$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: +oTzYihJ0vKN9MKqGR2XHJun1JAVloU7Y8KTUrGCcow= Subject key identifier: 4E:BC:B7:66:C3:4F:04:D0:14:34:B2:9B:29:6E:6D:13:46:DB:1B:0F Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 039E Signing time: Thu 19 Jun 2025 00:36:08 +0000 Manifest this update: Thu 19 Jun 2025 00:36:08 +0000 Manifest next update: Thu 26 Jun 2025 00:36:08 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: vJ21HAhW/4gYva7ST1bMt78KaSpeRs8xbbS0XBEeXAI=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Jun 19 00:36:08 2025 GMT Not After : Jun 26 00:36:08 2025 GMT Subject: CN=68535b78-2cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:93:4f:a6:69:2d:4e:91:9f:98:a2:2e:38:87: 13:99:d3:b2:18:81:3b:02:4e:35:f8:bb:fa:dc:de: 33:9d:8f:51:09:91:c9:1a:eb:47:55:51:2b:1d:86: c6:65:c5:41:2b:76:e0:b6:87:bd:5b:fa:e2:60:88: 7b:35:c3:f2:d3:74:e8:de:34:09:ba:f6:2e:d5:1d: db:34:40:5e:3b:8e:ac:62:a6:c2:8d:5c:27:9c:01: 23:4a:4a:27:d5:e7:e2:37:1b:aa:08:49:07:0e:ca: 57:4b:b6:0e:92:d1:09:41:7a:f3:f0:7c:b3:d5:9e: b3:de:3e:d6:4b:2d:a2:3a:7a:d1:03:30:91:55:9f: 86:29:db:5b:1c:3f:2f:9c:17:e4:8c:10:03:d4:8e: 3a:78:68:f0:7e:99:bd:b8:6a:53:c2:70:82:45:6b: 1f:f5:20:c8:93:44:6f:ec:34:5b:67:51:66:2c:da: f0:8d:76:34:eb:d1:33:62:31:d1:ad:4e:10:5f:a2: a0:50:5f:dd:b4:5e:fb:ab:2d:ab:ad:be:c7:91:47: 62:75:cd:17:af:fc:70:52:65:a4:07:6a:07:12:49: 19:f1:9a:93:46:c7:0b:4c:4c:49:5e:55:d6:87:ec: 38:93:a7:14:2a:7c:de:e9:e8:26:1e:33:4d:9b:2b: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BC:B7:66:C3:4F:04:D0:14:34:B2:9B:29:6E:6D:13:46:DB:1B:0F X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cc:f1:22:03:da:2b:3e:bb:69:52:f3:8e:64:57:8a:50:7a: c7:dd:2e:5b:13:29:51:a4:cb:50:d2:51:d1:b5:da:4f:10:3f: 15:77:8b:6d:ff:8e:28:78:9b:02:0d:6d:3c:6b:7f:0f:0c:8f: 4c:9a:2c:3b:aa:30:d6:ef:96:29:e7:6f:37:c1:a6:df:04:fb: 31:f9:f6:20:1f:ee:c0:0d:f8:d7:26:e9:f2:f0:db:d5:86:09: e8:b1:9d:c4:a6:25:96:3c:7c:0b:35:5d:81:a7:f2:ed:c9:d2: 6a:c0:fb:82:14:13:6c:cd:51:49:a3:dd:dc:b0:62:16:29:77: e3:a8:79:2f:a0:ab:6b:45:73:55:f4:93:7a:48:40:6f:c0:9b: 61:69:bb:95:d6:bd:c3:da:0c:29:4e:ca:95:33:a9:ff:d1:1e: ed:22:90:3c:be:e2:59:31:7e:ae:2d:21:43:69:c2:e5:56:c3: d6:e9:4c:20:bb:05:6c:56:bb:d4:2b:8b:bb:42:96:51:40:42: c2:a0:dc:84:32:47:db:9f:c1:51:d0:50:e0:64:90:73:9d:dd: b5:c1:0b:d8:7c:0b:d3:6d:13:13:56:cb:b4:e3:07:6d:17:a8: 1a:3a:6c:bf:19:bf:e2:8c:b4:ac:eb:17:fe:81:b3:83:34:23: 55:ab:18:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjUwNjE5MDAzNjA4WhcNMjUwNjI2MDAzNjA4WjAYMRYwFAYD VQQDEw02ODUzNWI3OC0yY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/JNPpmktTpGfmKIuOIcTmdOyGIE7Ak41+Lv63N4znY9RCZHJGutHVVErHYbG ZcVBK3bgtoe9W/riYIh7NcPy03To3jQJuvYu1R3bNEBeO46sYqbCjVwnnAEjSkon 1efiNxuqCEkHDspXS7YOktEJQXrz8Hyz1Z6z3j7WSy2iOnrRAzCRVZ+GKdtbHD8v nBfkjBAD1I46eGjwfpm9uGpTwnCCRWsf9SDIk0Rv7DRbZ1FmLNrwjXY069EzYjHR rU4QX6KgUF/dtF77qy2rrb7HkUdidc0Xr/xwUmWkB2oHEkkZ8ZqTRscLTExJXlXW h+w4k6cUKnze6egmHjNNmyuWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE68t2bD TwTQFDSymylubRNG2xsPMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlzPEiA9orPrtpUvOOZFeKUHrH3S5bEylRpMtQ0lHRtdpPED8Vd4tt /44oeJsCDW08a38PDI9Mmiw7qjDW75Yp5283wabfBPsx+fYgH+7ADfjXJuny8NvV hgnosZ3EpiWWPHwLNV2Bp/LtydJqwPuCFBNszVFJo93csGIWKXfjqHkvoKtrRXNV 9JN6SEBvwJthabuV1r3D2gwpTsqVM6n/0R7tIpA8vuJZMX6uLSFDacLlVsPW6Uwg uwVsVrvUK4u7QpZRQELCoNyEMkfbn8FR0FDgZJBznd21wQvYfAvTbRMTVsu04wdt F6gaOmy/Gb/ijLSs6xf+gbODNCNVqxg9 -----END CERTIFICATE-----Generated at Thu Jun 19 11:31:30 2025 by rpki-client