$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: 3BYnf+L2DB08tOGxSSMz+6aJYG1x2U5ZukKp0lk1Vbo= Subject key identifier: 99:78:84:B7:8A:76:23:14:13:B3:49:00:E0:CF:11:C4:96:DF:6C:74 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 01C8 Signing time: Fri 13 Jun 2025 02:01:39 +0000 Manifest this update: Fri 13 Jun 2025 02:01:39 +0000 Manifest next update: Fri 20 Jun 2025 02:01:39 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: 4CBFd9IyE4dXPiomwp1MdKNu1stjLxVpfPO1tVBmq9I=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Jun 13 02:01:39 2025 GMT Not After : Jun 20 02:01:39 2025 GMT Subject: CN=684b8683-6a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:09:24:e6:e4:f8:fe:3e:f9:dd:01:08:29:9e: be:09:e6:f8:8e:12:44:2e:27:27:64:1c:32:ed:ad: cc:fb:c9:36:00:fa:9b:53:7d:4b:72:88:e5:66:6a: 0e:15:a6:45:02:ed:4f:eb:f4:2f:af:24:d5:8d:27: 20:93:5b:9f:e0:da:b0:fc:cc:2f:e9:e5:70:8f:c7: 4a:0e:a9:d1:68:b4:3c:35:36:73:7c:83:a1:3d:1f: 0b:34:54:91:2e:b2:f8:33:9b:0a:38:79:e1:4b:7f: df:a8:e4:ef:99:64:45:f3:d1:d4:13:7b:81:b3:2a: 53:57:97:6b:14:48:a9:b3:f3:1e:ae:00:07:43:ae: 91:00:d7:1b:8d:81:54:dc:49:19:a7:d9:35:30:4a: 43:ed:65:2e:a6:29:b5:c0:7a:8a:aa:23:d9:66:53: 21:0e:f5:31:64:b3:b6:b4:c0:af:74:53:fb:ee:61: f7:39:39:c8:ea:a8:9f:9e:1e:76:0f:be:cd:cb:47: 1b:db:1a:2b:f5:88:8d:1f:c0:03:db:06:0c:fc:12: cd:78:99:b4:0d:5c:14:8e:00:66:8a:53:1f:b1:3c: 3c:34:d9:3b:2f:76:29:8a:b0:66:06:a7:e2:81:63: 70:13:09:3c:7d:b6:14:c1:53:e3:e8:b1:11:57:86: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:78:84:B7:8A:76:23:14:13:B3:49:00:E0:CF:11:C4:96:DF:6C:74 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0c:64:1c:56:70:6c:16:15:ad:57:85:46:a0:31:2a:f2:40: 0c:8a:0a:59:4e:6d:5a:f0:1b:68:a7:03:a0:ae:24:62:b1:d7: d4:6b:2e:bc:bb:3b:7c:7d:99:69:bc:52:c7:bc:8b:15:4c:54: 65:1f:ff:6a:8a:d2:63:ff:88:be:1e:af:ae:ad:16:c7:2b:7d: b4:e4:a5:ce:d3:14:be:b9:b9:19:af:45:cd:7d:6c:09:ee:5d: 54:82:7d:c0:f0:cf:83:c1:91:89:9f:04:8f:fd:23:32:a1:d3: 4c:3b:73:d5:83:fd:ca:c3:56:3e:ff:bb:a0:83:db:f1:cf:52: 06:64:93:c0:c4:e1:59:c3:4a:ac:3e:4a:4d:21:5f:c1:d3:30: 22:8c:85:dd:af:15:75:91:6e:79:e1:ef:0d:ac:b5:d7:fe:45: 32:a6:78:69:4e:22:3c:c4:4f:a0:0e:40:c7:c7:9f:bd:26:fd: c1:49:1a:a3:42:77:80:6d:71:c8:e8:fd:93:2d:84:1a:ac:7d: 06:da:00:76:bf:c3:2e:6f:ae:2f:19:49:cf:d6:f9:5c:c2:31: b5:14:97:f7:2d:2a:95:58:e3:bf:2b:0d:1b:95:b2:a1:05:69: ea:6e:67:dd:83:06:2f:0a:18:05:73:84:e2:0e:8d:a3:66:e6: 34:28:20:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUwNjEzMDIwMTM5WhcNMjUwNjIwMDIwMTM5WjAYMRYwFAYD VQQDEw02ODRiODY4My02YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gkk5uT4/j753QEIKZ6+Ceb4jhJELicnZBwy7a3M+8k2APqbU31LcojlZmoO FaZFAu1P6/QvryTVjScgk1uf4Nqw/Mwv6eVwj8dKDqnRaLQ8NTZzfIOhPR8LNFSR LrL4M5sKOHnhS3/fqOTvmWRF89HUE3uBsypTV5drFEips/MergAHQ66RANcbjYFU 3EkZp9k1MEpD7WUupim1wHqKqiPZZlMhDvUxZLO2tMCvdFP77mH3OTnI6qifnh52 D77Ny0cb2xor9YiNH8AD2wYM/BLNeJm0DVwUjgBmilMfsTw8NNk7L3YpirBmBqfi gWNwEwk8fbYUwVPj6LERV4bGUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl4hLeK diMUE7NJAODPEcSW32x0MB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGDGQcVnBsFhWtV4VGoDEq8kAMigpZTm1a8BtopwOgriRisdfUay68 uzt8fZlpvFLHvIsVTFRlH/9qitJj/4i+Hq+urRbHK3205KXO0xS+ubkZr0XNfWwJ 7l1Ugn3A8M+DwZGJnwSP/SMyodNMO3PVg/3Kw1Y+/7ugg9vxz1IGZJPAxOFZw0qs PkpNIV/B0zAijIXdrxV1kW554e8NrLXX/kUypnhpTiI8xE+gDkDHx5+9Jv3BSRqj QneAbXHI6P2TLYQarH0G2gB2v8Mub64vGUnP1vlcwjG1FJf3LSqVWOO/Kw0blbKh BWnqbmfdgwYvChgFc4TiDo2jZuY0KCBJ -----END CERTIFICATE-----Generated at Sat Jun 14 18:50:02 2025 by rpki-client