$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: e8YWKXZ8w4MIbrBGBioGyPK/I02DDIEzug8b1dWyevg= Subject key identifier: 93:FB:8D:DA:18:AD:FF:6F:31:D1:1D:6E:8A:75:5A:CC:7E:58:2E:70 Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 087F Signing time: Sat 14 Jun 2025 20:25:28 +0000 Manifest this update: Sat 14 Jun 2025 20:25:28 +0000 Manifest next update: Sat 21 Jun 2025 20:25:28 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: Z4rwFRid17UVSSL5k2TtN5hWP2IjthbqIqHgbAz+O/Y=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: 2JmA3PkYqpUMmOVyVV5dhFWFglZf8xMS4jIUqW1KOUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Jun 14 20:25:28 2025 GMT Not After : Jun 21 20:25:28 2025 GMT Subject: CN=684ddab8-e7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:4a:01:19:08:9b:c8:8a:a3:86:4d:af:19: 08:16:4c:88:07:20:04:82:88:ef:f7:63:c7:32:61: 2e:cf:be:79:9e:d1:90:70:01:f6:a9:43:0c:ad:0b: d8:f3:73:f8:c8:da:7c:b4:56:9b:61:14:91:fb:d3: 22:14:c4:e1:8a:31:ec:1b:ac:24:c8:7d:47:c2:a0: e3:42:3b:85:d5:e1:f9:16:72:c3:2e:1c:ac:54:ac: b3:fc:19:bf:52:48:df:b8:9e:7d:b5:8a:a7:33:1a: c4:64:79:e2:70:68:04:9c:9d:45:80:4d:50:8a:ed: 93:76:cf:c3:c9:65:47:6d:7a:6d:e5:d9:8b:94:1b: 75:a1:51:ab:4e:3f:39:a8:12:51:fa:55:d7:dc:79: ef:33:c8:93:d0:6e:3f:78:c0:e7:c6:d9:98:c9:f4: 07:e0:d1:78:e7:8e:a3:1f:48:25:64:80:9f:87:36: 60:3a:fe:a0:39:73:76:38:86:83:a1:74:52:a1:b4: 8f:5a:18:2c:0e:39:cc:ca:3f:9d:14:65:86:8e:71: 8c:ca:17:8a:9f:e0:2a:49:e2:e9:f3:e5:c2:78:0f: 4a:5d:0a:d2:80:c0:8d:07:30:27:5b:8e:3f:ab:94: 8c:15:d7:22:3f:1b:36:13:26:9c:44:f8:8f:c3:96: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FB:8D:DA:18:AD:FF:6F:31:D1:1D:6E:8A:75:5A:CC:7E:58:2E:70 X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:07:d4:c2:01:e8:88:c8:69:74:6d:01:6d:96:30:2a:6b:d7: 15:e6:6f:4e:41:cb:6f:d4:69:8c:d8:15:38:3b:c0:66:b0:a5: a8:a7:0c:40:dc:3a:c0:81:d5:9d:0d:05:1b:f8:17:76:46:b5: 75:75:70:bb:fb:cc:70:f1:b4:60:cd:84:d2:bc:a3:5d:00:3d: 85:cb:f6:5d:1e:42:a1:2f:c7:f0:dc:0d:d3:b8:33:ad:ea:79: d5:8f:65:5f:9a:2b:d4:7f:f9:d5:01:1c:a4:3e:6d:65:42:25: da:18:b6:c0:76:4e:00:01:81:13:f7:46:44:07:99:45:d7:8a: bc:9b:a1:95:1b:bd:82:7a:3b:dc:a3:68:be:e5:aa:87:9c:f8: 3f:5d:a4:c6:f7:38:ae:bb:7a:eb:a9:a6:7e:e7:96:95:bd:ba: d7:9c:f7:2b:0d:b5:ce:90:09:67:f4:01:b4:5b:53:eb:c2:3b: df:a6:35:af:ab:cc:1c:9c:b8:f4:09:69:80:a3:09:8e:3a:f5: 7d:27:3d:6b:d4:fc:8a:15:6b:e7:eb:c7:82:96:2f:d8:36:dc: 09:03:49:d9:6f:3b:74:a3:65:f5:00:6d:6d:d7:76:82:52:e2: 9d:7c:27:e6:6a:f4:8f:07:ce:cb:da:ff:a9:0f:59:54:ce:28: ad:be:ed:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjUwNjE0MjAyNTI4WhcNMjUwNjIxMjAyNTI4WjAYMRYwFAYD VQQDEw02ODRkZGFiOC1lN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApp9KARkIm8iKo4ZNrxkIFkyIByAEgojv92PHMmEuz755ntGQcAH2qUMMrQvY 83P4yNp8tFabYRSR+9MiFMThijHsG6wkyH1HwqDjQjuF1eH5FnLDLhysVKyz/Bm/ UkjfuJ59tYqnMxrEZHnicGgEnJ1FgE1Qiu2Tds/DyWVHbXpt5dmLlBt1oVGrTj85 qBJR+lXX3HnvM8iT0G4/eMDnxtmYyfQH4NF4546jH0glZICfhzZgOv6gOXN2OIaD oXRSobSPWhgsDjnMyj+dFGWGjnGMyheKn+AqSeLp8+XCeA9KXQrSgMCNBzAnW44/ q5SMFdciPxs2EyacRPiPw5Y9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJP7jdoY rf9vMdEdbop1Wsx+WC5wMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEB9TCAeiIyGl0bQFtljAqa9cV5m9OQctv1GmM2BU4O8BmsKWopwxA 3DrAgdWdDQUb+Bd2RrV1dXC7+8xw8bRgzYTSvKNdAD2Fy/ZdHkKhL8fw3A3TuDOt 6nnVj2VfmivUf/nVARykPm1lQiXaGLbAdk4AAYET90ZEB5lF14q8m6GVG72Cejvc o2i+5aqHnPg/XaTG9ziuu3rrqaZ+55aVvbrXnPcrDbXOkAln9AG0W1PrwjvfpjWv q8wcnLj0CWmAowmOOvV9Jz1r1PyKFWvn68eCli/YNtwJA0nZbzt0o2X1AG1t13aC UuKdfCfmavSPB87L2v+pD1lUziitvu0I -----END CERTIFICATE-----Generated at Sun Jun 15 20:51:13 2025 by rpki-client