$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: MrRQe2S5AU63aLYsB0RukeKOzizI8fwDiDcxwUXSLcw= Subject key identifier: 2E:C6:11:20:2F:EE:0A:22:FA:09:35:03:22:32:2C:07:1C:C2:A1:9C Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 07 Signing time: Thu 05 Jun 2025 07:35:41 +0000 Manifest this update: Thu 05 Jun 2025 07:35:41 +0000 Manifest next update: Thu 12 Jun 2025 07:35:41 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: AvoxAeNPYRrkbVe+pmXmrA7+2Fv5+H2ulivbfJjwp/4=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Jun 5 07:35:41 2025 GMT Not After : Jun 12 07:35:41 2025 GMT Subject: CN=684148cd-df64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4a:8f:84:27:cc:2b:6f:d1:58:e4:62:7a:38: 3d:f2:48:2a:a2:01:94:f5:8f:b8:12:0e:5d:9a:cd: ed:26:3a:6b:d9:5e:b5:48:46:90:f9:da:01:41:4b: 17:4d:48:7e:c7:59:96:96:96:2e:7e:1a:ed:06:c5: 95:16:7c:63:3f:47:79:24:ba:aa:1b:e3:97:b6:7e: fc:33:db:4d:27:c0:5c:b1:a4:1e:a2:fe:c2:5f:67: d2:c9:63:12:95:c9:9b:08:c7:86:23:53:f3:55:5b: e0:cf:f1:5a:a6:0d:1e:f8:22:75:21:f1:d7:d1:79: 9b:d1:24:5c:78:f3:35:25:81:7f:aa:f2:43:dd:6b: 6e:28:43:63:f4:0d:de:16:d9:3b:09:3a:7c:f2:3b: 72:ec:8f:0c:81:49:3e:b1:91:23:22:23:60:6a:4b: 69:7d:6b:d7:0d:83:09:3a:bd:89:ce:b6:92:e1:53: 5c:48:db:18:cb:a6:dc:56:34:32:16:2c:31:6a:68: 70:a1:2f:72:2a:fe:1d:a3:41:b5:2e:9c:7a:c6:a0: aa:95:cf:4f:0c:30:5c:c4:96:1c:ee:12:30:74:4e: e7:2b:88:03:ce:9c:61:57:fd:70:e4:1b:a3:e4:23: 16:df:da:cf:f7:f4:8b:fa:28:bf:e7:58:9f:df:89: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C6:11:20:2F:EE:0A:22:FA:09:35:03:22:32:2C:07:1C:C2:A1:9C X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fe:04:39:a5:8e:5f:28:ce:24:bb:2f:b9:fc:af:67:bb:ce: 3d:b9:e5:27:cf:10:b5:14:47:a9:57:47:fb:95:3f:b6:70:0a: cb:fe:bd:62:cb:c4:41:1a:f0:82:dc:ac:84:ec:d0:09:b4:0d: 38:48:de:02:25:5b:7a:36:08:8c:a4:d6:7d:9f:56:d8:22:69: 63:18:4f:e1:77:8c:f4:91:66:1e:11:d4:99:d0:3e:4b:57:d1: 33:18:1d:ec:a7:39:f1:43:ec:dc:39:2c:e3:c2:e9:20:73:d2: d4:7e:2d:a1:6f:ce:ce:eb:60:f4:f6:f4:c6:77:ba:fd:ad:3b: 62:f1:51:20:f5:e9:bb:ff:e1:25:6a:28:8b:4e:cd:ec:ed:3f: 55:ce:33:fe:10:70:29:51:ee:5c:4a:da:5a:b1:f4:e0:68:79: 3f:24:88:f8:10:99:b4:2e:36:85:ef:73:c2:0f:47:52:b6:07: 46:3a:c8:4b:83:b6:f6:4d:72:ff:8d:6a:f9:b4:06:d2:2a:3d: 10:ba:00:90:74:9f:6c:57:eb:91:1e:1c:54:e0:f4:0f:68:f8: 5b:b1:fd:fe:b2:c5:78:fb:53:98:6a:72:ea:b7:ec:4b:88:8a: 35:41:8d:5c:ae:56:90:24:bc:38:f5:f9:4e:6f:cc:19:79:71: 92:93:4b:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTA2MDUwNzM1NDFaFw0yNTA2MTIwNzM1NDFaMBgxFjAUBgNV BAMTDTY4NDE0OGNkLWRmNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuSo+EJ8wrb9FY5GJ6OD3ySCqiAZT1j7gSDl2aze0mOmvZXrVIRpD52gFBSxdN SH7HWZaWli5+Gu0GxZUWfGM/R3kkuqob45e2fvwz200nwFyxpB6i/sJfZ9LJYxKV yZsIx4YjU/NVW+DP8VqmDR74InUh8dfReZvRJFx48zUlgX+q8kPda24oQ2P0Dd4W 2TsJOnzyO3LsjwyBST6xkSMiI2BqS2l9a9cNgwk6vYnOtpLhU1xI2xjLptxWNDIW LDFqaHChL3Iq/h2jQbUunHrGoKqVz08MMFzElhzuEjB0TucriAPOnGFX/XDkG6Pk Ixbf2s/39Iv6KL/nWJ/fiXd9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULsYRIC/u CiL6CTUDIjIsBxzCoZwwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABv+BDmljl8oziS7L7n8r2e7zj255SfPELUUR6lXR/uVP7ZwCsv+vWLL xEEa8ILcrITs0Am0DThI3gIlW3o2CIyk1n2fVtgiaWMYT+F3jPSRZh4R1JnQPktX 0TMYHeynOfFD7Nw5LOPC6SBz0tR+LaFvzs7rYPT29MZ3uv2tO2LxUSD16bv/4SVq KItOzeztP1XOM/4QcClR7lxK2lqx9OBoeT8kiPgQmbQuNoXvc8IPR1K2B0Y6yEuD tvZNcv+Navm0BtIqPRC6AJB0n2xX65EeHFTg9A9o+Fux/f6yxXj7U5hqcuq37EuI ijVBjVyuVpAkvDj1+U5vzBl5cZKTS4U= -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:41 2025 by rpki-client