$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json) Hash identifier: Hzr24iiPwwgKpJYfDZnGhewtixt43c0T/TyIzmUXRZc= Subject key identifier: 9E:53:4C:1B:F7:C4:B7:EB:D1:C5:81:D8:CF:65:8A:09:87:D3:48:14 Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft Manifest number: AD Signing time: Mon 09 Jun 2025 05:02:34 +0000 Manifest this update: Mon 09 Jun 2025 05:02:34 +0000 Manifest next update: Mon 16 Jun 2025 05:02:34 +0000 Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: QMVFK1Q3WfRsG6SoKXR/GigBkkFDJHOABj+Yg593fv4=) 2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: cLMsRe3bjQqt9KTlSv77ZsvirHU5HvmwxB64rB3nwQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 05:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Validity Not Before: Jun 9 05:02:34 2025 GMT Not After : Jun 16 05:02:34 2025 GMT Subject: CN=68466aea-d405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:34:13:34:f8:76:ca:99:87:4f:93:e8:1d: 59:7e:42:fd:66:fd:40:4a:4e:ed:71:4a:7f:19:60: ba:ad:33:6b:16:75:77:02:90:e6:d9:ce:b8:95:64: dd:c9:15:a6:32:d1:4a:83:a9:39:de:8f:fe:19:29: 56:b9:19:12:8c:4e:c0:f0:38:8c:6e:66:b0:45:b5: cc:9f:f7:db:75:f4:0a:58:1b:3a:f2:95:b3:0f:a4: 17:6f:a9:76:02:ed:35:f5:01:80:41:33:49:cc:cd: cd:43:0b:04:29:74:08:c1:c1:d1:93:74:63:cc:e3: 0d:9a:86:46:6b:6e:1c:5e:f7:63:7b:b6:e6:60:fe: dc:73:16:74:a4:57:bf:38:5c:a5:36:67:13:35:df: 79:72:aa:57:f5:66:5b:82:8d:c9:27:fe:2e:6b:56: 4e:34:1f:27:7e:03:22:a8:2b:2c:8e:62:e2:a2:96: 17:52:f2:cd:e6:84:0e:cc:87:24:f1:8a:d8:b4:ce: e3:d5:8b:14:a9:0f:91:6f:6a:94:ae:18:5f:35:42: ff:1a:b8:f0:21:5b:48:41:f0:cf:1d:0e:00:c8:a0: d8:89:ae:c7:d0:6c:38:9e:c2:33:52:4b:80:b9:b9: 3f:ff:8a:4f:dd:5e:88:78:64:91:b4:fd:cf:6a:78: a2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:53:4C:1B:F7:C4:B7:EB:D1:C5:81:D8:CF:65:8A:09:87:D3:48:14 X509v3 Authority Key Identifier: keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f7:00:4b:a7:eb:7d:13:8d:d1:58:a1:7d:1a:de:e6:00:fd: 54:d8:54:ae:82:f2:d7:52:b8:35:27:02:91:25:33:e7:7b:34: 1c:67:80:46:5b:1c:58:82:3d:f5:13:17:5d:17:99:38:18:11: 19:13:b8:8d:ea:84:42:7d:2d:8d:ae:62:f9:c9:37:39:63:7b: b5:a4:1f:dc:8e:5e:a7:50:e5:80:e4:a1:53:17:8f:3d:40:b1: 0b:07:aa:26:87:0e:cd:a6:f9:fe:28:00:66:c8:47:2c:2c:9d: 28:d4:47:fe:d0:00:a7:82:3f:1d:b7:d9:e5:48:2c:31:74:ca: a9:c3:17:29:a1:57:ab:51:bd:f0:f8:42:ec:27:98:b0:23:24: 70:46:68:7f:06:38:f7:ec:60:14:23:38:8d:17:dd:43:24:3e: 07:08:0b:72:16:e7:26:60:7c:32:17:46:24:ce:fa:a2:26:01: bf:e5:bd:ea:7e:22:2f:85:d9:5e:0e:b3:eb:f5:87:ec:d0:e6: 55:ac:f7:f3:73:34:b6:50:d6:ad:c0:6a:e3:cd:98:00:5e:65: f1:5a:8f:d6:37:2b:32:39:2b:c3:9b:37:23:f1:c9:50:de:a1: 96:26:12:fd:56:d7:58:85:f3:fa:bf:d4:a1:63:13:3f:75:b2: 1a:af:30:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEUyRjE3NzM3Qjg0QzFGNjc4NjlDMDNBNDdGOEM0MTlG RDQyMDAxNkMwHhcNMjUwNjA5MDUwMjM0WhcNMjUwNjE2MDUwMjM0WjAYMRYwFAYD VQQDEw02ODQ2NmFlYS1kNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3E0EzT4dsqZh0+T6B1ZfkL9Zv1ASk7tcUp/GWC6rTNrFnV3ApDm2c64lWTd yRWmMtFKg6k53o/+GSlWuRkSjE7A8DiMbmawRbXMn/fbdfQKWBs68pWzD6QXb6l2 Au019QGAQTNJzM3NQwsEKXQIwcHRk3RjzOMNmoZGa24cXvdje7bmYP7ccxZ0pFe/ OFylNmcTNd95cqpX9WZbgo3JJ/4ua1ZONB8nfgMiqCssjmLiopYXUvLN5oQOzIck 8YrYtM7j1YsUqQ+Rb2qUrhhfNUL/GrjwIVtIQfDPHQ4AyKDYia7H0Gw4nsIzUkuA ubk//4pP3V6IeGSRtP3PaniicwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5TTBv3 xLfr0cWB2M9ligmH00gUMB8GA1UdIwQYMBaAFOLxdze4TB9nhpwDpH+MQZ/UIAFs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8xMjBDMkM3NDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgyZUduQU9rZjR4Qm45UWdB V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2RjNON2hNSDJlR25BT2tmNHhCbjlRZ0FXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8xMjBDMkM3NDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgy ZUduQU9rZjR4Qm45UWdBV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh9wBLp+t9E43RWKF9Gt7mAP1U2FSugvLXUrg1JwKRJTPnezQcZ4BG WxxYgj31ExddF5k4GBEZE7iN6oRCfS2NrmL5yTc5Y3u1pB/cjl6nUOWA5KFTF489 QLELB6omhw7Npvn+KABmyEcsLJ0o1Ef+0ACngj8dt9nlSCwxdMqpwxcpoVerUb3w +ELsJ5iwIyRwRmh/Bjj37GAUIziNF91DJD4HCAtyFucmYHwyF0YkzvqiJgG/5b3q fiIvhdleDrPr9Yfs0OZVrPfzczS2UNatwGrjzZgAXmXxWo/WNysyOSvDmzcj8clQ 3qGWJhL9VtdYhfP6v9ShYxM/dbIarzBy -----END CERTIFICATE-----Generated at Mon Jun 9 19:39:50 2025 by rpki-client