$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: dysmq18MdbcNP9eY03xh+DcyJxk5geS7M95Htlu7eIw= Subject key identifier: 0C:CD:15:C1:BE:A6:F2:0A:00:50:30:20:8D:44:53:CF:F2:E7:AC:24 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 01C7 Signing time: Sun 15 Jun 2025 02:13:39 +0000 Manifest this update: Sun 15 Jun 2025 02:13:38 +0000 Manifest next update: Sun 22 Jun 2025 02:13:38 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: jm4MmsmpZoyFQJdiZtVtisUEIVObqkJ823MfJGApiWQ=) 2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: fGEw+qeCcqB/RBoNg72OOghHbjbROkzgK5a78Db2wZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Jun 15 02:13:38 2025 GMT Not After : Jun 22 02:13:38 2025 GMT Subject: CN=684e2c52-1ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:52:89:45:53:06:cb:1c:1a:dd:59:49:da: f3:13:e1:f4:e5:41:09:7c:af:2c:d3:8e:2c:53:65: af:3e:ba:df:6b:95:95:db:40:47:bf:05:97:9e:34: 0b:d2:0c:cb:10:a4:2e:c1:db:1d:cf:02:56:27:cf: a9:d4:64:65:c6:97:09:00:26:cc:03:c8:b3:02:08: 26:b2:eb:94:84:74:b6:7e:dc:24:d8:e8:d4:75:50: 38:a9:43:1a:0c:23:21:87:47:fa:d1:99:9d:3c:38: b9:73:be:95:db:08:3a:e4:56:f2:86:15:17:0a:49: 7e:5d:04:dd:57:45:51:ca:ac:ab:ec:75:89:ad:bf: 9e:3c:c3:52:90:6b:c3:33:67:98:6d:f1:47:fb:95: 19:e3:c7:84:3f:da:54:09:04:a7:37:de:21:5f:5e: 09:33:07:c1:58:bd:f2:ca:00:76:c4:20:a1:91:bb: 42:ee:b4:3a:d2:63:1a:4b:10:44:a0:6c:ac:c0:60: 2b:36:41:2e:4f:4d:ac:81:51:9d:c8:92:a4:b8:5c: 6b:a9:8d:b0:a1:ca:18:8d:1d:44:fd:f4:ba:e9:93: 67:a9:d9:42:49:34:4b:0a:0f:29:f5:f0:0f:d4:7f: 4f:26:72:d8:5e:2d:4b:e4:87:de:23:18:22:58:f3: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:15:C1:BE:A6:F2:0A:00:50:30:20:8D:44:53:CF:F2:E7:AC:24 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:63:9d:28:1d:9e:b6:e1:78:38:50:05:d0:ee:d0:7f:c8:f8: b5:e2:26:c3:56:22:57:98:6b:71:47:9a:67:d1:4d:05:70:2c: 29:1a:c0:e4:d9:fc:96:b6:44:15:9a:a7:a8:c7:88:83:fe:ac: 33:80:6e:aa:21:84:8d:04:2a:c5:a2:fd:b1:26:47:e3:8b:ea: 2a:c6:01:b9:69:ac:6b:d6:a2:44:74:71:9e:87:05:0a:34:7c: f2:b6:14:9e:b7:b4:ac:13:7e:60:30:c6:4a:2e:06:f7:9d:b7: fb:60:2a:93:0c:44:2c:d9:7f:4c:d2:f0:62:8a:55:1a:0e:64: c7:02:bf:f5:d9:a9:b8:5f:45:74:4d:00:4c:4e:d3:31:c9:73: 37:db:9a:d6:3c:b5:4f:13:05:e1:60:24:8d:36:22:77:2c:22: 42:e2:5b:38:be:51:a0:05:00:7e:86:bf:59:51:9d:aa:1a:8e: ca:d9:a0:67:8d:e2:3e:32:54:08:89:3e:5a:a8:bf:26:eb:07: 91:89:c8:2c:17:74:53:bf:a5:c4:ca:0c:08:3f:b6:e2:d4:28: 20:a1:a5:22:6b:3f:3e:98:b6:ac:1f:86:1a:71:8f:d2:2c:f6: 81:8c:01:d1:1b:65:ef:cd:30:7a:ac:86:51:35:13:af:2c:1e: 52:44:5a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUwNjE1MDIxMzM4WhcNMjUwNjIyMDIxMzM4WjAYMRYwFAYD VQQDEw02ODRlMmM1Mi0xZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pZSiUVTBsscGt1ZSdrzE+H05UEJfK8s044sU2WvPrrfa5WV20BHvwWXnjQL 0gzLEKQuwdsdzwJWJ8+p1GRlxpcJACbMA8izAggmsuuUhHS2ftwk2OjUdVA4qUMa DCMhh0f60ZmdPDi5c76V2wg65FbyhhUXCkl+XQTdV0VRyqyr7HWJrb+ePMNSkGvD M2eYbfFH+5UZ48eEP9pUCQSnN94hX14JMwfBWL3yygB2xCChkbtC7rQ60mMaSxBE oGyswGArNkEuT02sgVGdyJKkuFxrqY2wocoYjR1E/fS66ZNnqdlCSTRLCg8p9fAP 1H9PJnLYXi1L5IfeIxgiWPOJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzNFcG+ pvIKAFAwII1EU8/y56wkMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMY50oHZ624Xg4UAXQ7tB/yPi14ibDViJXmGtxR5pn0U0FcCwpGsDk 2fyWtkQVmqeox4iD/qwzgG6qIYSNBCrFov2xJkfji+oqxgG5aaxr1qJEdHGehwUK NHzythSet7SsE35gMMZKLgb3nbf7YCqTDEQs2X9M0vBiilUaDmTHAr/12am4X0V0 TQBMTtMxyXM325rWPLVPEwXhYCSNNiJ3LCJC4ls4vlGgBQB+hr9ZUZ2qGo7K2aBn jeI+MlQIiT5aqL8m6weRicgsF3RTv6XEygwIP7bi1CggoaUiaz8+mLasH4YacY/S LPaBjAHRG2XvzTB6rIZRNROvLB5SRFob -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:22 2025 by rpki-client