$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: ZaRkrJiQsfArR7cuY54XwZgU0s+9HcSB6Sn2rkg/0+Y= Subject key identifier: FD:CD:6E:8D:A3:20:7B:13:3A:0B:F3:C8:FE:63:31:24:61:CC:35:1D Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0A24 Signing time: Wed 18 Jun 2025 19:57:06 +0000 Manifest this update: Wed 18 Jun 2025 19:57:05 +0000 Manifest next update: Wed 25 Jun 2025 19:57:05 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: FDQ4mP8fEK56mE+9rLiE/qoc9RT122cB4oRX1nYYeXU=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Jun 18 19:57:05 2025 GMT Not After : Jun 25 19:57:05 2025 GMT Subject: CN=68531a12-916f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:3b:e0:2c:c9:71:1a:66:f6:ec:1f:9a:27: a8:ca:27:ab:d9:b5:a0:62:1d:84:5d:32:f7:39:06: ee:cd:36:21:f2:39:dc:87:65:d7:af:6d:9d:9f:9e: 4e:45:e4:60:7d:3d:75:b6:6d:ec:33:6e:dc:9e:0a: cb:70:b0:48:05:de:ee:da:d1:cc:f7:39:50:0d:8b: 5d:9a:95:1c:72:7b:1a:4c:3e:9a:da:93:5c:12:44: 24:b2:90:49:af:d3:52:cf:d3:3a:70:b0:8f:6d:09: 56:7f:13:5c:25:7c:b3:48:4b:33:aa:a9:cb:76:f4: cd:9a:d2:5b:fc:09:a1:23:71:f4:cb:97:4c:9b:dc: 6e:56:f3:6a:47:1c:28:c2:3f:f0:d8:f4:55:08:7e: bb:de:18:90:56:ac:12:8a:c7:5d:4e:b0:b7:65:83: eb:02:2c:aa:e2:41:fb:d4:f8:2b:12:ca:78:d7:1d: 4c:92:8a:29:6c:ab:a3:98:2e:1e:d7:f6:51:fa:cb: bd:48:2c:20:f2:8b:63:31:88:8b:58:8e:2d:7a:64: 84:aa:5f:b6:cd:90:72:cc:b7:a9:96:79:6d:25:84: 26:42:9c:83:62:16:89:f7:22:7b:51:a7:e9:1c:4d: e8:74:84:55:19:9d:44:7b:7e:d8:45:33:95:74:a1: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:6E:8D:A3:20:7B:13:3A:0B:F3:C8:FE:63:31:24:61:CC:35:1D X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:aa:5c:c0:31:a2:60:d6:46:3a:af:07:c5:4e:36:75:7c:2c: 1b:55:4b:f9:2d:25:91:55:63:15:79:aa:90:40:25:62:76:76: df:96:2b:70:88:11:a8:22:b3:55:ec:76:9e:e6:7b:d3:5d:74: 93:36:c4:89:0d:63:e0:89:1f:49:77:10:06:25:2d:40:f4:92: 21:df:a6:9d:ca:e0:34:65:aa:4a:ba:60:b5:be:20:38:3a:ac: 7a:69:fc:29:2a:c7:c9:53:28:b6:69:cd:c0:c0:15:6d:2e:7c: c5:7b:00:5f:9d:55:c1:d5:54:f7:cf:cc:bc:2d:20:c4:35:2a: 97:72:e2:dd:58:f3:9a:76:ba:a3:30:d7:81:96:80:d1:a6:8d: c7:d2:e7:1c:e5:8a:88:8e:46:8b:0f:82:47:8a:4f:30:74:2d: d7:e1:06:ef:5d:cb:20:78:4f:c0:15:96:01:70:94:9d:24:29: 6f:62:e4:dc:c4:64:6d:bb:b5:fa:b1:a7:7c:1f:09:2c:47:ed: d5:77:25:e3:8e:c6:d1:9e:b3:82:f4:86:5d:00:b0:88:3c:ed: 5f:f6:c5:30:9a:ba:c8:2d:b8:65:85:ca:6f:bf:31:c2:30:ef: 73:3c:fe:ac:de:54:4f:28:57:97:0f:ca:0f:af:3d:cc:21:01: 03:cd:8f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjUwNjE4MTk1NzA1WhcNMjUwNjI1MTk1NzA1WjAYMRYwFAYD VQQDEw02ODUzMWExMi05MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsI74CzJcRpm9uwfmieoyier2bWgYh2EXTL3OQbuzTYh8jnch2XXr22dn55O ReRgfT11tm3sM27cngrLcLBIBd7u2tHM9zlQDYtdmpUccnsaTD6a2pNcEkQkspBJ r9NSz9M6cLCPbQlWfxNcJXyzSEszqqnLdvTNmtJb/AmhI3H0y5dMm9xuVvNqRxwo wj/w2PRVCH673hiQVqwSisddTrC3ZYPrAiyq4kH71PgrEsp41x1MkoopbKujmC4e 1/ZR+su9SCwg8otjMYiLWI4temSEql+2zZByzLeplnltJYQmQpyDYhaJ9yJ7Uafp HE3odIRVGZ1Ee37YRTOVdKGG9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3Nbo2j IHsTOgvzyP5jMSRhzDUdMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6qlzAMaJg1kY6rwfFTjZ1fCwbVUv5LSWRVWMVeaqQQCVidnbflitw iBGoIrNV7Hae5nvTXXSTNsSJDWPgiR9JdxAGJS1A9JIh36adyuA0ZapKumC1viA4 Oqx6afwpKsfJUyi2ac3AwBVtLnzFewBfnVXB1VT3z8y8LSDENSqXcuLdWPOadrqj MNeBloDRpo3H0ucc5YqIjkaLD4JHik8wdC3X4QbvXcsgeE/AFZYBcJSdJClvYuTc xGRtu7X6sad8HwksR+3VdyXjjsbRnrOC9IZdALCIPO1f9sUwmrrILbhlhcpvvzHC MO9zPP6s3lRPKFeXD8oPrz3MIQEDzY+9 -----END CERTIFICATE-----Generated at Thu Jun 19 20:53:11 2025 by rpki-client