$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: oB1UvVQEMmnV68kRUu4mDGvD6emasanolbsAo0CDZcs= Subject key identifier: 21:AB:84:87:F9:5E:B1:DA:23:8A:7F:65:1F:1A:36:FB:EF:48:30:C5 Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 09F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 09E4 Signing time: Sat 14 Jun 2025 19:43:37 +0000 Manifest this update: Sat 14 Jun 2025 19:43:36 +0000 Manifest next update: Sat 21 Jun 2025 19:43:36 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: NV7dVD15IcoWlZGPa29vw0/REr6/vtqtHtJUvMBzkX0=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: unkzLsoSC8OhagJytTS2NwamPLpJq/uFvMRt2lZfV60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Jun 14 19:43:36 2025 GMT Not After : Jun 21 19:43:36 2025 GMT Subject: CN=684dd0e8-658c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:b2:82:56:22:cf:83:a2:4c:c6:c8:f1:68: 9a:21:cd:eb:f7:30:c4:0b:52:d1:68:02:2e:fe:9a: 30:40:4b:d2:3d:b8:b1:83:4d:8d:2b:d5:e8:fe:9c: ed:f3:5b:41:cd:11:ee:47:b1:32:3f:80:0b:7b:fc: 27:5d:d5:41:2a:c5:a3:28:31:81:73:13:86:97:69: ee:60:fb:40:ac:36:c3:1d:15:77:0b:d9:37:92:ad: 2d:d7:92:21:58:7f:75:f4:71:2e:33:68:93:8f:cc: 96:95:04:aa:b6:96:68:24:72:f5:2c:50:da:0c:d3: 05:4f:9c:f3:da:68:93:e6:eb:cc:2a:7e:33:88:04: e0:c6:f8:d3:89:29:2d:da:62:63:14:0d:61:06:67: f8:d3:46:80:c8:04:9d:a0:11:77:da:8c:7b:54:80: 0a:22:b9:b8:6c:e3:fe:a4:b1:70:a5:cf:6e:9c:90: f3:85:56:f9:bd:1a:c1:6d:59:c2:bc:85:27:0a:83: bb:4e:63:0c:56:f2:17:cc:77:c0:4a:0a:1d:8b:e1: 9f:bd:22:78:17:da:49:f0:af:d4:36:2d:10:03:51: 62:50:71:04:5b:71:e5:ac:e6:aa:39:9c:4d:83:4f: 54:e5:7e:be:17:61:2d:fb:19:d8:e1:cc:3b:2a:55: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AB:84:87:F9:5E:B1:DA:23:8A:7F:65:1F:1A:36:FB:EF:48:30:C5 X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:57:ce:83:c7:5a:a9:55:21:54:82:63:da:58:c7:7d:50:60: 20:04:fe:59:bb:45:b4:a4:cd:1a:ff:22:55:48:12:72:9e:e9: 7c:a4:72:cf:02:57:47:6c:1c:5c:2c:f6:67:31:c1:4f:98:b7: e0:37:fb:53:15:9d:0c:bc:d0:3e:fe:df:de:9b:a0:ff:02:11: 4a:17:49:0a:d1:16:1c:93:da:cd:8a:9c:ba:90:ca:91:1b:72: a2:2b:73:9d:c7:68:a5:38:d9:d8:40:8e:fa:f5:be:e5:d8:3b: fe:f5:bb:93:6b:c7:30:af:09:f2:a7:48:30:fe:86:02:fd:37: 69:2f:9a:24:0e:e6:7b:89:c1:f2:00:e3:21:e6:1b:04:db:7b: 8d:2e:72:3d:7c:f0:ee:49:37:f1:68:5e:88:55:94:b3:4f:7e: 76:5b:1d:9a:41:a4:a4:7b:63:6d:5c:5a:1b:49:87:af:b8:78: e6:9c:b6:99:e6:72:d2:90:29:ed:63:89:34:fb:3e:80:f6:92: 51:82:b2:7c:70:7f:64:d9:dc:07:ab:d4:ca:86:89:be:d4:b1: 58:19:7a:f9:88:c8:6d:f7:8d:a4:a9:bb:73:40:98:9d:d6:19: 52:7a:9b:f9:11:33:e7:6a:3a:42:7f:5c:1d:11:54:7f:2b:7a: 75:33:2c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUwNjE0MTk0MzM2WhcNMjUwNjIxMTk0MzM2WjAYMRYwFAYD VQQDEw02ODRkZDBlOC02NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6qyglYiz4OiTMbI8WiaIc3r9zDEC1LRaAIu/powQEvSPbixg02NK9Xo/pzt 81tBzRHuR7EyP4ALe/wnXdVBKsWjKDGBcxOGl2nuYPtArDbDHRV3C9k3kq0t15Ih WH919HEuM2iTj8yWlQSqtpZoJHL1LFDaDNMFT5zz2miT5uvMKn4ziATgxvjTiSkt 2mJjFA1hBmf400aAyASdoBF32ox7VIAKIrm4bOP+pLFwpc9unJDzhVb5vRrBbVnC vIUnCoO7TmMMVvIXzHfASgodi+GfvSJ4F9pJ8K/UNi0QA1FiUHEEW3HlrOaqOZxN g09U5X6+F2Et+xnY4cw7KlUSjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGrhIf5 XrHaI4p/ZR8aNvvvSDDFMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIV86Dx1qpVSFUgmPaWMd9UGAgBP5Zu0W0pM0a/yJVSBJynul8pHLP AldHbBxcLPZnMcFPmLfgN/tTFZ0MvNA+/t/em6D/AhFKF0kK0RYck9rNipy6kMqR G3KiK3Odx2ilONnYQI769b7l2Dv+9buTa8cwrwnyp0gw/oYC/TdpL5okDuZ7icHy AOMh5hsE23uNLnI9fPDuSTfxaF6IVZSzT352Wx2aQaSke2NtXFobSYevuHjmnLaZ 5nLSkCntY4k0+z6A9pJRgrJ8cH9k2dwHq9TKhom+1LFYGXr5iMht942kqbtzQJid 1hlSepv5ETPnajpCf1wdEVR/K3p1MywZ -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:02 2025 by rpki-client