:86: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:5D:99:72:D6:7F:1D:22:30:01:24:D0:12:82:8F:A3:A9:5B:15 X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7f:b7:66:c0:f5:33:4c:78:bc:ad:25:ec:b8:35:bc:dc:cc: b8:ab:2c:d2:37:9a:32:5d:d6:29:15:d2:24:af:ea:fa:b6:fd: 2b:f6:f0:3f:af:ab:94:33:9f:ea:44:b4:89:52:35:bd:33:6b: 85:4e:dd:0d:a6:08:24:21:0a:a8:96:28:6f:fa:dd:55:9a:76: 44:93:04:0e:66:b2:53:56:b6:0c:de:12:d7:2d:64:bd:86:e3: 37:7c:64:be:05:e3:40:1e:7a:76:77:47:96:06:f3:84:e5:74: fb:77:f9:05:6c:dd:73:39:0f:d4:0e:48:37:5d:91:20:e7:be: 0c:df:30:cd:15:4f:9f:45:cb:2c:e1:d9:3b:64:3e:a7:b7:d3: 5a:bc:56:5c:ee:a2:5f:4c:c1:5b:20:4c:0b:c1:39:5e:4c:b6: c8:4a:7e:dc:e6:1d:35:de:53:31:71:1b:9a:c5:29:9a:9c:8b: 07:16:02:0d:68:bf:0d:44:a4:b6:7a:30:e9:7e:8e:49:da:9a: de:b2:d0:ab:6d:91:a8:c7:c8:15:69:2d:7d:60:37:cc:af:65: 66:da:e0:c0:c9:92:31:20:78:7a:d3:02:d7:c0:6e:ab:4d:06: 57:05:69:b9:69:b4:2f:a2:15:08:5b:5e:e3:dc:35:a0:58:19: ad:e7:45:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjUwNjA4MTc0OTQ4WhcNMjUwNjE1MTc0OTQ4WjAYMRYwFAYD VQQDEw02ODQ1Y2QzZC05OWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQf4Q8rzhTfva6PO/liYhzAHcaP4Gar3gyk8ZfaaLDHS7RQLy+vasdwqRWB5 XXR4adFhZ8FVYtJgSrO2fKg+3X7ceJttNXcsAnR/DcmZET3EEC08UI5rxwAg2Jmd OsL0q/VFshe9GEvsclvNyqowDDFdtZIkPKXKULD9hGf4lYA43Vzp9C37PwL3ZpBI G6O2oRQt9cjjGlulBFa/Sc66lUTX8RgHr1NgqicsweOHErbE/UpllInrA+2ZVXSE OWC6S4Mx4nbejtnGnd3Vlxq/K716qNUQm0WNdcQHJ6WSZkSRwUsrC+NPKOW8zKc2 qFQ3RUlsIsF/EzsUDQRb2Ya5CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAaXZly 1n8dIjABJNASgo+jqVsVMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsf7dmwPUzTHi8rSXsuDW83My4qyzSN5oyXdYpFdIkr+r6tv0r9vA/ r6uUM5/qRLSJUjW9M2uFTt0NpggkIQqolihv+t1VmnZEkwQOZrJTVrYM3hLXLWS9 huM3fGS+BeNAHnp2d0eWBvOE5XT7d/kFbN1zOQ/UDkg3XZEg574M3zDNFU+fRcss 4dk7ZD6nt9NavFZc7qJfTMFbIEwLwTleTLbISn7c5h013lMxcRuaxSmanIsHFgIN aL8NRKS2ejDpfo5J2prestCrbZGox8gVaS19YDfMr2Vm2uDAyZIxIHh60wLXwG6r TQZXBWm5abQvohUIW17j3DWgWBmt50X2 -----END CERTIFICATE-----Generated at Mon Jun 9 07:26:52 2025 by rpki-client