$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: /lcUMTx5e6ZmkGdS25FOQhpB3Jl38F3TupahCye2flM= Subject key identifier: 71:15:2C:A5:B3:9B:01:9D:A3:9D:72:3C:92:DE:10:95:77:5E:03:B7 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 0108 Signing time: Sun 15 Jun 2025 04:12:19 +0000 Manifest this update: Sun 15 Jun 2025 04:12:18 +0000 Manifest next update: Sun 22 Jun 2025 04:12:18 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: E6JOYU92AuwMT4FuUrxwWxK3DZ85MbgUiFdhgsYpZ7I=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Jun 15 04:12:18 2025 GMT Not After : Jun 22 04:12:18 2025 GMT Subject: CN=684e4823-3d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:e1:c0:58:3a:ef:0a:c5:a4:00:f4:3e:7e: cb:35:27:38:fc:47:05:36:43:6d:0d:5f:d3:a7:2f: 1f:54:b4:5c:98:e1:17:91:d1:c7:44:8d:90:ed:9a: ed:b0:da:0c:d3:a0:a5:e4:c4:71:7c:e9:0a:58:ef: a1:cd:e9:bf:c6:05:c1:06:fb:15:d2:b8:09:b7:96: a2:54:ac:b5:b2:a4:92:ab:f4:23:6e:39:8f:3f:63: fc:db:2f:fd:fe:3d:0c:b3:c8:b8:ae:63:d4:d7:04: cf:73:6f:ad:89:f6:92:d3:0b:dd:6e:3d:90:d3:17: f4:17:33:6d:47:77:84:f9:5f:63:f3:79:d4:37:90: 62:0f:27:61:c7:d1:02:c8:97:cd:e3:38:21:1f:65: 63:1f:4f:af:9f:9a:94:5d:bb:10:b8:19:84:4f:11: 8e:0b:07:ae:0c:60:93:ea:e3:fe:87:3e:45:f5:5a: 2e:02:24:56:1c:e8:7d:3f:5b:68:72:e4:ff:d9:ed: ac:e7:eb:b8:94:f2:1f:74:27:af:86:d7:af:7b:9e: 13:83:58:a2:96:c5:e0:31:33:1e:36:ad:b1:02:d1: a3:7e:d8:1a:b8:c4:02:ac:71:eb:b4:11:ae:dd:e1: 58:be:de:aa:47:52:02:6e:8d:f6:b5:b6:50:c4:a4: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:15:2C:A5:B3:9B:01:9D:A3:9D:72:3C:92:DE:10:95:77:5E:03:B7 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ef:af:50:f6:7b:87:64:9a:65:c3:7a:1b:de:a6:6d:1d:33: 5b:bd:82:21:fb:66:8e:70:1c:8b:b4:2c:45:64:40:d2:55:80: a9:07:8c:92:9d:53:00:d4:5b:a5:ee:c2:b0:dd:7d:c1:7e:ac: d5:88:7c:ac:5c:7c:a3:13:48:9b:c8:ee:f5:1c:c7:bd:b3:c7: 75:da:77:98:53:40:2c:22:3c:a9:37:66:06:44:ad:71:b2:17: c8:00:e1:ee:d1:03:e4:a8:6b:c5:e1:d8:9c:ac:d7:f2:61:4a: a9:e5:d8:55:e6:13:2b:94:98:91:d3:0b:2c:7b:3c:31:d7:6f: 68:47:b7:21:8a:08:aa:79:1f:2c:c4:34:31:99:2f:62:e6:9d: b0:39:ce:10:45:56:37:d1:63:65:56:ea:dd:fe:b7:ce:e3:07: 49:2b:b4:0d:ef:1b:0b:c4:d2:93:e7:39:cc:d8:2c:b0:d7:d5: 04:8b:82:d1:fe:03:b2:5a:69:bb:63:6f:98:6d:02:8c:b2:69: 80:53:20:49:ad:85:3b:db:74:01:aa:f7:1f:e4:a9:14:14:fe: 09:7d:01:2f:64:0f:24:0a:3a:9c:2b:ce:59:ab:bf:08:e8:d7: 04:5e:2f:d5:b6:09:f6:4f:b3:2b:f1:64:7e:d6:68:32:eb:dc: b9:10:f6:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwNjE1MDQxMjE4WhcNMjUwNjIyMDQxMjE4WjAYMRYwFAYD VQQDEw02ODRlNDgyMy0zZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSbhwFg67wrFpAD0Pn7LNSc4/EcFNkNtDV/Tpy8fVLRcmOEXkdHHRI2Q7Zrt sNoM06Cl5MRxfOkKWO+hzem/xgXBBvsV0rgJt5aiVKy1sqSSq/QjbjmPP2P82y/9 /j0Ms8i4rmPU1wTPc2+tifaS0wvdbj2Q0xf0FzNtR3eE+V9j83nUN5BiDydhx9EC yJfN4zghH2VjH0+vn5qUXbsQuBmETxGOCweuDGCT6uP+hz5F9VouAiRWHOh9P1to cuT/2e2s5+u4lPIfdCevhteve54Tg1iilsXgMTMeNq2xAtGjftgauMQCrHHrtBGu 3eFYvt6qR1ICbo32tbZQxKTTDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEVLKWz mwGdo51yPJLeEJV3XgO3MB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF769Q9nuHZJplw3ob3qZtHTNbvYIh+2aOcByLtCxFZEDSVYCpB4yS nVMA1Ful7sKw3X3BfqzViHysXHyjE0ibyO71HMe9s8d12neYU0AsIjypN2YGRK1x shfIAOHu0QPkqGvF4dicrNfyYUqp5dhV5hMrlJiR0wssezwx129oR7chigiqeR8s xDQxmS9i5p2wOc4QRVY30WNlVurd/rfO4wdJK7QN7xsLxNKT5znM2Cyw19UEi4LR /gOyWmm7Y2+YbQKMsmmAUyBJrYU723QBqvcf5KkUFP4JfQEvZA8kCjqcK85Zq78I 6NcEXi/Vtgn2T7Mr8WR+1mgy69y5EPbh -----END CERTIFICATE-----Generated at Sun Jun 15 08:20:28 2025 by rpki-client