$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json) Hash identifier: Yh+eGlsyBm8CVlmmVy57G5mBMPXaLfL3l3s6OPJemJk= Subject key identifier: 63:9C:FE:8E:B0:03:9E:9E:76:F4:32:AC:9E:11:14:0A:76:10:4F:17 Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft Manifest number: 0904 Signing time: Thu 12 Jun 2025 20:06:29 +0000 Manifest this update: Thu 12 Jun 2025 20:06:28 +0000 Manifest next update: Thu 19 Jun 2025 20:06:28 +0000 Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: nC3982H7jU+pMEwWyKn4vHtw7qeqjZ+gwSsCfI383T4=) 2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: UzrBYvhmwM8mdH0ghMSjubq04wNr65MA9rGMTRg3B0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: Jun 12 20:06:28 2025 GMT Not After : Jun 19 20:06:28 2025 GMT Subject: CN=684b3344-7fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:09:ed:66:66:02:60:22:df:fb:1f:f8:29: aa:fb:58:a6:f7:81:72:13:fc:7d:bf:19:10:49:e4: 1a:a1:ee:07:86:12:c7:55:5c:ce:9a:8a:41:c0:b0: 50:45:16:96:75:20:03:73:88:4e:93:a6:be:e9:ff: 57:92:14:6f:27:fa:91:09:cb:8e:12:7d:79:f5:2a: 1d:f5:b4:e4:fe:a7:02:4d:57:ed:65:12:c9:11:12: 83:6b:7c:9c:0b:dd:69:d7:85:50:33:48:24:82:d3: 7a:49:96:f2:04:54:b3:3d:27:0d:56:27:67:c9:4d: 91:95:f4:f8:bf:a5:a2:95:27:4b:93:6b:b7:92:a3: 26:26:84:ed:c9:17:94:73:8c:9b:55:76:9c:06:d7: a9:78:95:f0:dd:5f:8a:a9:3a:55:a4:47:0b:e2:78: 72:10:b3:ea:e3:65:d6:ed:c7:e0:38:02:ed:9e:f2: 47:55:81:38:8a:7b:8a:93:ae:8e:26:1e:bf:96:85: 22:b5:db:ea:25:01:51:77:5f:bc:06:8c:6e:11:d4: 8d:ba:70:f7:4b:3b:f6:db:69:e6:b6:dc:c3:3c:29: 52:af:48:d0:44:9d:dc:8a:e5:45:31:75:3f:7e:4b: 66:63:7a:01:3b:2d:f4:73:c9:bf:63:52:38:91:d5: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9C:FE:8E:B0:03:9E:9E:76:F4:32:AC:9E:11:14:0A:76:10:4F:17 X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:17:9d:19:a8:0f:52:e7:5f:77:1e:6b:8f:8e:8b:44:80:3d: e0:b6:99:aa:e3:37:02:e9:fd:21:18:47:94:24:a3:bc:4b:79: a6:4a:8a:d9:03:07:a6:34:b0:02:d5:f3:f4:68:1d:9b:99:0a: 69:68:70:b5:f6:7f:67:8e:e4:6d:61:84:f9:38:49:02:2e:f1: e0:cc:42:a7:b7:93:b0:0b:13:c8:cd:e1:00:a0:63:d8:e8:78: 95:6f:6e:ae:f3:be:14:d4:98:00:8a:cb:44:a5:92:67:cb:89: c4:07:d8:d6:71:6d:5f:81:7f:1f:78:da:e1:aa:f8:f4:a7:45: af:d1:a5:75:2c:3e:8a:ca:69:de:d1:1e:04:07:6b:b3:70:7a: c7:d3:4d:ef:4d:55:b4:96:13:31:12:81:bf:e4:03:77:f8:a0: 43:8e:41:6e:11:b3:7a:3e:27:08:6f:b7:dd:57:84:cc:17:bc: e2:e9:b4:0b:96:ea:3f:e0:14:9a:5b:b3:23:42:86:05:39:51: 56:af:87:4e:d3:15:e8:01:f8:bb:05:60:a2:5b:cd:dd:37:c9: 8d:84:24:1a:4e:94:4d:35:55:9c:63:47:4e:f0:9c:69:6a:9b: b0:1d:9d:c4:0e:33:56:cd:34:2f:16:ef:b4:54:c5:9f:85:f3: 0a:0b:e5:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjUwNjEyMjAwNjI4WhcNMjUwNjE5MjAwNjI4WjAYMRYwFAYD VQQDEw02ODRiMzM0NC03ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0cJ7WZmAmAi3/sf+Cmq+1im94FyE/x9vxkQSeQaoe4HhhLHVVzOmopBwLBQ RRaWdSADc4hOk6a+6f9XkhRvJ/qRCcuOEn159Sod9bTk/qcCTVftZRLJERKDa3yc C91p14VQM0gkgtN6SZbyBFSzPScNVidnyU2RlfT4v6WilSdLk2u3kqMmJoTtyReU c4ybVXacBtepeJXw3V+KqTpVpEcL4nhyELPq42XW7cfgOALtnvJHVYE4inuKk66O Jh6/loUitdvqJQFRd1+8BoxuEdSNunD3Szv222nmttzDPClSr0jQRJ3ciuVFMXU/ fktmY3oBOy30c8m/Y1I4kdWYfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOc/o6w A56edvQyrJ4RFAp2EE8XMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYxMS84RUEyNDc1QUE5RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4 TV8tOHB3ejM5cXI3QXoxM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXF50ZqA9S5193HmuPjotEgD3gtpmq4zcC6f0hGEeUJKO8S3mmSorZ AwemNLAC1fP0aB2bmQppaHC19n9njuRtYYT5OEkCLvHgzEKnt5OwCxPIzeEAoGPY 6HiVb26u874U1JgAistEpZJny4nEB9jWcW1fgX8feNrhqvj0p0Wv0aV1LD6Kymne 0R4EB2uzcHrH003vTVW0lhMxEoG/5AN3+KBDjkFuEbN6PicIb7fdV4TMF7zi6bQL luo/4BSaW7MjQoYFOVFWr4dO0xXoAfi7BWCiW83dN8mNhCQaTpRNNVWcY0dO8Jxp apuwHZ3EDjNWzTQvFu+0VMWfhfMKC+Xp -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:09 2025 by rpki-client