$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft File: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json) Hash identifier: IKovSHm80qg8X9pZOCbwxCZJTJkkzHZuIxVvGkaltic= Subject key identifier: FA:2C:44:3D:F8:9C:B0:50:D3:03:A5:8B:87:56:E0:F1:6D:56:0C:51 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft Manifest number: 01CE Signing time: Sun 03 Aug 2025 03:37:19 +0000 Manifest this update: Sun 03 Aug 2025 03:37:19 +0000 Manifest next update: Sun 10 Aug 2025 03:37:19 +0000 Files and hashes: 1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: DiJG0znpSPmQZuuX9hK/lYqNXwDm4W/LaBpkWylmslA=) 2: 267FE3681C4B11F082276911C4F9AE02.roa (hash: IwAZrjoyGmsUGmE4JOsWaeHq5fs6QvEAYA+JnsGMyLo=) 3: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co=) 4: E0A8B344173E11F093E0F04CC4F9AE02.roa (hash: baZGvTyIaF8PILI14dVTbXunLuwY6sMo3vWHfxxLvRw=) 5: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: OMFUXP/cctAoz4Xum6QNfmkgufq2udvA4e2an/c9gCg=) 6: 1A6C2ADE173F11F08E4D594DC4F9AE02.roa (hash: lfkr3wnF/gd810FZkIOk1rPPX3nFh2BPUr1atDdR1QQ=) 7: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: /jkIGuU72p12nz6+bmqYXQjGUP7RRNXyE9lz7PQstzA=) 8: 19CBA44C173F11F08E4D594DC4F9AE02.roa (hash: fGTHrD4EoaVLUBeDI8+wRQTcKC/emxbBQTiRlGHrOYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Aug 3 03:37:19 2025 GMT Not After : Aug 10 03:37:19 2025 GMT Subject: CN=688ed96f-5d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:22:5d:eb:d1:6c:7e:6d:7d:dc:7d:a9:c7: 57:28:a4:2b:da:6c:a6:0f:22:7e:0e:aa:d4:ba:54: d2:38:b6:93:e3:b0:31:73:2a:bd:3f:12:5f:09:ea: 42:c7:64:97:8c:28:bf:db:a1:b5:06:00:f2:74:57: f8:cf:01:ed:1c:df:89:bb:f9:cd:ca:03:68:f0:68: 42:c6:7d:2c:d6:60:1b:94:83:93:13:8e:18:33:f1: 5b:59:0e:3f:5a:18:47:2b:71:67:e8:f5:2c:14:9d: 18:cf:22:d0:c7:1f:5b:a4:19:3a:2d:8f:96:09:e8: 3d:93:d8:33:d4:56:59:ad:48:db:6a:25:51:ab:58: 9e:98:7f:a4:9f:37:e7:1a:e4:05:7d:f5:9a:96:89: 8a:a0:ad:29:72:1f:56:a0:b2:40:5b:d5:a2:3e:7d: 8a:49:12:40:35:af:bf:7e:61:ae:7e:21:a9:67:bb: df:11:3a:ef:2a:3b:32:62:dd:20:60:6a:1f:e2:f8: ea:f9:ef:a6:6c:8c:05:cd:08:82:ab:b3:e4:95:30: 09:11:1a:7a:f6:06:06:6d:d4:46:04:8f:e0:55:25: 1a:fe:3a:07:f3:e5:a5:72:22:ae:7b:8e:c0:73:2f: 58:49:4d:d0:ff:97:db:b4:fa:80:7e:93:d7:f4:55: 31:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2C:44:3D:F8:9C:B0:50:D3:03:A5:8B:87:56:E0:F1:6D:56:0C:51 X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ed:92:e6:4a:43:a8:54:53:d8:6e:82:56:15:30:27:6c:ee: d7:10:b3:87:24:7c:89:19:3f:10:e1:fa:19:a4:9d:f8:25:d5: c2:c8:72:3a:a8:8a:9a:13:1e:f4:65:15:48:29:1b:d0:53:ec: 52:ae:2e:ab:44:c5:e6:2c:9f:e5:bf:91:8c:3e:43:0a:48:a3: 4b:c8:05:ad:b4:46:02:72:6d:63:39:1d:a7:d4:e2:cb:a4:52: e1:e8:90:2b:16:ee:ff:a4:f2:f8:70:0c:a4:3b:0a:fd:25:cf: 2f:a3:ed:34:17:be:53:7a:f8:33:ba:0d:16:6b:5e:13:0c:a8: 00:95:4c:48:b3:11:f2:88:4c:c7:36:5a:54:fa:6d:05:75:26: 23:93:7a:ae:f6:a7:38:d3:27:14:d8:85:a0:1d:4d:b6:51:41: c6:9c:8b:a4:89:c4:88:a5:cd:a2:a2:68:37:62:a4:7d:2a:68: 72:92:0e:56:2b:db:8c:72:07:5d:21:eb:e6:db:bd:22:be:5e: 05:0d:a2:12:30:be:4d:55:bd:b6:53:3f:da:00:4d:89:82:87: 2d:e1:d1:70:0b:b1:d1:dc:7a:e2:e8:db:bb:53:65:bb:d9:48: 1e:77:04:39:4c:7c:53:20:fb:bf:ee:c4:75:b1:2a:db:86:45: 06:81:6f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUwODAzMDMzNzE5WhcNMjUwODEwMDMzNzE5WjAYMRYwFAYD VQQDEw02ODhlZDk2Zi01ZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LciXevRbH5tfdx9qcdXKKQr2mymDyJ+DqrUulTSOLaT47Axcyq9PxJfCepC x2SXjCi/26G1BgDydFf4zwHtHN+Ju/nNygNo8GhCxn0s1mAblIOTE44YM/FbWQ4/ WhhHK3Fn6PUsFJ0YzyLQxx9bpBk6LY+WCeg9k9gz1FZZrUjbaiVRq1iemH+knzfn GuQFffWalomKoK0pch9WoLJAW9WiPn2KSRJANa+/fmGufiGpZ7vfETrvKjsyYt0g YGof4vjq+e+mbIwFzQiCq7PklTAJERp69gYGbdRGBI/gVSUa/joH8+WlciKue47A cy9YSU3Q/5fbtPqAfpPX9FUxhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPosRD34 nLBQ0wOli4dW4PFtVgxRMB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0M4Ny9FNzgyODU0RUVGMEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1 dDhUZzBFbk1ybklvNG8tMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV7ZLmSkOoVFPYboJWFTAnbO7XELOHJHyJGT8Q4foZpJ34JdXCyHI6 qIqaEx70ZRVIKRvQU+xSri6rRMXmLJ/lv5GMPkMKSKNLyAWttEYCcm1jOR2n1OLL pFLh6JArFu7/pPL4cAykOwr9Jc8vo+00F75Tevgzug0Wa14TDKgAlUxIsxHyiEzH NlpU+m0FdSYjk3qu9qc40ycU2IWgHU22UUHGnIukicSIpc2iomg3YqR9Kmhykg5W K9uMcgddIevm270ivl4FDaISML5NVb22Uz/aAE2Jgoct4dFwC7HR3Hri6Nu7U2W7 2UgedwQ5THxTIPu/7sR1sSrbhkUGgW/t -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:45 2025 by rpki-client