$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: +musc+4FYyOTxuO9bhfu8R+nz1p4PyYfC24TV9WPo3Y= Subject key identifier: 1E:FD:1B:36:C8:B7:76:D3:29:34:39:B4:C6:F8:E0:92:03:0C:92:EB Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 349D Signing time: Wed 18 Jun 2025 14:21:53 +0000 Manifest this update: Wed 18 Jun 2025 14:21:53 +0000 Manifest next update: Wed 25 Jun 2025 14:21:53 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: tQ4YI0BhsjLgEEByaSKZX2bTga7HEnXshC4WNgk1fxg=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Jun 18 14:21:53 2025 GMT Not After : Jun 25 14:21:53 2025 GMT Subject: CN=6852cb81-7b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:02:fb:a1:b7:85:1b:02:51:d4:26:d9:91: a5:9f:5e:a9:2d:1c:eb:fe:da:e3:97:ad:a6:51:4c: 68:d4:b7:aa:f3:a5:9b:40:cf:ac:d6:d2:06:e9:b9: 1f:e0:3c:e2:34:8c:ae:60:0d:71:1f:27:c0:7d:a7: fa:48:10:a8:c3:68:eb:bd:d6:59:1f:22:8b:96:e9: da:f1:6e:0d:6f:22:db:2d:07:d3:eb:a3:66:9e:dc: 76:aa:34:48:d3:b6:b3:84:b6:4e:4e:bb:1a:63:04: 21:47:13:ef:c3:df:0d:eb:6b:08:71:f4:9b:29:87: a3:39:cd:78:87:6d:d2:22:5a:5f:8d:e3:3d:b2:83: ad:8b:55:60:d8:65:2f:7c:ba:22:e8:3f:fb:9e:8a: 47:da:6e:d7:8c:49:43:e4:d5:73:fb:9d:16:c7:d3: ea:28:f7:3c:46:15:7f:15:46:e1:6e:2a:d0:50:d0: 6b:83:73:99:d2:a8:4f:08:80:d0:36:12:07:43:a2: 81:69:43:fc:47:76:ad:64:6c:8a:ee:bf:a9:0a:81: 13:6b:27:63:43:01:61:1f:03:10:47:49:5e:85:bc: 28:06:8a:a2:18:34:00:12:ea:03:c7:a8:37:e7:ad: b7:ba:e3:db:c2:d9:a6:43:67:54:1f:4c:e5:56:5e: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FD:1B:36:C8:B7:76:D3:29:34:39:B4:C6:F8:E0:92:03:0C:92:EB X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:88:7e:a1:88:a8:12:00:ca:93:8d:a4:1e:dd:ee:0a:4d:d3: 91:c8:3f:ef:5c:dc:b0:cf:10:a7:eb:f1:d9:2e:ed:bc:e5:0d: 70:ed:e8:25:63:b4:98:6d:0d:3a:e9:0d:07:08:bb:40:f1:ab: 8f:98:30:a8:67:02:6d:19:9c:85:c3:e8:fc:cf:82:50:60:d0: 1e:8d:26:1a:f3:72:9d:95:87:f7:d3:c0:67:89:47:5e:c9:41: 98:7a:58:18:4b:00:a8:2b:01:9f:1e:1b:b6:a8:57:78:3d:24: 73:d5:0a:b9:f5:b4:85:8c:3f:d6:1b:a6:b9:0c:e3:be:8f:e0: b7:95:7e:e5:7f:cc:15:6a:18:04:16:68:b0:14:0f:f4:29:ee: b4:84:50:aa:8a:df:ce:ee:f8:af:eb:ed:39:21:1f:50:9e:27: 7d:23:8e:ac:97:ad:5d:bd:6b:50:f5:70:49:e3:7e:6b:68:30: f0:c8:80:8f:b0:2f:7d:33:7b:1c:1b:7d:79:5e:db:c8:f8:15: e9:1f:15:9f:86:d2:a3:44:6d:98:d8:e1:2f:e7:0b:76:e7:81: 10:83:96:d2:21:25:d4:71:37:bb:ea:24:23:19:af:4c:37:28: 4b:63:29:e1:7d:42:e1:58:8b:fd:d8:95:2b:56:73:a0:01:81: 7e:b1:9a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwNjE4MTQyMTUzWhcNMjUwNjI1MTQyMTUzWjAYMRYwFAYD VQQDEw02ODUyY2I4MS03YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW4C+6G3hRsCUdQm2ZGln16pLRzr/trjl62mUUxo1Leq86WbQM+s1tIG6bkf 4DziNIyuYA1xHyfAfaf6SBCow2jrvdZZHyKLluna8W4NbyLbLQfT66Nmntx2qjRI 07azhLZOTrsaYwQhRxPvw98N62sIcfSbKYejOc14h23SIlpfjeM9soOti1Vg2GUv fLoi6D/7nopH2m7XjElD5NVz+50Wx9PqKPc8RhV/FUbhbirQUNBrg3OZ0qhPCIDQ NhIHQ6KBaUP8R3atZGyK7r+pCoETaydjQwFhHwMQR0lehbwoBoqiGDQAEuoDx6g3 5623uuPbwtmmQ2dUH0zlVl6zEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB79GzbI t3bTKTQ5tMb44JIDDJLrMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgiH6hiKgSAMqTjaQe3e4KTdORyD/vXNywzxCn6/HZLu285Q1w7egl Y7SYbQ066Q0HCLtA8auPmDCoZwJtGZyFw+j8z4JQYNAejSYa83KdlYf308BniUde yUGYelgYSwCoKwGfHhu2qFd4PSRz1Qq59bSFjD/WG6a5DOO+j+C3lX7lf8wVahgE FmiwFA/0Ke60hFCqit/O7viv6+05IR9Qnid9I46sl61dvWtQ9XBJ435raDDwyICP sC99M3scG315XtvI+BXpHxWfhtKjRG2Y2OEv5wt254EQg5bSISXUcTe76iQjGa9M NyhLYynhfULhWIv92JUrVnOgAYF+sZrF -----END CERTIFICATE-----Generated at Thu Jun 19 18:05:38 2025 by rpki-client