$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json) Hash identifier: I1Rd+icG8moI/QeKM67co0vXgF0DhZcPV27ksaMPmU8= Subject key identifier: 1B:CD:85:83:40:8C:E6:67:65:5B:E7:D8:9A:A7:41:6B:3D:90:6C:80 Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft Manifest number: 94 Signing time: Tue 17 Jun 2025 05:20:52 +0000 Manifest this update: Tue 17 Jun 2025 05:20:52 +0000 Manifest next update: Tue 24 Jun 2025 05:20:52 +0000 Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: xejGRh3N4l8SaBMG+nTACupyBLwP1poDpd6CGmKNwzU=) 2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: WL6knuhT+IT7g3hW2IRpH1KnEWqyPmGpIe/IXLQK6so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Validity Not Before: Jun 17 05:20:52 2025 GMT Not After : Jun 24 05:20:52 2025 GMT Subject: CN=6850fb34-7789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:bf:0c:54:ad:33:a6:f2:d7:ac:5c:b9:90: c2:f0:9d:58:d4:82:2d:c9:aa:ea:ba:45:4c:d8:65: 27:ce:9e:39:89:96:c3:61:13:ea:e2:7a:ce:cf:25: 73:55:c6:d3:13:1d:aa:7b:12:2c:29:3d:a7:e4:2a: 2e:bf:6e:9a:41:3b:25:43:5b:4d:c0:82:73:07:4e: 59:b7:a8:4a:50:dd:a2:24:04:05:a6:a2:89:2f:42: e7:d3:77:b8:9e:8b:76:8c:fa:81:5a:a4:c6:b3:68: 6a:26:7c:8f:32:95:a9:b4:25:c2:9c:c5:b3:bb:ab: d6:54:90:c2:5e:92:a7:ee:d7:af:fc:97:77:dc:61: d1:3b:cf:fb:9f:73:9a:24:2c:46:28:80:51:34:8a: d4:63:41:90:b2:c0:46:c8:36:2b:0e:30:fb:5c:9a: 40:33:40:fa:61:78:af:2d:5f:2b:cb:36:f8:01:83: 70:a0:7e:ca:a6:18:9f:fc:f7:0f:d8:36:0e:94:6c: 1a:71:27:4f:6c:2f:ab:b7:20:ac:2d:f6:68:e5:37: 97:a2:a4:cd:87:87:27:01:6f:66:d1:f3:db:97:e5: 15:e0:63:6b:e8:5b:52:91:26:2f:2d:30:dd:13:50: f3:3f:25:bb:e7:77:77:26:93:8c:bd:31:bc:9e:47: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:85:83:40:8C:E6:67:65:5B:E7:D8:9A:A7:41:6B:3D:90:6C:80 X509v3 Authority Key Identifier: keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:28:0a:ed:b8:22:78:95:45:6d:4a:41:06:b5:59:ab:e1:ec: c1:16:e3:98:45:92:12:11:d5:91:58:29:49:40:c7:56:16:8b: 86:29:f3:44:24:25:fd:22:fb:53:bb:10:ec:8c:b1:87:a0:89: 25:b3:f0:c5:3e:e3:b7:11:98:71:e5:7f:cf:52:0f:86:3d:5c: 98:43:ce:05:e9:b6:56:cc:7a:f0:4e:b0:d4:a4:73:eb:f9:71: 9f:17:2f:ff:c6:3b:15:30:ac:d8:10:4d:8b:af:1b:95:29:1f: 8a:54:05:09:4e:44:73:0c:24:82:05:f9:47:2a:9f:fb:d1:76: b2:50:93:6b:1e:f1:8d:3f:01:a2:54:43:15:cf:30:92:38:40: 7d:51:53:21:b5:39:2a:aa:9d:77:b2:58:79:63:ae:a9:30:4a: 58:7f:08:d1:21:f2:d8:0e:6b:7c:29:10:09:bc:d7:3c:a6:d4: fd:2a:1e:88:d3:25:ea:0f:43:f4:90:20:98:d7:fc:f6:ed:9f: 6e:d7:41:47:4c:80:24:0e:67:27:22:ed:be:04:a8:c3:7e:f8: 99:8d:1a:42:a9:d4:d9:58:e7:43:1f:b6:43:9b:68:08:fb:17: a1:51:a5:1d:da:0e:ff:2f:d0:a8:3a:9c:93:be:d5:f7:09:4b: 29:30:1d:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDQkExMTAvBgNVBAUTKDhEOEE4MEVDNzIwQUU3RUQ1M0ZEMjEwM0U4RTY5Qzg1 NTVBRDBGODYwHhcNMjUwNjE3MDUyMDUyWhcNMjUwNjI0MDUyMDUyWjAYMRYwFAYD VQQDEw02ODUwZmIzNC03Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLW/DFStM6by16xcuZDC8J1Y1IItyarqukVM2GUnzp45iZbDYRPq4nrOzyVz VcbTEx2qexIsKT2n5Couv26aQTslQ1tNwIJzB05Zt6hKUN2iJAQFpqKJL0Ln03e4 not2jPqBWqTGs2hqJnyPMpWptCXCnMWzu6vWVJDCXpKn7tev/Jd33GHRO8/7n3Oa JCxGKIBRNIrUY0GQssBGyDYrDjD7XJpAM0D6YXivLV8ryzb4AYNwoH7Kphif/PcP 2DYOlGwacSdPbC+rtyCsLfZo5TeXoqTNh4cnAW9m0fPbl+UV4GNr6FtSkSYvLTDd E1DzPyW753d3JpOMvTG8nkex3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvNhYNA jOZnZVvn2JqnQWs9kGyAMB8GA1UdIwQYMBaAFI2KgOxyCuftU/0hA+jmnIVVrQ+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUNCQS81ODNFMkI5QTZC NjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUtMVRfU0VENk9hY2hWV3RE NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pZcUE3SElLNS0xVF9TRUQ2T2FjaFZXdEQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUNCQS81ODNFMkI5QTZCNjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUt MVRfU0VENk9hY2hWV3RENFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYKArtuCJ4lUVtSkEGtVmr4ezBFuOYRZISEdWRWClJQMdWFouGKfNE JCX9IvtTuxDsjLGHoIkls/DFPuO3EZhx5X/PUg+GPVyYQ84F6bZWzHrwTrDUpHPr +XGfFy//xjsVMKzYEE2LrxuVKR+KVAUJTkRzDCSCBflHKp/70XayUJNrHvGNPwGi VEMVzzCSOEB9UVMhtTkqqp13slh5Y66pMEpYfwjRIfLYDmt8KRAJvNc8ptT9Kh6I 0yXqD0P0kCCY1/z27Z9u10FHTIAkDmcnIu2+BKjDfviZjRpCqdTZWOdDH7ZDm2gI +xehUaUd2g7/L9CoOpyTvtX3CUspMB2U -----END CERTIFICATE-----Generated at Tue Jun 17 16:55:21 2025 by rpki-client