$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft File: Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json) Hash identifier: N4zbiFZQkOQfgu/X3jC0hfrTcmc9MO6FgPfTKrbe0Us= Subject key identifier: 86:54:DE:20:51:2D:C1:10:B5:5A:D1:23:5B:A4:5D:B1:E9:6B:05:49 Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft Manifest number: 066D Signing time: Sat 14 Jun 2025 22:09:08 +0000 Manifest this update: Sat 14 Jun 2025 22:09:07 +0000 Manifest next update: Sat 21 Jun 2025 22:09:07 +0000 Files and hashes: 1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: W7VgMQI30reD0A5apwdOn38bZNMLNulNmhKtk70K4O0=) 2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aM+7gCUGE+qk8+F9OXTcC/AfNjJw372IOJzcraxEznU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325, serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Validity Not Before: Jun 14 22:09:07 2025 GMT Not After : Jun 21 22:09:07 2025 GMT Subject: CN=684df303-ce38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ff:c1:65:ce:3d:a6:48:16:a4:bf:14:fb:06: a0:0d:d7:e9:86:8c:c6:fa:7d:f9:6d:1f:ed:22:b8: 84:04:ac:5b:b9:bd:2f:05:4f:86:72:0f:6c:29:ce: 36:a5:96:8b:22:62:cd:74:65:ad:c6:d7:b0:d3:93: b1:9e:f5:52:cf:37:57:36:67:f3:6f:66:0d:1c:ee: 48:e2:1e:b3:0e:30:37:99:18:1c:34:5c:21:af:00: 81:db:1e:d8:cc:25:87:37:82:f6:68:36:ae:82:88: b1:97:96:ba:06:95:e8:8f:ef:3e:2c:87:7d:75:01: 59:7e:50:32:57:1c:1c:2b:ab:d7:31:b0:d9:10:67: ce:9b:ca:80:0d:c4:a2:0c:4f:40:00:da:b5:b4:61: cc:f0:bd:05:0b:eb:d3:ed:83:36:99:21:69:24:e7: bb:85:08:4e:4e:1a:cd:5c:28:d7:6a:e9:96:23:f0: b2:5f:51:8a:e2:07:04:2b:d9:b5:ec:ae:cf:59:9d: 3f:b2:88:2a:7c:5a:fd:91:11:1d:4f:5e:9a:4e:48: 70:f9:54:dd:4b:fb:d2:0b:e9:a8:df:b1:26:69:b8: 43:6a:d5:b0:71:44:a1:5a:4f:51:d2:b1:1a:0e:b6: e7:e8:d6:5c:da:8f:36:1c:70:de:14:99:22:88:13: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:54:DE:20:51:2D:C1:10:B5:5A:D1:23:5B:A4:5D:B1:E9:6B:05:49 X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cc:ef:24:b9:bd:94:5a:b0:18:62:56:b5:de:df:a4:61:f7: d4:37:1a:4d:d4:5a:cc:56:bc:46:f6:1b:19:fb:15:66:c5:4d: ce:2d:eb:ef:f0:58:05:27:91:d8:fc:39:63:89:26:bd:e5:fa: 5f:2d:74:af:44:95:70:13:da:6d:6b:f9:13:cd:46:1d:4b:19: be:53:5e:0d:7b:b1:ef:86:f3:78:ab:89:8c:23:80:31:20:dc: 21:2c:1a:62:00:b1:f5:dc:9d:d6:64:cd:b3:d4:39:92:83:8a: 29:e1:fb:09:33:28:d1:f0:4e:5e:95:cc:fa:dd:ce:8b:45:d6: b6:c4:17:d4:67:a2:67:4d:0c:36:04:e7:d0:f2:12:56:62:54: fa:9d:1a:52:2e:e0:e0:6e:cb:5a:4a:5b:ce:fe:ae:b9:c2:63: ff:3a:ae:d0:4f:b5:1b:c3:a0:c0:4d:ef:a2:93:65:5c:65:3e: 7f:ab:47:86:85:f8:23:cc:fa:99:2d:56:06:3d:a0:dc:a9:9d: 0f:af:75:65:2e:69:cc:5f:39:49:3b:45:dd:f3:eb:b0:b5:e4: 30:f1:38:af:de:fc:8a:90:82:fc:81:59:c3:2f:f7:d3:cd:bb: b2:00:81:5d:2b:b5:1d:16:7e:77:d4:31:c6:0c:a9:af:e3:25: fa:8e:09:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjUwNjE0MjIwOTA3WhcNMjUwNjIxMjIwOTA3WjAYMRYwFAYD VQQDEw02ODRkZjMwMy1jZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3v/BZc49pkgWpL8U+wagDdfphozG+n35bR/tIriEBKxbub0vBU+Gcg9sKc42 pZaLImLNdGWtxtew05OxnvVSzzdXNmfzb2YNHO5I4h6zDjA3mRgcNFwhrwCB2x7Y zCWHN4L2aDaugoixl5a6BpXoj+8+LId9dQFZflAyVxwcK6vXMbDZEGfOm8qADcSi DE9AANq1tGHM8L0FC+vT7YM2mSFpJOe7hQhOThrNXCjXaumWI/CyX1GK4gcEK9m1 7K7PWZ0/sogqfFr9kREdT16aTkhw+VTdS/vSC+mo37EmabhDatWwcUShWk9R0rEa Drbn6NZc2o82HHDeFJkiiBPLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZU3iBR LcEQtVrRI1ukXbHpawVJMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrzO8kub2UWrAYYla13t+kYffUNxpN1FrMVrxG9hsZ+xVmxU3OLevv 8FgFJ5HY/DljiSa95fpfLXSvRJVwE9pta/kTzUYdSxm+U14Ne7HvhvN4q4mMI4Ax INwhLBpiALH13J3WZM2z1DmSg4op4fsJMyjR8E5elcz63c6LRda2xBfUZ6JnTQw2 BOfQ8hJWYlT6nRpSLuDgbstaSlvO/q65wmP/Oq7QT7Ubw6DATe+ik2VcZT5/q0eG hfgjzPqZLVYGPaDcqZ0Pr3VlLmnMXzlJO0Xd8+uwteQw8Tiv3vyKkIL8gVnDL/fT zbuyAIFdK7UdFn531DHGDKmv4yX6jgnX -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:39 2025 by rpki-client