$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: fHBGa017sotIn/G2fJ7rJGcmoLPLB8MpIvCCnRxXlT8= Subject key identifier: A8:05:02:A6:D6:0D:05:A2:CB:83:E1:0D:B2:1A:04:B6:D1:A8:7A:C7 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 02B6 Signing time: Fri 13 Jun 2025 00:57:48 +0000 Manifest this update: Fri 13 Jun 2025 00:57:48 +0000 Manifest next update: Fri 20 Jun 2025 00:57:48 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: KykAtstNCrayrUp6eWBkHcch6z76suCrB1gWVDpd6is=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: OalalDzVyKhIKt/8JFaNCLlPQG9aL6loK7h8qfIQsmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Jun 13 00:57:48 2025 GMT Not After : Jun 20 00:57:48 2025 GMT Subject: CN=684b778c-6584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bc:e5:aa:8b:bd:1b:8d:46:c3:d5:13:42:d4: 8f:ba:9e:af:0e:04:c8:45:5d:58:05:ec:58:3c:bc: 02:1c:37:34:f5:31:6b:e8:d0:61:75:3c:98:cc:ed: ef:c3:fc:7b:aa:36:79:be:de:91:5b:52:89:20:7d: 79:8f:02:4a:03:53:aa:42:40:ec:15:a9:cb:7e:75: bf:6f:8a:47:6e:00:56:70:ad:a3:24:e9:27:5f:b5: cd:58:f9:df:ab:67:f9:ac:4e:eb:75:89:a4:1f:3a: f1:9d:76:36:d2:01:fd:5c:98:e5:bf:55:4e:0a:c3: c5:a9:12:b2:6e:d7:62:be:cc:87:05:be:e5:29:fd: 54:ba:d9:78:42:ad:9f:63:24:0c:0a:3e:ed:03:f3: d9:6c:fb:a8:94:01:6b:8f:a5:89:cf:c8:40:f7:62: 4b:92:f4:4d:72:9f:b0:c5:54:1c:e6:12:3c:fb:9d: 60:ae:71:bb:fb:5a:8b:0b:a4:3c:1b:44:f6:1c:c7: 90:3d:f8:dd:0f:81:6a:d0:c0:ad:10:37:95:ed:85: 3b:6e:1d:47:6a:e1:27:ab:69:02:40:46:97:72:a7: 07:9e:38:2b:4b:44:00:06:7b:2d:8f:e2:1a:87:78: e4:b5:89:6e:c0:7a:85:a6:4a:b0:bf:57:f4:d6:dd: 72:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:05:02:A6:D6:0D:05:A2:CB:83:E1:0D:B2:1A:04:B6:D1:A8:7A:C7 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6c:a2:be:e4:8b:e2:73:30:ff:50:4f:88:32:e7:b5:84:32: 25:08:c0:3a:7b:bc:d8:25:0f:5c:b9:80:3b:eb:50:74:56:3f: ae:b6:3a:a0:3d:66:3e:7a:08:a2:80:6a:a0:b7:5e:72:1e:a3: 8b:07:2e:41:ad:5f:78:07:83:7b:e5:24:3a:b2:b5:12:b7:30: f5:51:47:51:16:5e:4c:99:6f:f9:1c:de:c8:e0:3b:32:d5:f2: ab:be:65:61:d1:83:9f:74:55:b1:29:51:77:8b:93:8c:47:9f: c5:c5:2f:09:b3:f7:e2:e0:f7:b6:79:67:fa:cd:62:b1:8e:cc: 92:2f:52:5c:b5:0f:41:66:2c:77:2d:59:2a:29:70:bd:d4:e3: 77:e4:73:2c:1d:85:20:5d:46:02:f2:7d:13:6e:84:35:18:fb: 3b:f9:ef:f9:15:a5:17:7c:92:73:c0:53:bf:d6:f0:52:7c:7e: f1:55:85:81:b2:54:37:46:d3:f5:66:5d:5f:d5:a4:f4:ce:29: 00:af:09:45:82:5d:94:07:6d:5f:76:ae:8c:2d:69:7f:60:d5: ff:7e:de:c3:64:8e:28:ea:72:ff:f0:32:2b:f0:45:df:27:39: 74:7c:bf:2a:35:dd:c0:37:ee:d9:29:39:89:34:d0:e4:fb:f2: 62:e1:56:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUwNjEzMDA1NzQ4WhcNMjUwNjIwMDA1NzQ4WjAYMRYwFAYD VQQDEw02ODRiNzc4Yy02NTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Lzlqou9G41Gw9UTQtSPup6vDgTIRV1YBexYPLwCHDc09TFr6NBhdTyYzO3v w/x7qjZ5vt6RW1KJIH15jwJKA1OqQkDsFanLfnW/b4pHbgBWcK2jJOknX7XNWPnf q2f5rE7rdYmkHzrxnXY20gH9XJjlv1VOCsPFqRKybtdivsyHBb7lKf1Uutl4Qq2f YyQMCj7tA/PZbPuolAFrj6WJz8hA92JLkvRNcp+wxVQc5hI8+51grnG7+1qLC6Q8 G0T2HMeQPfjdD4Fq0MCtEDeV7YU7bh1HauEnq2kCQEaXcqcHnjgrS0QABnstj+Ia h3jktYluwHqFpkqwv1f01t1yGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgFAqbW DQWiy4PhDbIaBLbRqHrHMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKbKK+5IviczD/UE+IMue1hDIlCMA6e7zYJQ9cuYA761B0Vj+utjqg PWY+egiigGqgt15yHqOLBy5BrV94B4N75SQ6srUStzD1UUdRFl5MmW/5HN7I4Dsy 1fKrvmVh0YOfdFWxKVF3i5OMR5/FxS8Js/fi4Pe2eWf6zWKxjsySL1JctQ9BZix3 LVkqKXC91ON35HMsHYUgXUYC8n0TboQ1GPs7+e/5FaUXfJJzwFO/1vBSfH7xVYWB slQ3RtP1Zl1f1aT0zikArwlFgl2UB21fdq6MLWl/YNX/ft7DZI4o6nL/8DIr8EXf Jzl0fL8qNd3AN+7ZKTmJNNDk+/Ji4VYp -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:35 2025 by rpki-client