$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: f7tpzhCOT9h/G7BRIs1QmZb1geRp25PsWdqcpghtLEo= Subject key identifier: B0:D1:96:1F:44:E9:2D:67:75:E0:6C:FB:1A:BD:78:DC:45:0C:8D:76 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 34A4 Signing time: Sat 14 Jun 2025 15:15:09 +0000 Manifest this update: Sat 14 Jun 2025 15:15:09 +0000 Manifest next update: Sat 21 Jun 2025 15:15:09 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: PqkXg9+f+vs+nZWtid39dbL5UTapKH5ZeDgzW6TH3mw=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13505 (0x34c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Jun 14 15:15:09 2025 GMT Not After : Jun 21 15:15:09 2025 GMT Subject: CN=684d91fd-b16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:59:e7:b2:58:a7:a3:d7:be:51:21:51:df: ad:95:68:e2:c4:61:d4:a1:1b:fb:e1:77:cf:f7:00: 0a:60:48:5f:02:f8:b5:c1:80:11:68:24:8b:ee:db: 22:a3:77:fe:78:4a:1d:f8:92:bf:9e:3f:51:25:e4: 11:57:03:fb:98:dd:14:07:d2:ec:fe:1e:23:c9:9b: 9b:69:14:6a:07:60:02:19:02:5c:ff:e3:82:f4:c8: 66:8b:64:91:22:cf:09:d7:bd:27:0e:c0:74:9e:84: a2:3f:b0:e7:e8:fc:98:bb:91:21:e9:c9:a2:79:d2: e7:78:ec:8c:ba:ed:88:66:ca:55:0f:af:7d:58:78: e0:ce:b3:da:d2:f4:1d:79:e8:01:0b:53:ba:42:30: 3a:e1:81:ff:11:0d:48:64:06:e9:0c:ac:51:ca:60: 7a:9b:79:b1:fe:81:c3:cc:8e:3d:2d:a2:61:9f:51: 49:33:3e:3f:02:05:4d:4d:ac:bd:20:79:6d:6d:1a: 25:58:93:2b:6c:2f:28:d1:16:1d:a1:3e:d5:e8:78: 25:3d:03:c0:4a:f9:68:08:96:77:bd:e0:3b:b2:6f: 55:7f:21:f8:da:88:ec:09:fd:24:e8:9d:49:41:00: b3:b6:af:d2:27:e3:d9:08:4c:fe:f1:4b:52:f9:4c: 98:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D1:96:1F:44:E9:2D:67:75:E0:6C:FB:1A:BD:78:DC:45:0C:8D:76 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:af:b9:bb:4e:ef:88:79:df:d6:85:0d:30:24:a1:95:33:95: 9d:09:a4:f1:f5:da:04:3d:c3:86:52:e8:14:a0:47:c5:c0:07: 6a:2b:d2:62:7c:06:34:de:96:5c:c7:46:70:1c:5a:be:a3:36: 6c:b4:f7:32:22:dd:b9:25:79:35:c9:16:16:f9:5b:34:ed:0e: 63:0b:84:53:01:4f:41:cb:85:14:3f:eb:82:ec:40:fc:22:e4: 2c:df:78:c4:70:a7:ab:54:58:c0:2f:b2:27:0a:32:c7:86:4f: 36:f2:2c:23:64:23:27:68:c8:24:a4:33:98:bd:97:bc:33:bb: 1f:37:02:94:25:ad:f1:89:76:13:21:5d:ca:54:26:74:7f:01: b4:45:ad:52:16:ad:ac:6a:d0:b7:87:06:96:71:a9:27:55:af: 10:ab:be:c5:db:16:e4:54:70:38:5d:27:0e:e0:3c:15:4d:68: 5e:f9:e4:a0:6b:4a:d3:18:84:d5:e1:09:b7:3a:6b:21:a2:26: 68:38:21:7b:93:ca:5e:ca:d0:1a:58:8a:24:96:b6:08:37:00: 4e:1d:7f:b5:12:ed:48:79:e4:26:85:9c:db:26:f9:14:0b:44: 01:5a:5a:db:56:c1:4f:1b:90:d6:cd:af:73:ff:6a:aa:1a:8a: bc:d8:f4:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwNjE0MTUxNTA5WhcNMjUwNjIxMTUxNTA5WjAYMRYwFAYD VQQDEw02ODRkOTFmZC1iMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WdZ57JYp6PXvlEhUd+tlWjixGHUoRv74XfP9wAKYEhfAvi1wYARaCSL7tsi o3f+eEod+JK/nj9RJeQRVwP7mN0UB9Ls/h4jyZubaRRqB2ACGQJc/+OC9Mhmi2SR Is8J170nDsB0noSiP7Dn6PyYu5Eh6cmiedLneOyMuu2IZspVD699WHjgzrPa0vQd eegBC1O6QjA64YH/EQ1IZAbpDKxRymB6m3mx/oHDzI49LaJhn1FJMz4/AgVNTay9 IHltbRolWJMrbC8o0RYdoT7V6HglPQPASvloCJZ3veA7sm9VfyH42ojsCf0k6J1J QQCztq/SJ+PZCEz+8UtS+UyYOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDRlh9E 6S1ndeBs+xq9eNxFDI12MB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWr7m7Tu+Ied/WhQ0wJKGVM5WdCaTx9doEPcOGUugUoEfFwAdqK9Ji fAY03pZcx0ZwHFq+ozZstPcyIt25JXk1yRYW+Vs07Q5jC4RTAU9By4UUP+uC7ED8 IuQs33jEcKerVFjAL7InCjLHhk828iwjZCMnaMgkpDOYvZe8M7sfNwKUJa3xiXYT IV3KVCZ0fwG0Ra1SFq2satC3hwaWcaknVa8Qq77F2xbkVHA4XScO4DwVTWhe+eSg a0rTGITV4Qm3OmshoiZoOCF7k8peytAaWIoklrYINwBOHX+1Eu1IeeQmhZzbJvkU C0QBWlrbVsFPG5DWza9z/2qqGoq82PTX -----END CERTIFICATE-----Generated at Sun Jun 15 08:48:08 2025 by rpki-client