$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json) Hash identifier: L7nmvcHs98hXR3/DFZsl7GSHeWjguuZK1U/L7lnkyJE= Subject key identifier: 19:24:03:B5:66:EC:23:53:4C:13:5C:A7:90:CF:80:A4:A9:0B:A0:00 Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft Manifest number: 018B Signing time: Thu 03 Jul 2025 03:36:35 +0000 Manifest this update: Thu 03 Jul 2025 03:36:35 +0000 Manifest next update: Thu 10 Jul 2025 03:36:35 +0000 Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: DWumZuvTkdUsEj0ZKZSjzyOjH3EDvoE9op43maE6N+4=) 2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: yNzSo18Zr+VZZ8+QcBD6VKrhKtuzioN93vYAY/qtNGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: Jul 3 03:36:35 2025 GMT Not After : Jul 10 03:36:35 2025 GMT Subject: CN=6865fac3-ea6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:52:df:a6:8c:86:95:48:cc:bd:28:e4:db:21: 94:d5:d0:d8:3c:4f:cc:ee:13:36:60:27:90:57:91: 01:24:8f:f1:b7:7f:25:17:64:7c:40:01:c7:ff:83: 89:01:c5:d2:93:fa:cd:0c:89:07:df:1f:f4:7d:25: 9b:80:52:e8:ed:ea:a1:b9:1e:2d:b7:cf:97:72:ee: 65:10:ed:01:c8:b2:0d:7f:40:e0:69:24:8e:84:fc: 84:d2:c2:a6:d6:83:e7:c6:6e:bd:77:60:68:f1:0b: 7f:9e:65:2c:42:31:7c:a3:1e:ce:59:87:29:be:de: d1:94:e6:cc:1a:01:6c:07:95:04:b0:ff:95:c9:22: e1:ca:ff:15:c1:80:16:e1:b9:b7:a9:26:d2:b6:cf: b3:7e:e5:5e:eb:2a:8e:aa:14:26:3a:d1:e2:26:8b: ae:92:e0:e2:b2:80:ba:53:ce:b1:74:7f:8b:dd:07: d1:c1:69:8f:cf:ad:8f:7a:80:3f:15:bb:98:ea:27: 3a:f3:af:ab:ea:99:b1:2d:6d:64:f0:cd:e7:48:ee: 49:58:e0:40:f6:c8:05:71:c3:a9:8d:54:bc:d1:7c: 99:ba:ee:ee:3d:a5:8a:48:fb:7f:43:b1:dc:ff:b8: a3:50:fd:97:ab:e0:5a:6f:c0:c1:d1:ad:79:5f:96: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:24:03:B5:66:EC:23:53:4C:13:5C:A7:90:CF:80:A4:A9:0B:A0:00 X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ad:f4:13:f4:65:f2:61:ab:87:f1:d2:e5:ea:8a:5f:17:e5: 32:6a:48:4a:b7:5f:e2:1b:53:cf:26:92:72:af:f6:ea:bf:a1: bd:bd:e9:cd:25:3d:18:53:64:5d:de:af:d2:1e:bd:7d:ad:ae: 46:0b:cd:c0:97:24:3f:b7:1f:c7:04:bb:3b:01:de:bb:f0:ff: 86:27:52:92:9e:cf:48:00:f6:ed:b2:80:e5:2c:75:ea:a5:a0: d2:ba:72:e8:ea:0b:f4:c9:dd:a9:37:7d:46:5d:1a:0e:1c:d8: 54:5d:d0:22:94:9c:e5:9d:15:f1:6f:b6:57:9d:7c:e2:ab:3f: 35:78:cc:7b:25:8d:50:f6:2e:24:4f:23:c7:2d:60:68:c4:26: 1e:4e:eb:61:b5:74:0f:da:a4:3a:24:53:0a:8e:7d:18:a0:26: 9a:c9:8d:6d:35:33:3a:e4:bf:02:66:f1:ca:72:02:79:3d:b8: 6b:8a:77:8c:6e:11:7b:2d:cd:f6:ef:04:40:dc:a5:b6:92:ec: 28:c6:ea:f2:5b:9a:fc:8e:ca:5b:8a:ba:13:1c:88:5d:3c:04: c3:38:67:fa:82:91:5a:d3:20:20:93:2b:51:44:76:1e:4a:f5: 0c:d4:e0:96:93:e6:83:31:c0:62:ab:fa:ce:d2:8d:ed:71:5d: 82:78:9e:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUwNzAzMDMzNjM1WhcNMjUwNzEwMDMzNjM1WjAYMRYwFAYD VQQDEw02ODY1ZmFjMy1lYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VLfpoyGlUjMvSjk2yGU1dDYPE/M7hM2YCeQV5EBJI/xt38lF2R8QAHH/4OJ AcXSk/rNDIkH3x/0fSWbgFLo7eqhuR4tt8+Xcu5lEO0ByLINf0DgaSSOhPyE0sKm 1oPnxm69d2Bo8Qt/nmUsQjF8ox7OWYcpvt7RlObMGgFsB5UEsP+VySLhyv8VwYAW 4bm3qSbSts+zfuVe6yqOqhQmOtHiJouukuDisoC6U86xdH+L3QfRwWmPz62PeoA/ FbuY6ic686+r6pmxLW1k8M3nSO5JWOBA9sgFccOpjVS80XyZuu7uPaWKSPt/Q7Hc /7ijUP2Xq+Bab8DB0a15X5aL9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkkA7Vm 7CNTTBNcp5DPgKSpC6AAMB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK b3laczRJT2xlY3JST2xnR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9rfQT9GXyYauH8dLl6opfF+UyakhKt1/iG1PPJpJyr/bqv6G9venN JT0YU2Rd3q/SHr19ra5GC83AlyQ/tx/HBLs7Ad678P+GJ1KSns9IAPbtsoDlLHXq paDSunLo6gv0yd2pN31GXRoOHNhUXdAilJzlnRXxb7ZXnXziqz81eMx7JY1Q9i4k TyPHLWBoxCYeTuthtXQP2qQ6JFMKjn0YoCaayY1tNTM65L8CZvHKcgJ5PbhrineM bhF7Lc327wRA3KW2kuwoxuryW5r8jspbiroTHIhdPATDOGf6gpFa0yAgkytRRHYe SvUM1OCWk+aDMcBiq/rO0o3tcV2CeJ4D -----END CERTIFICATE-----Generated at Thu Jul 3 07:07:19 2025 by rpki-client