$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: JExKySBhyY+tbiwfHf0F0miHjCmWns5vxtcUb1Vj3PE= Subject key identifier: 35:72:40:E6:99:77:B0:9F:89:15:C1:9F:D8:67:86:1D:8C:7E:62:27 Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 06F5 Signing time: Sat 14 Jun 2025 21:42:44 +0000 Manifest this update: Sat 14 Jun 2025 21:42:44 +0000 Manifest next update: Sat 21 Jun 2025 21:42:44 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: Oba6SUaLet/Av7dhnQpS+dPTPlmDS0/mR7vrSiT93+o=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: Jun 14 21:42:44 2025 GMT Not After : Jun 21 21:42:44 2025 GMT Subject: CN=684decd4-21ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:b3:a6:97:fc:6b:4a:c7:11:0a:d9:4e:84: 13:67:1f:57:c5:30:b4:44:d6:55:68:fa:d4:60:e2: fd:02:d1:ef:f7:9b:e3:2b:a8:6a:5d:5f:45:0a:be: 2a:c5:20:14:92:4a:05:f5:4a:3c:81:a3:88:35:f1: a0:cc:48:91:66:77:63:7c:5e:11:ee:df:41:da:b1: f1:5e:1b:a4:48:84:0a:c0:e1:cc:82:69:8e:99:c2: f5:01:94:60:46:e7:e1:7a:c7:2c:29:b7:a6:a4:1d: 06:1e:78:9b:48:f0:16:51:bf:e5:de:e8:12:e5:08: d2:79:ad:0e:20:c2:f1:20:93:e0:d0:77:5b:03:a3: 0e:e4:4a:10:d8:5d:05:c8:a6:90:9c:61:1d:c5:50: d0:74:ac:72:8b:e7:86:bc:87:d0:03:d8:d5:9d:cd: d5:bf:2a:b4:43:e5:dd:a4:13:16:cd:d0:5c:24:7a: 45:2b:32:63:80:0b:5e:d3:57:b9:29:5e:34:e0:8d: 6b:3a:fb:64:0d:39:77:c9:ec:c2:0e:08:8d:cd:ff: 07:3f:59:21:6d:15:7b:95:d7:c8:65:bc:cb:ff:7b: a4:4e:02:e1:8a:ef:5e:f7:63:83:49:94:41:21:00: 55:a4:e3:d3:8c:64:76:75:3c:40:3c:9d:dc:c4:b9: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:72:40:E6:99:77:B0:9F:89:15:C1:9F:D8:67:86:1D:8C:7E:62:27 X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:18:f2:26:e5:e4:02:4e:96:04:13:52:92:70:b9:24:1a:a0: 07:b6:81:f8:e9:1e:30:2a:52:07:c4:2a:b2:00:a3:89:b0:c8: 12:19:6c:68:36:5d:4f:92:aa:25:70:2f:fd:8a:c7:71:85:9d: a5:55:a1:7b:f4:df:6a:83:8b:3d:9a:2d:3a:64:f5:a3:fa:4c: 3f:02:6a:04:38:ea:01:c5:9f:7e:7d:80:a9:b3:6b:a5:c6:30: dd:ec:5d:3e:2b:9f:c1:b7:d5:66:d4:b5:c9:68:96:b5:f0:11: fc:58:2e:30:f4:ab:79:a4:69:20:1d:84:62:82:b7:09:f5:13: f8:00:f8:2a:aa:6c:f9:d2:94:46:18:96:93:3e:e1:02:59:fd: 20:7a:f2:c9:56:b9:c5:58:f0:d8:4e:b5:f0:6b:bd:d0:a4:93: a8:4e:d9:2e:f4:0e:b6:c5:46:95:6c:c8:97:b1:b7:35:39:3f: e4:bc:e5:73:1b:f5:86:88:6a:5a:bf:c6:28:97:74:8a:f2:6e: ea:f8:27:cf:15:a7:c3:9e:25:79:90:27:9a:42:d9:d9:46:21: 07:c1:fa:19:7d:f4:f6:e5:a1:5c:c7:e2:d0:c4:4a:69:df:d3: db:84:42:4c:ad:43:94:e7:ab:a9:32:73:26:b1:82:19:d8:02: 84:38:92:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUwNjE0MjE0MjQ0WhcNMjUwNjIxMjE0MjQ0WjAYMRYwFAYD VQQDEw02ODRkZWNkNC0yMWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup+zppf8a0rHEQrZToQTZx9XxTC0RNZVaPrUYOL9AtHv95vjK6hqXV9FCr4q xSAUkkoF9Uo8gaOINfGgzEiRZndjfF4R7t9B2rHxXhukSIQKwOHMgmmOmcL1AZRg RufhescsKbempB0GHnibSPAWUb/l3ugS5QjSea0OIMLxIJPg0HdbA6MO5EoQ2F0F yKaQnGEdxVDQdKxyi+eGvIfQA9jVnc3Vvyq0Q+XdpBMWzdBcJHpFKzJjgAte01e5 KV404I1rOvtkDTl3yezCDgiNzf8HP1khbRV7ldfIZbzL/3ukTgLhiu9e92ODSZRB IQBVpOPTjGR2dTxAPJ3cxLkVyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVyQOaZ d7CfiRXBn9hnhh2MfmInMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaGPIm5eQCTpYEE1KScLkkGqAHtoH46R4wKlIHxCqyAKOJsMgSGWxo Nl1PkqolcC/9isdxhZ2lVaF79N9qg4s9mi06ZPWj+kw/AmoEOOoBxZ9+fYCps2ul xjDd7F0+K5/Bt9Vm1LXJaJa18BH8WC4w9Kt5pGkgHYRigrcJ9RP4APgqqmz50pRG GJaTPuECWf0gevLJVrnFWPDYTrXwa73QpJOoTtku9A62xUaVbMiXsbc1OT/kvOVz G/WGiGpav8Yol3SK8m7q+CfPFafDniV5kCeaQtnZRiEHwfoZffT25aFcx+LQxEpp 39PbhEJMrUOU56upMnMmsYIZ2AKEOJJ3 -----END CERTIFICATE-----Generated at Sun Jun 15 10:14:47 2025 by rpki-client