$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: PTLLyaC4TI6/mk0KOE1hg5b7D4oH5pHAmDadZaCl6UM= Subject key identifier: 84:31:E3:1E:90:7B:86:ED:D6:72:81:DF:38:6A:9B:AF:B5:91:94:7D Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 0752 Signing time: Mon 16 Jun 2025 21:22:18 +0000 Manifest this update: Mon 16 Jun 2025 21:22:18 +0000 Manifest next update: Mon 23 Jun 2025 21:22:17 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: zmtTubtHEKYOEGyoXAMSSYofccFbJNA002NraiS7Xls=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Jun 16 21:22:18 2025 GMT Not After : Jun 23 21:22:17 2025 GMT Subject: CN=68508b0a-cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:4a:87:b7:1b:fd:d6:d5:96:75:52:9b:7c: 8d:e8:99:75:da:90:c5:52:2a:41:ff:6b:d5:11:42: 55:05:45:61:b0:82:89:37:53:69:03:4c:95:9c:0b: 72:42:3b:9e:7a:4c:31:ba:8d:ea:c1:20:a9:fa:37: d7:25:2f:4e:30:cf:bb:27:53:5b:af:ea:89:bd:02: b5:1d:b6:62:e7:c6:45:df:ca:3a:d4:19:8e:41:cd: b1:3c:93:99:99:cb:c9:59:be:e8:bd:9e:1b:ed:4a: fb:ff:ab:03:08:ad:68:71:d5:ec:52:e1:35:09:a1: 35:83:54:4d:28:24:d7:fb:38:a0:dd:dd:df:a8:ba: 4e:25:ae:a5:9f:83:b1:54:b2:89:79:fe:f0:34:9d: d8:dc:92:b9:3a:b0:b6:93:4a:24:b7:cb:bb:ac:78: 0f:a9:f7:06:54:3b:78:c1:d5:b4:74:df:98:20:7d: 30:eb:f5:06:f4:2b:52:ad:d2:0d:ad:09:dd:ab:4e: 83:6f:ae:76:93:9a:9f:76:ce:c5:ee:5e:d0:50:6f: e7:a0:e6:af:d2:e5:d3:d8:cc:72:61:ad:43:47:84: 40:a3:ec:2a:80:28:0e:96:07:b9:03:ae:a3:ec:09: ff:fa:82:23:45:58:40:51:96:49:bb:96:0a:73:9a: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:31:E3:1E:90:7B:86:ED:D6:72:81:DF:38:6A:9B:AF:B5:91:94:7D X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:00:78:8a:46:48:1d:5f:8c:96:f2:d9:5e:b2:09:d3:97:7f: 4e:89:0e:92:d5:8a:7d:98:d5:71:d4:8b:18:84:e3:62:16:88: 07:cc:e0:ae:c1:be:1e:84:47:38:f6:ed:30:99:e0:83:29:19: 61:4f:95:15:a4:9b:12:d8:c1:e3:2e:ae:b0:d9:75:ee:2f:71: cb:77:6a:0e:96:27:75:46:e7:76:59:db:53:d2:04:eb:1d:bd: 16:ce:65:6a:16:0f:0f:66:c1:74:78:64:94:d3:95:3d:70:54: 03:98:e5:af:83:5a:e7:00:6f:04:2f:35:e4:be:b6:68:8f:b4: 6f:36:1c:92:f7:e8:4a:bd:54:a8:f6:a3:03:92:1f:8b:62:44: 00:f5:5a:44:a0:8d:d6:8e:42:5f:d3:05:d1:ea:47:ed:4c:84: b2:af:ee:27:3a:50:73:76:a9:9d:6a:64:03:04:05:55:d8:1c: 56:cc:77:73:ec:5b:8a:66:16:24:e0:39:6a:a7:00:a9:ba:d2: d0:ad:b7:8d:37:d0:a4:1c:51:45:07:bb:66:d8:48:d1:bd:b4: dc:76:a7:94:d0:59:c5:d2:73:64:16:8a:40:a0:e3:65:17:af: c0:40:7d:fc:c7:4a:7f:70:21:a1:5d:0a:24:43:f7:28:a6:59: 5b:e4:0f:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjUwNjE2MjEyMjE4WhcNMjUwNjIzMjEyMjE3WjAYMRYwFAYD VQQDEw02ODUwOGIwYS1jYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5NKh7cb/dbVlnVSm3yN6Jl12pDFUipB/2vVEUJVBUVhsIKJN1NpA0yVnAty Qjueekwxuo3qwSCp+jfXJS9OMM+7J1Nbr+qJvQK1HbZi58ZF38o61BmOQc2xPJOZ mcvJWb7ovZ4b7Ur7/6sDCK1ocdXsUuE1CaE1g1RNKCTX+zig3d3fqLpOJa6ln4Ox VLKJef7wNJ3Y3JK5OrC2k0okt8u7rHgPqfcGVDt4wdW0dN+YIH0w6/UG9CtSrdIN rQndq06Db652k5qfds7F7l7QUG/noOav0uXT2MxyYa1DR4RAo+wqgCgOlge5A66j 7An/+oIjRVhAUZZJu5YKc5p1ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQx4x6Q e4bt1nKB3zhqm6+1kZR9MB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkAHiKRkgdX4yW8tlesgnTl39OiQ6S1Yp9mNVx1IsYhONiFogHzOCu wb4ehEc49u0wmeCDKRlhT5UVpJsS2MHjLq6w2XXuL3HLd2oOlid1Rud2WdtT0gTr Hb0WzmVqFg8PZsF0eGSU05U9cFQDmOWvg1rnAG8ELzXkvrZoj7RvNhyS9+hKvVSo 9qMDkh+LYkQA9VpEoI3WjkJf0wXR6kftTISyr+4nOlBzdqmdamQDBAVV2BxWzHdz 7FuKZhYk4DlqpwCputLQrbeNN9CkHFFFB7tm2EjRvbTcdqeU0FnF0nNkFopAoONl F6/AQH38x0p/cCGhXQokQ/copllb5A+r -----END CERTIFICATE-----Generated at Tue Jun 17 15:30:52 2025 by rpki-client