$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json) Hash identifier: n7t1brcm2HhlZLw00Wc9MMwYpuEVJKM9QrWjcky+VTU= Subject key identifier: 69:8D:7E:39:06:70:7A:E2:7C:B4:C9:EB:82:23:86:F5:6A:16:A2:63 Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0C77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft Manifest number: 0C66 Signing time: Wed 02 Jul 2025 18:39:23 +0000 Manifest this update: Wed 02 Jul 2025 18:39:23 +0000 Manifest next update: Wed 09 Jul 2025 18:39:23 +0000 Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: llcmGNxNHpmdEvopLzdac0dnTFbusWuOZ3WX8/o7xuE=) 2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: olmc/o09ErYiChJbWXMyIgbGCNghcLiwj8HQmo8o9wc=) 3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: Dj14jdb8qi6WA5Pp1Kgn1YVj9eVnC7neln++ngU1UbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Jul 2 18:39:23 2025 GMT Not After : Jul 9 18:39:23 2025 GMT Subject: CN=68657cdb-a9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:c4:07:4b:b9:67:9f:dc:de:f9:64:9b:8b: 2d:7c:bd:c8:37:e1:03:b2:1d:9e:96:ae:ce:4e:36: 0c:8a:8e:b3:36:96:67:85:5b:89:3c:8b:67:91:e7: 00:ee:97:8b:ee:4a:f4:15:d1:c8:60:bf:24:72:3e: 80:80:d8:ba:31:02:a3:d8:72:e2:6c:cb:7f:b7:27: 3b:50:5f:99:5d:31:6f:f8:f5:e4:50:ca:58:7e:bd: e0:79:4b:8d:73:b1:f8:c7:f8:b1:8a:dc:6d:8c:eb: 19:b5:84:85:9a:01:14:1c:5a:1a:63:82:68:27:1a: 14:a1:48:63:71:24:ae:ef:63:7b:c1:2a:92:49:74: da:c7:ab:71:5c:a9:f3:c0:fe:6b:74:93:30:cd:47: c5:b9:59:2a:4a:e2:77:48:5d:7f:16:9b:90:67:0e: 94:14:7f:ae:89:95:ac:05:95:18:bd:93:d8:7a:b9: bb:a9:da:61:eb:81:b0:12:fb:76:7e:4d:73:90:f9: d5:9a:49:f0:71:d8:77:7e:78:6b:50:79:62:93:9e: 78:a5:f5:06:57:b7:cc:fa:a1:4a:cd:b9:75:d4:00: d2:48:81:9a:b0:03:75:32:6a:5c:ac:f2:a8:8b:ac: d3:3d:cd:38:5e:31:da:7f:0d:33:f2:28:5e:2d:44: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8D:7E:39:06:70:7A:E2:7C:B4:C9:EB:82:23:86:F5:6A:16:A2:63 X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:89:a7:ed:db:a8:1d:c2:0e:e2:e7:cb:4d:08:b0:71:3f:a0: d9:65:bf:3b:4e:fc:65:7c:ee:a7:16:7d:37:15:51:95:2d:2a: d8:31:cb:42:03:44:c5:5b:52:cb:02:c3:e4:1e:2a:74:43:f5: 60:09:7d:11:d5:9f:10:5a:c9:7c:d3:68:17:99:a0:c9:91:b1: 20:0f:4a:c5:1f:0a:4d:10:76:cd:92:51:51:a7:9f:dc:94:75: 6d:85:28:35:2e:65:f1:b1:98:b9:8d:17:07:bc:e1:96:8c:c7: 7b:79:7f:ee:c3:6f:1e:48:e3:75:6e:1b:02:86:96:e0:86:9f: 49:30:15:b8:6a:2a:11:76:3f:68:5e:20:10:a2:0f:fa:fd:dd: 77:e9:7b:4c:61:d3:28:67:85:aa:fe:90:e9:ec:1a:ef:50:4d: cc:33:e6:19:f2:d7:df:43:78:35:ab:11:84:f5:92:dd:08:51: 3e:7d:8f:a0:04:82:28:ec:1a:24:5b:ac:7a:f7:78:40:8a:01: 9d:84:11:58:89:9f:40:91:d8:19:c2:87:c3:cb:5e:94:bb:2b: 6b:e4:05:28:40:c7:78:5f:b1:9e:54:14:41:99:ad:91:1d:46: a9:d4:ed:0e:10:ed:01:40:b0:64:a5:2e:19:29:d6:26:26:57: 38:02:9f:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjUwNzAyMTgzOTIzWhcNMjUwNzA5MTgzOTIzWjAYMRYwFAYD VQQDEw02ODY1N2NkYi1hOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2U3EB0u5Z5/c3vlkm4stfL3IN+EDsh2elq7OTjYMio6zNpZnhVuJPItnkecA 7peL7kr0FdHIYL8kcj6AgNi6MQKj2HLibMt/tyc7UF+ZXTFv+PXkUMpYfr3geUuN c7H4x/ixitxtjOsZtYSFmgEUHFoaY4JoJxoUoUhjcSSu72N7wSqSSXTax6txXKnz wP5rdJMwzUfFuVkqSuJ3SF1/FpuQZw6UFH+uiZWsBZUYvZPYerm7qdph64GwEvt2 fk1zkPnVmknwcdh3fnhrUHlik554pfUGV7fM+qFKzbl11ADSSIGasAN1MmpcrPKo i6zTPc04XjHafw0z8iheLUQCxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmNfjkG cHrifLTJ64IjhvVqFqJjMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNFMS85RkQ1OERBNjA1QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3Ju SC0tbWJLUlJZMkhGaXVIWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOiaft26gdwg7i58tNCLBxP6DZZb87TvxlfO6nFn03FVGVLSrYMctC A0TFW1LLAsPkHip0Q/VgCX0R1Z8QWsl802gXmaDJkbEgD0rFHwpNEHbNklFRp5/c lHVthSg1LmXxsZi5jRcHvOGWjMd7eX/uw28eSON1bhsChpbghp9JMBW4aioRdj9o XiAQog/6/d136XtMYdMoZ4Wq/pDp7BrvUE3MM+YZ8tffQ3g1qxGE9ZLdCFE+fY+g BIIo7BokW6x693hAigGdhBFYiZ9AkdgZwofDy16Uuytr5AUoQMd4X7GeVBRBma2R HUap1O0OEO0BQLBkpS4ZKdYmJlc4Ap83 -----END CERTIFICATE-----Generated at Thu Jul 3 18:02:40 2025 by rpki-client