$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: mypzNgreGUS+stCZJT7Zbn6kx7tct7PLZIboibntZ50= Subject key identifier: 98:BF:AB:94:AE:8F:C4:B1:88:89:60:9D:07:AB:E4:A5:DD:A9:85:5B Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B0F Signing time: Sun 08 Jun 2025 19:02:41 +0000 Manifest this update: Sun 08 Jun 2025 19:02:41 +0000 Manifest next update: Sun 15 Jun 2025 19:02:41 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: 6IDLWRelPc8BGrwmlWsDdPWbN69C54B2c0bNaiIjQt0=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Jun 8 19:02:41 2025 GMT Not After : Jun 15 19:02:41 2025 GMT Subject: CN=6845de51-8d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:79:03:2b:c1:c6:ab:ef:b9:4b:eb:d0:c4: 7b:a7:95:0b:f3:75:85:08:1c:67:ec:66:2e:05:83: d6:25:f3:92:ef:7b:e8:bc:45:8a:7d:98:5b:c9:07: 5c:fc:e5:79:8b:bc:da:39:37:7b:9a:ab:87:55:08: 0a:d3:d2:5a:36:ec:95:ff:f6:9e:07:75:eb:f5:c4: 3d:3f:e6:37:b1:54:3a:c9:11:13:19:fe:9c:bc:65: 5e:97:fc:6d:0b:3a:3c:7b:4e:37:29:20:b4:d1:88: 0a:60:0a:9b:25:08:89:f8:84:5e:5c:59:90:1a:c6: 13:db:d1:a0:38:ac:d7:0f:52:f1:15:a9:5b:b8:12: 90:c3:e6:f1:0d:c8:08:67:f6:81:c9:c9:36:91:dd: 67:01:10:2f:1d:16:e5:16:c8:17:d7:9d:f0:5c:22: a0:73:1f:ed:8a:58:7e:d8:85:d2:56:00:4a:c8:fb: 41:f3:68:6a:95:b1:10:ff:e2:de:92:1b:22:e7:a3: 39:52:b2:7e:84:61:04:06:78:e5:08:cb:5b:ba:d4: 94:e2:fd:08:1d:82:ee:92:58:7b:28:b5:a3:7d:2d: eb:bf:c3:71:cc:69:97:96:a3:0e:0a:6c:67:f5:57: 35:55:56:a2:cc:40:67:a7:53:38:ce:a9:0f:13:56: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:AB:94:AE:8F:C4:B1:88:89:60:9D:07:AB:E4:A5:DD:A9:85:5B X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8e:75:49:c8:37:a2:ed:db:e6:da:05:ce:04:0a:b1:21:50: 5f:19:83:4a:59:19:98:52:32:b7:af:35:1f:db:c3:b1:8e:2d: 30:9f:28:cf:ff:0b:27:c6:a3:f8:a7:41:e4:ac:db:1f:83:08: 7a:39:d9:0d:f0:a5:3b:fc:c1:ef:08:b0:41:d2:2a:64:bd:98: a8:3e:19:47:4f:21:2e:46:5b:3e:80:ac:b0:13:4c:df:39:f7: 79:90:91:c0:3c:47:4c:78:96:17:e8:eb:56:a7:08:4e:10:65: 0e:c9:40:bf:f4:87:65:41:db:60:65:97:a7:96:b8:9f:b4:f0: 5f:0d:26:bd:8f:fb:e8:7f:53:f1:71:6e:eb:b9:da:84:29:e2: 7d:86:b5:fd:2a:62:9b:d8:fa:47:63:91:fa:79:bc:56:b0:6b: 4a:c9:f7:78:2d:44:f9:95:74:41:3a:f6:d0:4b:01:04:17:2d: e6:c0:ab:71:ce:fd:a6:24:99:d4:41:fe:13:76:9b:b2:3c:7e: 34:d8:a9:a6:f2:73:ca:ff:a6:a6:aa:0a:d2:bc:ce:d2:cf:5f: aa:60:4e:fd:9f:7c:5d:29:d7:9d:65:b2:9b:8c:68:e4:03:1f: 6a:3e:93:0b:35:60:cb:4e:e3:82:0d:30:e5:74:2d:18:3d:a2: 6a:d1:69:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUwNjA4MTkwMjQxWhcNMjUwNjE1MTkwMjQxWjAYMRYwFAYD VQQDEw02ODQ1ZGU1MS04ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWF5AyvBxqvvuUvr0MR7p5UL83WFCBxn7GYuBYPWJfOS73vovEWKfZhbyQdc /OV5i7zaOTd7mquHVQgK09JaNuyV//aeB3Xr9cQ9P+Y3sVQ6yRETGf6cvGVel/xt Czo8e043KSC00YgKYAqbJQiJ+IReXFmQGsYT29GgOKzXD1LxFalbuBKQw+bxDcgI Z/aByck2kd1nARAvHRblFsgX153wXCKgcx/tilh+2IXSVgBKyPtB82hqlbEQ/+Le khsi56M5UrJ+hGEEBnjlCMtbutSU4v0IHYLuklh7KLWjfS3rv8NxzGmXlqMOCmxn 9Vc1VVaizEBnp1M4zqkPE1ZD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJi/q5Su j8SxiIlgnQer5KXdqYVbMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbjnVJyDei7dvm2gXOBAqxIVBfGYNKWRmYUjK3rzUf28Oxji0wnyjP /wsnxqP4p0HkrNsfgwh6OdkN8KU7/MHvCLBB0ipkvZioPhlHTyEuRls+gKywE0zf Ofd5kJHAPEdMeJYX6OtWpwhOEGUOyUC/9IdlQdtgZZenlriftPBfDSa9j/vof1Px cW7rudqEKeJ9hrX9KmKb2PpHY5H6ebxWsGtKyfd4LUT5lXRBOvbQSwEEFy3mwKtx zv2mJJnUQf4TdpuyPH402Kmm8nPK/6amqgrSvM7Sz1+qYE79n3xdKdedZbKbjGjk Ax9qPpMLNWDLTuOCDTDldC0YPaJq0Wlf -----END CERTIFICATE-----Generated at Sun Jun 8 23:17:10 2025 by rpki-client