$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft File: 1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json) Hash identifier: jwGsxPw0g5JyAef60buUGpGvb0W/xfhvM/DTVxalNBU= Subject key identifier: 40:C6:A6:12:8B:48:7D:F4:8C:4E:2D:EE:C0:90:FB:F4:11:8D:C1:3E Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft Manifest number: 040C Signing time: Sat 21 Jun 2025 00:19:41 +0000 Manifest this update: Sat 21 Jun 2025 00:19:40 +0000 Manifest next update: Sat 28 Jun 2025 00:19:40 +0000 Files and hashes: 1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: /78Dex3zc62cECmqzx2j0FDqhZwJghBmk7ZWvQo1Eq4=) 2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: 85cGKhcFvfLsa3fKkS4OSkRQ0VqdCtjeFSWGED/065w=) 3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: AFhkaTS9H9SYq32LCGLZ0ybHnkII09gZHj0VVB5f314=) 4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=) 5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: 1tRgJ3aPzibyR+z50Gw9nZnYt8M73G+bJYsVfkg2zT8=) 6: F563D916248D11EF93237035C4F9AE02.roa (hash: B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=) 7: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K8HM6DIcOQOpn7mr5HRxJGQ+LZPGnSM+a9C5ehvgnkk=) 8: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 7nV+jajMliwqjNqYG+S6G7SOAx0aeStohPloUPjdM80=) 9: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=) 10: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: 4TUF4fCsd6U4sl8CKjbb5lEPYX8IdLYlZccOBdKP5o0=) 11: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 5jFOXz91ZZ50fpVnfRxRJl436xHddATVpaygKT2CLho=) 12: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=) 13: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: zGN2nOJQWd9Hxkuu+Xvwm7K9HCh0xLUXhnRjE+idexs=) 14: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 00:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: Jun 21 00:19:40 2025 GMT Not After : Jun 28 00:19:40 2025 GMT Subject: CN=6855fa9c-e02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:f6:de:e0:53:ce:09:f8:d5:ff:0b:90:dc: b8:30:40:25:c3:70:4a:f7:50:d8:d0:18:bd:28:9e: bd:b8:61:c4:03:40:39:01:5b:5e:e8:23:d2:bc:00: 44:19:41:03:67:f0:07:40:f3:76:4a:25:a1:36:a2: 4d:af:2f:6b:d1:f0:a4:2d:da:a6:7c:34:3d:d6:48: b2:0a:39:51:5c:6e:46:e5:68:0f:9e:ab:21:8d:4a: b2:79:e5:da:1d:ef:63:d5:d3:3b:4d:26:b3:fa:25: d6:33:21:7a:43:6a:65:a5:f3:c9:50:b7:de:89:bf: 16:82:cb:59:9c:8d:d0:44:a2:04:a9:f9:eb:0d:3d: 76:30:7a:65:61:96:df:47:7b:19:ba:64:dd:36:e0: 67:aa:95:a6:cf:61:4e:9f:b1:37:ed:21:cd:e7:ce: c4:75:2a:5f:ef:5d:0d:fc:d4:24:8b:a7:56:21:51: 02:d6:c0:fd:0f:1b:1a:b4:7f:dd:a8:ca:6c:e0:31: 3a:37:35:9a:3b:a3:da:82:29:c2:6a:e8:b4:d2:c7: 95:12:07:15:b7:bc:56:46:8f:7c:bb:62:f5:fe:02: 96:42:4e:d6:37:8c:ec:3b:2a:62:0f:03:17:c6:4a: 24:ad:2b:c6:2d:5f:6c:e3:01:c3:6d:2e:9e:ef:d5: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C6:A6:12:8B:48:7D:F4:8C:4E:2D:EE:C0:90:FB:F4:11:8D:C1:3E X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:4b:39:c1:73:55:19:4f:93:1e:4e:42:01:ef:c7:a0:bd:9e: b2:3e:85:e9:06:85:58:ea:25:d6:2a:df:17:19:c7:e6:d9:de: f2:d9:2a:90:1d:a1:c0:ed:a3:55:75:8d:5e:03:d7:6e:8c:ac: 61:ed:cd:6c:3c:d9:47:f6:8d:b7:6f:ed:c1:df:96:ce:ed:2f: 71:3f:c9:ab:65:8b:b3:07:41:d2:5d:3c:e5:70:15:a3:86:42: 36:59:07:53:0a:30:d0:a3:66:8e:91:92:c4:37:45:50:8f:72: 8c:c8:1c:95:6a:07:4c:32:de:d5:bd:06:dd:13:f0:bc:61:62: 2c:aa:d8:35:78:c1:ea:45:97:cc:cf:f6:de:df:5b:5e:dd:c7: e6:7e:02:14:70:f2:76:6f:c4:e8:dd:17:2b:d5:5f:86:27:8c: e4:48:96:22:59:8c:06:4e:73:51:ed:77:4b:2a:b4:80:3e:39: 41:32:24:56:ad:2b:22:cb:0b:31:c4:67:5a:d7:62:7d:86:bf: 71:95:1d:bb:b8:f7:fe:8a:0c:1e:89:e5:bb:3d:06:7c:fa:25: 30:bc:2e:33:7a:ed:88:d6:43:64:5b:6e:b5:e9:74:4c:1e:55: 38:43:da:31:e9:67:99:d5:10:11:53:f0:64:b1:85:88:8c:5e: 1d:22:b5:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjUwNjIxMDAxOTQwWhcNMjUwNjI4MDAxOTQwWjAYMRYwFAYD VQQDEw02ODU1ZmE5Yy1lMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqX23uBTzgn41f8LkNy4MEAlw3BK91DY0Bi9KJ69uGHEA0A5AVte6CPSvABE GUEDZ/AHQPN2SiWhNqJNry9r0fCkLdqmfDQ91kiyCjlRXG5G5WgPnqshjUqyeeXa He9j1dM7TSaz+iXWMyF6Q2plpfPJULfeib8WgstZnI3QRKIEqfnrDT12MHplYZbf R3sZumTdNuBnqpWmz2FOn7E37SHN587EdSpf710N/NQki6dWIVEC1sD9DxsatH/d qMps4DE6NzWaO6PaginCaui00seVEgcVt7xWRo98u2L1/gKWQk7WN4zsOypiDwMX xkokrSvGLV9s4wHDbS6e79X8PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDGphKL SH30jE4t7sCQ+/QRjcE+MB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCSznBc1UZT5MeTkIB78egvZ6yPoXpBoVY6iXWKt8XGcfm2d7y2SqQ HaHA7aNVdY1eA9dujKxh7c1sPNlH9o23b+3B35bO7S9xP8mrZYuzB0HSXTzlcBWj hkI2WQdTCjDQo2aOkZLEN0VQj3KMyByVagdMMt7VvQbdE/C8YWIsqtg1eMHqRZfM z/be31te3cfmfgIUcPJ2b8To3Rcr1V+GJ4zkSJYiWYwGTnNR7XdLKrSAPjlBMiRW rSsiywsxxGda12J9hr9xlR27uPf+igweieW7PQZ8+iUwvC4zeu2I1kNkW2616XRM HlU4Q9ox6WeZ1RARU/BksYWIjF4dIrXg -----END CERTIFICATE-----Generated at Sat Jun 21 04:34:31 2025 by rpki-client