$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: iBOsdS/CTT0w5Xp5mu/Oa6Mwev/dlIxjj0HQCCJqs98= Subject key identifier: 74:70:A4:C0:5D:FE:48:05:1D:44:F4:AC:29:53:79:7A:60:98:B9:F5 Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 0238 Signing time: Sun 15 Jun 2025 02:02:39 +0000 Manifest this update: Sun 15 Jun 2025 02:02:38 +0000 Manifest next update: Sun 22 Jun 2025 02:02:38 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: tDm17g7fK6DGix4UO9PByW90N9orP/8J2JIcalj+d+M=) 2: 105CF2182FEE11F0A3938C3BC4F9AE02.roa (hash: 59eyuT2URuKIljZ2Lh3Qk0mAQWOkmIViAcmW+OHdvw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Jun 15 02:02:38 2025 GMT Not After : Jun 22 02:02:38 2025 GMT Subject: CN=684e29bf-3679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:85:95:57:68:67:11:3f:ee:60:eb:29:35: 67:e7:af:6b:f0:42:38:c0:cf:4b:77:f8:ad:7f:ec: cd:53:c4:ab:58:50:e1:74:77:94:36:46:6a:cd:e3: af:ba:cf:39:b2:72:75:8c:82:cb:70:96:c7:7d:ba: 09:a5:66:54:4e:d3:5c:a3:ad:d7:51:7f:97:65:28: e9:fd:79:09:51:2b:c8:45:d1:5c:15:64:fc:87:46: 88:63:42:dc:4f:68:40:89:08:37:6b:2b:d9:8f:4c: 2c:ce:45:48:d7:9a:7f:23:dd:d5:a7:ce:56:8f:b7: 6b:2f:b6:38:d0:53:26:90:49:28:f9:8d:e1:eb:5d: 4f:bb:1e:2c:32:5e:ff:12:24:69:0e:dd:1f:35:12: 90:f3:ac:05:94:2e:2a:f9:94:b4:99:b0:e6:c7:6f: fa:d6:01:07:ef:1f:5d:d0:d4:b3:6c:ce:85:8e:e9: 7d:75:f0:4b:a6:c2:4d:90:7f:a9:90:8c:6d:d2:b2: 87:06:c7:83:17:e4:ca:86:95:9e:4b:28:d4:76:b6: f3:2c:36:aa:d1:50:63:60:d2:e3:e0:43:91:33:5d: b6:c5:bf:8c:ac:22:b4:59:54:7e:17:21:8d:1d:61: b1:fc:22:62:55:d4:10:4e:95:f0:03:c3:91:df:2e: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:70:A4:C0:5D:FE:48:05:1D:44:F4:AC:29:53:79:7A:60:98:B9:F5 X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c7:89:70:81:c7:73:69:95:10:a1:be:d6:ed:d8:5f:9e:f3: c8:83:a1:3d:44:49:d3:e2:39:b2:1e:68:df:f2:b6:5f:c1:17: 09:c5:9e:4b:be:db:c9:cd:ec:68:dc:e7:11:f4:ce:08:86:4e: ef:18:90:90:6b:fd:d9:73:4d:62:d7:c5:e8:c2:cb:c4:98:c0: 0e:77:f5:23:6f:ca:9a:b9:76:6e:c0:93:e2:8c:06:89:f2:5e: 62:9b:1e:89:bd:fe:f1:7e:0c:04:44:d0:55:1e:ca:25:e4:bd: e0:c2:25:d8:00:d4:08:53:63:f6:b9:81:a8:77:3f:32:b6:99: b9:f9:17:59:a5:a2:4c:a0:53:3f:f4:62:25:12:37:0d:b7:c4: c2:8a:2c:71:67:6d:b4:89:3d:eb:9a:d5:de:9d:52:99:4f:c9: d3:63:3f:3f:1a:93:db:0f:dc:74:e5:d5:98:1a:6a:18:fd:61: bf:53:36:a8:4d:a3:dc:e5:7c:c9:2c:8d:43:9c:cb:c6:86:f7: bc:fc:b5:d7:c2:32:71:78:09:37:33:d0:eb:65:ed:3e:d5:40: b1:41:d0:73:09:8c:40:8f:71:0d:3b:a4:44:49:b4:0a:d0:b0: 3e:42:33:41:bd:71:98:43:cd:c2:58:0c:ab:02:46:17:15:d5: dc:eb:bb:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUwNjE1MDIwMjM4WhcNMjUwNjIyMDIwMjM4WjAYMRYwFAYD VQQDEw02ODRlMjliZi0zNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2qFlVdoZxE/7mDrKTVn569r8EI4wM9Ld/itf+zNU8SrWFDhdHeUNkZqzeOv us85snJ1jILLcJbHfboJpWZUTtNco63XUX+XZSjp/XkJUSvIRdFcFWT8h0aIY0Lc T2hAiQg3ayvZj0wszkVI15p/I93Vp85Wj7drL7Y40FMmkEko+Y3h611Pux4sMl7/ EiRpDt0fNRKQ86wFlC4q+ZS0mbDmx2/61gEH7x9d0NSzbM6Fjul9dfBLpsJNkH+p kIxt0rKHBseDF+TKhpWeSyjUdrbzLDaq0VBjYNLj4EORM122xb+MrCK0WVR+FyGN HWGx/CJiVdQQTpXwA8OR3y40tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRwpMBd /kgFHUT0rClTeXpgmLn1MB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYx4lwgcdzaZUQob7W7dhfnvPIg6E9REnT4jmyHmjf8rZfwRcJxZ5L vtvJzexo3OcR9M4Ihk7vGJCQa/3Zc01i18XowsvEmMAOd/Ujb8qauXZuwJPijAaJ 8l5imx6Jvf7xfgwERNBVHsol5L3gwiXYANQIU2P2uYGodz8ytpm5+RdZpaJMoFM/ 9GIlEjcNt8TCiixxZ220iT3rmtXenVKZT8nTYz8/GpPbD9x05dWYGmoY/WG/Uzao TaPc5XzJLI1DnMvGhve8/LXXwjJxeAk3M9DrZe0+1UCxQdBzCYxAj3ENO6RESbQK 0LA+QjNBvXGYQ83CWAyrAkYXFdXc67uC -----END CERTIFICATE-----Generated at Mon Jun 16 22:01:56 2025 by rpki-client