$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: kytoGS9/TIWZaS5KE0iuAUYwrMi40zPRE5HsvVHs66I= Subject key identifier: D8:BE:66:40:69:45:73:46:09:53:BE:81:1C:F9:DE:E4:3D:01:57:69 Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 1213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 120C Signing time: Wed 04 Jun 2025 17:09:45 +0000 Manifest this update: Wed 04 Jun 2025 17:09:45 +0000 Manifest next update: Wed 11 Jun 2025 17:09:45 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: oW8Z3DztlQWv0YDEbBtRCrHxmzdKcF1X70x98I8SIb8=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: nEHygU0iQ55kYxCvR5kzgzTy6GI2Ua1TfbgvO9Q4FhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 17:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4627 (0x1213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Jun 4 17:09:45 2025 GMT Not After : Jun 11 17:09:45 2025 GMT Subject: CN=68407dd9-1562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:1d:d3:e5:fe:c5:bd:4c:a9:6f:74:5e:30: 7d:e6:bd:4b:38:78:1f:b2:9b:bf:2f:a3:c4:c1:d9: 9e:8d:53:3f:71:9d:b5:ef:ea:31:f2:c0:f9:d4:9d: 87:8b:b9:5f:c8:cd:11:c8:4f:84:49:d0:e0:ef:06: 20:f0:b0:04:e1:44:3a:d5:b5:5e:7a:0f:13:12:d5: 99:d6:3e:5b:c6:02:de:e6:39:0f:e5:45:ef:e0:ae: f1:77:23:68:98:e8:49:79:47:dc:7e:c3:46:40:9b: e7:ca:63:d3:fd:a1:2b:d7:04:72:98:bb:32:6f:f6: 33:04:91:59:c5:0a:74:8c:38:27:42:5a:9b:57:97: 4b:8c:40:b5:dd:b9:3d:30:40:a5:b8:f9:d5:6f:00: a1:af:15:fb:3b:95:18:41:5a:55:c1:a4:6f:dd:f1: 09:1f:fe:0b:6a:ce:99:3a:0e:08:72:05:39:2b:04: 5e:5b:67:46:f7:10:f7:00:a0:c3:12:ba:e8:d6:a7: 4d:0c:6e:9b:16:cc:9f:22:e8:28:f0:dd:63:9a:01: d4:ee:f3:36:86:a4:b6:db:dd:7c:16:03:47:cc:73: 32:1c:38:e4:99:ca:04:7e:4f:e6:31:72:5f:57:1b: 50:30:23:83:5f:62:57:e1:21:be:b1:d6:17:b0:d2: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:66:40:69:45:73:46:09:53:BE:81:1C:F9:DE:E4:3D:01:57:69 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:01:37:fd:a3:2c:48:04:15:59:35:d7:c3:5b:0b:dd:fa:94: 8a:2b:0d:10:a0:39:e3:4e:d9:1b:4e:db:99:d1:89:f3:ba:c6: 06:04:41:b3:30:f2:b6:2a:99:05:e6:b8:0d:63:f5:49:f7:1e: 53:f2:04:0e:95:e7:be:68:aa:fa:10:32:e7:c8:29:bc:ad:38: 3b:28:09:96:f4:00:6c:94:bf:71:92:ed:4d:fa:26:1f:99:2c: 7f:f9:24:9f:75:83:04:8a:2e:94:16:c3:f5:33:17:5e:37:a9: d7:16:c0:ba:35:d5:c8:90:b9:a8:8d:79:7f:a2:ff:cf:60:90: 8e:a0:2a:09:c2:f2:c5:27:e6:94:8f:1c:0a:c7:ec:f0:51:3e: 81:80:dc:41:72:f9:b9:09:c0:93:20:07:96:d3:87:95:a0:8b: b0:f0:1b:73:bb:48:16:b6:f5:00:24:a3:b0:1f:5d:a7:35:dd: 0e:3a:05:26:9c:f6:cb:7e:17:af:26:24:43:dc:ee:fc:80:0e: 07:92:b9:ec:a5:44:e3:32:be:c9:14:fa:a1:3a:10:1b:2f:16: 02:b7:af:18:9a:fa:35:0e:39:ac:3e:0f:c2:5a:41:ee:8d:e6: 02:79:0b:a1:82:d4:ea:8b:cf:38:a1:ac:6b:f5:05:fc:4e:1e: 5e:df:0a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjUwNjA0MTcwOTQ1WhcNMjUwNjExMTcwOTQ1WjAYMRYwFAYD VQQDEw02ODQwN2RkOS0xNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bkd0+X+xb1MqW90XjB95r1LOHgfspu/L6PEwdmejVM/cZ217+ox8sD51J2H i7lfyM0RyE+ESdDg7wYg8LAE4UQ61bVeeg8TEtWZ1j5bxgLe5jkP5UXv4K7xdyNo mOhJeUfcfsNGQJvnymPT/aEr1wRymLsyb/YzBJFZxQp0jDgnQlqbV5dLjEC13bk9 MECluPnVbwChrxX7O5UYQVpVwaRv3fEJH/4Las6ZOg4IcgU5KwReW2dG9xD3AKDD Erro1qdNDG6bFsyfIugo8N1jmgHU7vM2hqS22918FgNHzHMyHDjkmcoEfk/mMXJf VxtQMCODX2JX4SG+sdYXsNIFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi+ZkBp RXNGCVO+gRz53uQ9AVdpMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdATf9oyxIBBVZNdfDWwvd+pSKKw0QoDnjTtkbTtuZ0YnzusYGBEGz MPK2KpkF5rgNY/VJ9x5T8gQOlee+aKr6EDLnyCm8rTg7KAmW9ABslL9xku1N+iYf mSx/+SSfdYMEii6UFsP1MxdeN6nXFsC6NdXIkLmojXl/ov/PYJCOoCoJwvLFJ+aU jxwKx+zwUT6BgNxBcvm5CcCTIAeW04eVoIuw8Btzu0gWtvUAJKOwH12nNd0OOgUm nPbLfhevJiRD3O78gA4HkrnspUTjMr7JFPqhOhAbLxYCt68Ymvo1DjmsPg/CWkHu jeYCeQuhgtTqi884oaxr9QX8Th5e3wpP -----END CERTIFICATE-----Generated at Thu Jun 5 20:06:44 2025 by rpki-client