$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: 3/e4qQqZicg5qeSkgVyJhQlIcBYXcRfwv56tN+/lpSk= Subject key identifier: 37:92:8A:68:77:77:AD:9D:D3:48:8A:C0:69:98:CA:D9:45:B8:18:DA Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0AA0 Signing time: Sat 14 Jun 2025 19:23:10 +0000 Manifest this update: Sat 14 Jun 2025 19:23:10 +0000 Manifest next update: Sat 21 Jun 2025 19:23:10 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: Jp6i9Y7DWNeyMHcv4/h6PzjvXpPpmDp8BUgjthD+mnM=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Jun 14 19:23:10 2025 GMT Not After : Jun 21 19:23:10 2025 GMT Subject: CN=684dcc1e-5ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:45:d1:a4:cb:ef:91:0b:32:37:90:1e:9b:b0: a8:d9:47:33:aa:d6:cd:74:31:ec:c3:0e:30:85:20: ed:1d:1e:35:3d:5a:e5:bb:39:19:98:48:c1:ab:f8: 66:00:8b:0b:8d:06:d0:63:74:63:e9:f3:c4:d0:c9: 26:c0:eb:e6:72:62:4a:2f:6b:86:97:6d:20:47:67: 0c:72:1a:a3:4a:c9:18:62:da:28:4b:2d:ab:06:9b: c3:73:64:a4:4d:69:f0:ce:7d:41:e6:10:aa:44:8e: 88:66:5f:16:8e:b1:c2:43:01:85:9e:f0:58:d4:fb: 90:44:d7:30:93:69:0e:ac:62:7f:11:49:e5:b2:f6: 2d:3f:dd:38:16:b9:0f:c4:dc:a9:26:74:26:be:04: 75:19:11:45:ec:37:4f:42:68:8d:e9:ff:d1:bd:e1: b1:66:7d:14:af:0c:c7:a0:5a:24:a8:44:ce:a5:c1: da:6f:51:b2:05:72:6f:ee:e6:f8:2d:a5:26:f2:e8: fe:c5:a9:4f:76:a4:b7:08:1f:b8:13:f1:ae:ea:5d: 04:33:5a:3d:b8:bd:7c:b4:42:11:29:5d:f5:8a:9d: 5b:25:44:61:67:9b:a9:df:79:73:36:b2:99:96:1a: c8:09:65:30:e0:e1:b0:b7:d6:9e:17:af:49:a0:4a: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:92:8A:68:77:77:AD:9D:D3:48:8A:C0:69:98:CA:D9:45:B8:18:DA X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d6:03:66:36:a2:e7:70:ff:0b:84:c1:b9:22:d4:4a:de:ac: 10:77:24:59:09:c5:cd:ca:f9:da:8f:c0:9d:e5:55:fc:50:00: b0:96:44:96:21:5c:43:33:3b:f4:dc:6e:a1:6d:4c:8b:19:64: 10:22:55:0a:81:97:97:6a:ad:f6:ec:55:ca:1e:6b:e6:da:f0: a9:50:19:ad:dd:2d:94:a9:1e:df:b3:37:cd:a2:d3:f5:27:67: fb:0c:c0:98:b5:1c:05:99:e7:d2:7c:2f:31:b1:a7:3b:83:eb: 2a:7a:c1:8c:a0:3f:2f:e1:9b:ab:0c:96:3d:c4:a2:d8:9e:b7: 5e:25:09:96:3e:6c:0c:7b:25:64:47:aa:49:8f:24:d6:df:4c: b2:d0:55:d5:7d:74:38:d4:34:23:0e:31:e7:42:63:9c:ad:09: 58:1c:30:f4:ed:4a:8c:ec:39:69:d7:a2:d7:15:9b:72:f8:e4: de:71:63:3a:fd:ca:a2:94:58:d0:a3:7c:c4:d7:fd:78:57:30: 04:2b:25:79:db:79:a1:90:76:65:87:90:1b:db:61:ce:2c:5d: b9:37:21:33:29:f6:dd:ac:a9:71:38:f0:a4:71:6f:53:2c:ff: 66:fd:4f:20:a0:b0:62:e5:8f:0e:27:da:8e:7a:d4:80:d7:c1: 39:f3:32:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUwNjE0MTkyMzEwWhcNMjUwNjIxMTkyMzEwWjAYMRYwFAYD VQQDEw02ODRkY2MxZS01ZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UXRpMvvkQsyN5Aem7Co2UczqtbNdDHsww4whSDtHR41PVrluzkZmEjBq/hm AIsLjQbQY3Rj6fPE0MkmwOvmcmJKL2uGl20gR2cMchqjSskYYtooSy2rBpvDc2Sk TWnwzn1B5hCqRI6IZl8WjrHCQwGFnvBY1PuQRNcwk2kOrGJ/EUnlsvYtP904FrkP xNypJnQmvgR1GRFF7DdPQmiN6f/RveGxZn0UrwzHoFokqETOpcHab1GyBXJv7ub4 LaUm8uj+xalPdqS3CB+4E/Gu6l0EM1o9uL18tEIRKV31ip1bJURhZ5up33lzNrKZ lhrICWUw4OGwt9aeF69JoEpZ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeSimh3 d62d00iKwGmYytlFuBjaMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc1gNmNqLncP8LhMG5ItRK3qwQdyRZCcXNyvnaj8Cd5VX8UACwlkSW IVxDMzv03G6hbUyLGWQQIlUKgZeXaq327FXKHmvm2vCpUBmt3S2UqR7fszfNotP1 J2f7DMCYtRwFmefSfC8xsac7g+sqesGMoD8v4ZurDJY9xKLYnrdeJQmWPmwMeyVk R6pJjyTW30yy0FXVfXQ41DQjDjHnQmOcrQlYHDD07UqM7Dlp16LXFZty+OTecWM6 /cqilFjQo3zE1/14VzAEKyV523mhkHZlh5Ab22HOLF25NyEzKfbdrKlxOPCkcW9T LP9m/U8goLBi5Y8OJ9qOetSA18E58zII -----END CERTIFICATE-----Generated at Mon Jun 16 17:08:37 2025 by rpki-client