$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: 6DZNFYRqs5mj+C/laIsmbSNfrR+EJjJof0YanZUWjrU= Subject key identifier: 54:62:E2:F2:40:61:0F:11:A4:9C:09:9D:E8:2C:58:88:5E:C3:43:33 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: A5 Signing time: Tue 03 Jun 2025 05:59:44 +0000 Manifest this update: Tue 03 Jun 2025 05:59:44 +0000 Manifest next update: Tue 10 Jun 2025 05:59:44 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: rdcLFFRstp9EKibscK9+s7NLUK8Hd7ITHeAqAZbE+Ko=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Jun 3 05:59:44 2025 GMT Not After : Jun 10 05:59:44 2025 GMT Subject: CN=683e8f50-1c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:aa:8b:cb:60:18:75:0e:ba:5b:44:a9:3b: 83:d1:04:8b:2a:55:4b:16:dc:89:7b:5d:19:b8:4e: 99:8b:bc:04:c8:2b:d4:e3:44:64:0f:68:9c:73:6e: 7f:60:e2:b7:4c:d7:68:ac:4a:f4:5f:38:3e:83:9f: de:26:2d:46:dd:0c:33:bf:7d:d8:b7:db:36:07:df: ac:24:79:c3:bd:24:fe:5f:4f:65:a4:1c:98:92:71: 0e:f4:b5:c4:ae:a9:db:f9:8e:f1:39:8c:17:68:62: 33:a8:45:4f:98:e4:0d:45:3f:82:5e:97:3f:99:b4: 41:b0:2b:0f:45:63:8e:83:8c:9a:fc:b8:85:a1:cc: 5e:22:c2:6f:06:1e:c5:68:c6:45:c1:31:9d:42:23: 20:04:bf:07:b1:08:8d:04:70:69:d8:2e:f7:e5:db: a9:b9:c7:e4:1d:30:82:6c:8d:13:1f:d8:1b:48:c9: 5a:ff:84:32:0b:fd:fc:60:1f:45:3d:1a:3c:3e:2a: b6:31:a1:cb:8a:f3:53:5c:22:8c:bb:93:52:c7:3a: a0:d8:e7:f5:16:96:34:ea:53:de:48:d1:ea:5e:ff: bd:68:ad:40:39:a7:00:04:ea:d9:f3:a0:87:e4:0b: 93:bd:50:80:3a:99:41:4f:70:1d:3f:c6:3c:aa:46: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:62:E2:F2:40:61:0F:11:A4:9C:09:9D:E8:2C:58:88:5E:C3:43:33 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:52:2a:b7:3e:23:ca:b1:a1:80:f9:e0:d0:b6:63:96:db:ea: 64:a0:c1:6a:32:7d:d9:ea:1b:53:75:5a:12:b4:2d:97:ff:4b: cf:57:9a:66:82:b6:fe:c9:1b:22:67:6e:70:06:fb:53:f9:64: e9:7f:7f:97:ea:60:38:59:a5:5c:fd:2e:8f:58:28:da:f9:ff: a0:15:19:34:fb:77:98:7e:7d:31:eb:62:c7:58:b1:5c:8c:dd: 07:d3:00:25:98:4a:de:9c:8d:2f:d5:84:3c:8f:6d:58:a6:f8: 45:03:6d:5f:64:d0:56:0d:a0:03:e6:9c:7e:e3:23:3b:73:90: 50:54:c0:f3:e9:45:23:ee:2a:af:da:18:cf:1e:5a:0d:12:12: 02:6f:c1:1c:92:60:bf:de:5f:3f:a3:f6:77:b7:80:4a:33:ce: c6:53:8d:cd:08:bb:88:19:af:b1:f4:48:c8:65:22:e5:ae:0a: b8:c9:88:6a:74:35:94:51:b5:ce:6d:14:3d:b0:4b:d5:99:ac: 8c:f1:f3:21:e5:cb:14:fa:4a:98:a7:81:e5:0e:96:4c:f0:ca: 3b:d9:9b:8c:21:18:0f:8a:e3:fb:a9:e7:0b:c1:39:3f:5b:3e: 35:4a:04:da:cf:dd:44:9c:07:da:89:2d:31:3b:00:5e:bc:95: 1f:85:8a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKEUwNkZFODQxQzZCQjQ5OEExRkJGNjdFRTNBQThDOEE5 QzUzODdEMEYwHhcNMjUwNjAzMDU1OTQ0WhcNMjUwNjEwMDU1OTQ0WjAYMRYwFAYD VQQDEw02ODNlOGY1MC0xYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjyqi8tgGHUOultEqTuD0QSLKlVLFtyJe10ZuE6Zi7wEyCvU40RkD2icc25/ YOK3TNdorEr0Xzg+g5/eJi1G3Qwzv33Yt9s2B9+sJHnDvST+X09lpByYknEO9LXE rqnb+Y7xOYwXaGIzqEVPmOQNRT+CXpc/mbRBsCsPRWOOg4ya/LiFocxeIsJvBh7F aMZFwTGdQiMgBL8HsQiNBHBp2C735dupucfkHTCCbI0TH9gbSMla/4QyC/38YB9F PRo8Piq2MaHLivNTXCKMu5NSxzqg2Of1FpY06lPeSNHqXv+9aK1AOacABOrZ86CH 5AuTvVCAOplBT3AdP8Y8qkar/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRi4vJA YQ8RpJwJnegsWIhew0MzMB8GA1UdIwQYMBaAFOBv6EHGu0mKH79n7jqoyKnFOH0P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9FQ0Y4MEY4NjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZb2Z2MmZ1T3FqSXFjVTRm UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZ b2Z2MmZ1T3FqSXFjVTRmUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaUiq3PiPKsaGA+eDQtmOW2+pkoMFqMn3Z6htTdVoStC2X/0vPV5pm grb+yRsiZ25wBvtT+WTpf3+X6mA4WaVc/S6PWCja+f+gFRk0+3eYfn0x62LHWLFc jN0H0wAlmErenI0v1YQ8j21YpvhFA21fZNBWDaAD5px+4yM7c5BQVMDz6UUj7iqv 2hjPHloNEhICb8EckmC/3l8/o/Z3t4BKM87GU43NCLuIGa+x9EjIZSLlrgq4yYhq dDWUUbXObRQ9sEvVmayM8fMh5csU+kqYp4HlDpZM8Mo72ZuMIRgPiuP7qecLwTk/ Wz41SgTaz91EnAfaiS0xOwBevJUfhYpU -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:43 2025 by rpki-client