$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: gdml2BHBs/eFrIhFaN0d98TBzyEdIImwZcK7R2to9Us= Subject key identifier: 1A:8F:ED:8F:ED:BE:EB:C8:C8:CF:CB:54:2D:1F:8F:3F:8F:13:FC:D5 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FA2 Signing time: Thu 12 Jun 2025 17:25:57 +0000 Manifest this update: Thu 12 Jun 2025 17:25:57 +0000 Manifest next update: Thu 19 Jun 2025 17:25:57 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: ZgeevTakNHycYV9XD2T+cb/76QgsiD8PK/cV0582dRY=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4009 (0xfa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Jun 12 17:25:57 2025 GMT Not After : Jun 19 17:25:57 2025 GMT Subject: CN=684b0da5-620c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:e6:67:33:fc:b3:76:da:c4:8f:c5:aa:de: 5f:6e:05:cb:a1:87:45:cf:51:f7:ac:1d:1b:36:24: a3:a3:54:9e:ae:4b:94:7d:4a:04:e9:8c:3f:a7:1d: 4d:e3:71:d3:43:bd:44:d7:1d:e9:61:f0:b0:2f:0a: 2c:1e:48:8e:45:dd:66:d1:0e:38:e0:7f:6c:3f:4a: ac:43:c3:d6:8e:73:1e:27:9c:90:fd:ad:8b:09:14: 79:b8:d5:72:af:05:73:c3:78:0b:48:f2:67:95:67: fc:63:4d:b5:b4:54:8f:1c:a8:db:14:28:35:ec:37: 9b:2e:24:8b:a1:9f:95:69:34:2a:0b:12:e0:82:e8: 3c:f2:be:31:5b:6c:b3:c3:d7:10:d8:2e:c0:12:89: 6f:bd:d2:ba:fd:cd:31:44:f2:82:db:69:51:ca:f1: c2:42:d5:20:4a:7d:45:39:dc:af:95:46:79:11:d0: 40:f3:e0:ee:e2:f9:88:26:a7:c2:a8:e8:1d:eb:5f: 07:00:f2:14:3f:52:0d:77:69:bb:d8:8f:95:d0:83: 13:1c:30:e1:55:fd:68:9b:e8:52:b5:27:23:8b:e2: 87:f2:67:c6:8b:f0:92:e8:3a:be:8b:c6:b7:e6:68: 6a:28:76:1c:a3:ad:74:bd:20:84:81:ab:9a:d8:d2: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:ED:8F:ED:BE:EB:C8:C8:CF:CB:54:2D:1F:8F:3F:8F:13:FC:D5 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b4:c8:36:c3:d5:5e:92:f6:82:87:0a:d5:05:81:bf:57:8b: ca:fb:7f:40:50:2d:ee:f3:35:17:a4:11:5b:a3:70:59:63:a5: b8:f4:12:6c:78:60:f3:ca:40:6c:46:ec:40:e9:b5:f7:cc:60: 48:61:a8:1d:0c:0f:60:07:52:df:79:57:d7:ef:e5:8c:a3:26: 25:29:2b:59:53:e9:41:32:84:54:fc:68:9f:8e:7d:9d:b5:c0: 1e:8a:09:98:70:87:3a:5b:6d:98:f4:b8:1d:69:bf:2f:28:bd: 69:2f:12:05:de:b9:ef:7e:ab:92:15:70:3f:cf:d5:3d:f7:cb: 98:51:b3:4a:25:6b:0f:bf:e9:bd:f8:6e:58:85:29:29:64:56: 82:8e:f5:0b:b3:97:9c:13:ce:5e:9d:9a:f2:ce:93:dd:6a:d7: f5:b7:2c:a7:9e:4c:2a:14:92:2f:e7:6c:7b:74:ea:27:d4:7b: e2:6b:22:70:a9:33:ff:ee:2a:06:34:f6:40:ef:47:07:03:34: 38:05:6e:02:28:a2:82:f0:02:50:65:f5:c9:ff:80:33:3a:5b: b8:31:41:11:5e:42:14:10:50:e8:15:66:1e:94:90:ea:cc:df: c8:37:e6:81:56:f1:e4:45:79:aa:20:a8:2e:0f:e3:85:54:ae: 9a:f1:59:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwNjEyMTcyNTU3WhcNMjUwNjE5MTcyNTU3WjAYMRYwFAYD VQQDEw02ODRiMGRhNS02MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttrmZzP8s3baxI/Fqt5fbgXLoYdFz1H3rB0bNiSjo1SerkuUfUoE6Yw/px1N 43HTQ71E1x3pYfCwLwosHkiORd1m0Q444H9sP0qsQ8PWjnMeJ5yQ/a2LCRR5uNVy rwVzw3gLSPJnlWf8Y021tFSPHKjbFCg17DebLiSLoZ+VaTQqCxLggug88r4xW2yz w9cQ2C7AEolvvdK6/c0xRPKC22lRyvHCQtUgSn1FOdyvlUZ5EdBA8+Du4vmIJqfC qOgd618HAPIUP1INd2m72I+V0IMTHDDhVf1om+hStScji+KH8mfGi/CS6Dq+i8a3 5mhqKHYco610vSCEgaua2NIkYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqP7Y/t vuvIyM/LVC0fjz+PE/zVMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAltMg2w9VekvaChwrVBYG/V4vK+39AUC3u8zUXpBFbo3BZY6W49BJs eGDzykBsRuxA6bX3zGBIYagdDA9gB1LfeVfX7+WMoyYlKStZU+lBMoRU/Gifjn2d tcAeigmYcIc6W22Y9Lgdab8vKL1pLxIF3rnvfquSFXA/z9U998uYUbNKJWsPv+m9 +G5YhSkpZFaCjvULs5ecE85enZryzpPdatf1tyynnkwqFJIv52x7dOon1HviayJw qTP/7ioGNPZA70cHAzQ4BW4CKKKC8AJQZfXJ/4AzOlu4MUERXkIUEFDoFWYelJDq zN/IN+aBVvHkRXmqIKguD+OFVK6a8Vlh -----END CERTIFICATE-----Generated at Sat Jun 14 17:16:15 2025 by rpki-client