$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: HjeE4kzP494NpLXtsIqNvqcPy5ktC8WxZQCUD5nK2Mo= Subject key identifier: 09:3B:29:1A:82:C0:F4:8A:02:F0:19:7B:9F:77:EB:59:BD:C4:91:BB Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: B1 Signing time: Fri 13 Jun 2025 04:56:04 +0000 Manifest this update: Fri 13 Jun 2025 04:56:04 +0000 Manifest next update: Fri 20 Jun 2025 04:56:04 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: LPP1hveMbxuIIW16+5sq7xMxRBoj0Tmnrh0G6uVOCK0=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qyHVBU6r1vopcSbtOHBuL6JaUanY0OBKOoUk8MRDDbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Jun 13 04:56:04 2025 GMT Not After : Jun 20 04:56:04 2025 GMT Subject: CN=684baf64-9d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:d8:d5:85:f6:20:ba:69:ba:c7:9d:c8:b0: 57:67:bc:dc:86:c0:e3:e4:cf:0b:72:31:1d:12:08: 91:b6:74:d4:d6:f3:bb:2b:8e:23:ac:78:a1:87:e1: 36:f3:7a:d9:1c:aa:39:3a:00:5f:14:7c:99:1a:0f: 00:bb:85:74:bb:2d:6f:a5:04:04:8b:13:d2:7f:d9: ca:1f:c9:2a:d9:ee:5f:b4:4f:a6:62:3f:3d:e9:50: 29:c0:d6:aa:a2:d4:60:b3:57:ec:07:4a:25:ea:cc: b0:28:91:7a:29:f9:95:b7:91:ab:65:01:1b:89:70: 87:0d:62:c3:b9:87:7c:78:a8:c3:fe:d9:c1:42:dc: 7a:92:a6:d8:d8:9f:c5:43:7b:f2:ad:cc:52:a6:bb: ab:40:c0:24:12:7f:74:ac:e6:d1:80:1b:4e:49:ca: 77:84:6b:ec:ca:95:1e:c2:3c:07:f1:71:69:bc:10: d0:39:34:57:af:87:3d:61:48:87:d6:b1:d5:3b:be: 4c:a3:6d:17:15:36:f8:58:a7:9a:72:96:c8:5a:50: 75:c7:a5:67:f5:fd:09:52:fa:8c:c3:4b:69:0a:51: 2b:29:15:fc:a0:78:37:e2:c3:d0:08:00:2f:90:b8: 3c:35:83:ec:52:52:29:72:6c:0b:a5:12:6e:14:a6: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:29:1A:82:C0:F4:8A:02:F0:19:7B:9F:77:EB:59:BD:C4:91:BB X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2b:87:73:e6:b7:cf:bb:bf:ea:0b:7e:c1:35:bc:db:75:a2: 54:f9:18:43:31:9d:ed:91:0d:d4:f8:f6:76:da:39:05:5c:3d: 44:bb:b7:e2:18:f8:18:93:e0:13:fc:f8:aa:71:57:3d:dc:b1: 2f:95:8c:07:63:5c:a9:b5:61:2a:38:c7:49:89:9e:e8:fa:34: 3c:82:ad:f7:3e:11:9c:3f:6f:51:dd:43:85:47:b9:7b:72:e1: 8d:fc:f8:fb:82:6c:30:54:9c:7e:5c:ce:0a:20:41:5f:95:8a: 14:f2:44:3f:40:43:8b:f6:47:90:17:13:89:5d:3e:0b:00:91: 7a:89:e7:0d:56:88:0f:f5:97:f4:22:06:19:46:4f:f5:89:31: 54:1f:dd:0d:b4:35:2f:50:92:f9:52:e5:f6:12:e6:78:f9:8f: 56:09:ea:2d:0e:b4:9b:22:3a:0f:21:17:a7:1e:d8:8e:d1:33: f6:46:d2:bb:92:bd:c9:8c:ff:86:2a:b9:07:9e:28:c4:99:c0: dc:ab:46:6b:14:7b:03:52:69:2c:0c:03:03:55:7d:c6:ad:42: f7:8c:fe:ba:e9:7c:f0:52:16:57:0a:30:39:e5:4c:93:54:78: 94:6d:5e:fa:c1:d1:dc:71:ee:48:97:5d:83:a1:66:b9:4a:2a: 19:c3:9b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUwNjEzMDQ1NjA0WhcNMjUwNjIwMDQ1NjA0WjAYMRYwFAYD VQQDEw02ODRiYWY2NC05ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2XY1YX2ILppusedyLBXZ7zchsDj5M8LcjEdEgiRtnTU1vO7K44jrHihh+E2 83rZHKo5OgBfFHyZGg8Au4V0uy1vpQQEixPSf9nKH8kq2e5ftE+mYj896VApwNaq otRgs1fsB0ol6sywKJF6KfmVt5GrZQEbiXCHDWLDuYd8eKjD/tnBQtx6kqbY2J/F Q3vyrcxSprurQMAkEn90rObRgBtOScp3hGvsypUewjwH8XFpvBDQOTRXr4c9YUiH 1rHVO75Mo20XFTb4WKeacpbIWlB1x6Vn9f0JUvqMw0tpClErKRX8oHg34sPQCAAv kLg8NYPsUlIpcmwLpRJuFKZE4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk7KRqC wPSKAvAZe59361m9xJG7MB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNK4dz5rfPu7/qC37BNbzbdaJU+RhDMZ3tkQ3U+PZ22jkFXD1Eu7fi GPgYk+AT/PiqcVc93LEvlYwHY1yptWEqOMdJiZ7o+jQ8gq33PhGcP29R3UOFR7l7 cuGN/Pj7gmwwVJx+XM4KIEFflYoU8kQ/QEOL9keQFxOJXT4LAJF6iecNVogP9Zf0 IgYZRk/1iTFUH90NtDUvUJL5UuX2EuZ4+Y9WCeotDrSbIjoPIRenHtiO0TP2RtK7 kr3JjP+GKrkHnijEmcDcq0ZrFHsDUmksDAMDVX3GrUL3jP666XzwUhZXCjA55UyT VHiUbV76wdHcce5Il12DoWa5SioZw5vC -----END CERTIFICATE-----Generated at Sat Jun 14 17:27:29 2025 by rpki-client