$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: O/sbc2B9SYQaTh5JqpHFOo+iJk7DApXUKchAKLkPBTM= Subject key identifier: 7E:7F:4F:20:45:86:83:22:03:88:4B:E7:31:70:92:ED:11:8A:D4:23 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 0110 Signing time: Tue 01 Jul 2025 05:26:41 +0000 Manifest this update: Tue 01 Jul 2025 05:26:41 +0000 Manifest next update: Tue 08 Jul 2025 05:26:41 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: ifjL0XgnpoElhKvsUk0D0pP8wMjL8pZQZaHVZESPbrY=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Jul 1 05:26:41 2025 GMT Not After : Jul 8 05:26:41 2025 GMT Subject: CN=68637191-3edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:17:bb:83:b9:35:8e:c1:5b:c4:ba:98:1c: bd:73:1a:52:de:9a:0c:80:a6:57:46:65:11:a9:86: e9:6f:24:f2:d7:cb:dc:4c:3b:5b:74:a8:d2:95:22: d7:d7:29:69:3d:34:09:47:88:63:3e:2d:3d:bd:aa: 18:8d:5e:76:1d:bc:c8:61:3d:24:07:f7:a4:db:41: fe:6f:31:5b:bd:38:3e:47:a4:70:21:c7:4e:cc:f1: 94:bb:dd:be:35:31:0a:e0:66:94:a1:c1:84:a7:bf: ac:9e:b5:ad:31:97:3e:8c:30:f0:46:56:ca:91:80: ae:1b:0d:f5:6f:82:e1:db:b6:62:2e:55:bb:c4:e6: 37:51:16:1f:12:99:49:98:53:8e:18:63:43:64:22: 72:77:3b:95:80:4a:35:77:51:14:f3:06:d2:1a:51: a5:2a:23:60:87:7e:54:c7:95:46:c9:82:c5:97:df: 15:6e:44:c2:b1:6d:5f:b9:51:35:93:9a:97:1c:0d: 92:38:e4:a3:4c:75:a2:7e:09:48:5e:3d:7b:ec:62: 20:5e:2c:18:c5:ea:89:f2:56:69:90:e4:08:49:5e: 52:ac:1c:d5:e6:ac:aa:dc:74:6b:a6:b7:c9:e9:be: ee:a5:f5:f0:49:d2:5c:3a:14:62:a0:8c:2f:1b:18: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7F:4F:20:45:86:83:22:03:88:4B:E7:31:70:92:ED:11:8A:D4:23 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e6:2a:ff:01:33:75:34:2a:e3:75:c3:07:e6:c2:38:0c:41: 08:03:4c:8c:2b:58:6a:ed:2f:78:e6:06:ec:d0:bf:75:3e:c4: 20:86:67:78:10:d2:4f:48:53:5d:0d:63:28:5a:d1:9f:4d:b1: f8:3a:c7:1c:93:e4:30:42:c0:f6:bd:d7:04:f2:ab:37:a5:a4: a3:ff:cb:c4:fa:db:b7:e4:66:48:92:a4:48:45:02:2d:9f:a9: 1b:05:44:12:2d:16:2f:b5:fa:6d:5d:2d:c7:08:c7:02:80:6c: ac:9b:7e:fb:8c:b6:a1:9b:14:95:3f:48:f0:1a:bc:f1:65:b1: fc:6f:36:ba:14:7b:57:7d:85:58:87:c0:2c:11:6a:aa:06:45: 62:8b:7b:d5:02:21:62:f1:fa:54:d6:a4:89:7c:a7:c0:9d:2c: eb:54:9f:0f:ce:27:00:d2:d6:16:05:20:95:8a:e1:91:13:aa: 16:55:8e:33:be:ac:8f:b1:37:0d:be:21:01:6b:59:f5:95:d7: a5:92:60:99:de:ed:00:90:20:f1:36:a3:f7:11:40:c2:e9:04: 73:fd:aa:c3:cc:51:1c:9f:4b:3e:ab:1d:fe:e0:4b:56:61:35: 44:50:d1:16:a4:24:b1:5c:9a:73:ac:16:96:bb:cb:d1:6b:25: 45:6c:a9:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwNzAxMDUyNjQxWhcNMjUwNzA4MDUyNjQxWjAYMRYwFAYD VQQDEw02ODYzNzE5MS0zZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0MXu4O5NY7BW8S6mBy9cxpS3poMgKZXRmURqYbpbyTy18vcTDtbdKjSlSLX 1ylpPTQJR4hjPi09vaoYjV52HbzIYT0kB/ek20H+bzFbvTg+R6RwIcdOzPGUu92+ NTEK4GaUocGEp7+snrWtMZc+jDDwRlbKkYCuGw31b4Lh27ZiLlW7xOY3URYfEplJ mFOOGGNDZCJydzuVgEo1d1EU8wbSGlGlKiNgh35Ux5VGyYLFl98VbkTCsW1fuVE1 k5qXHA2SOOSjTHWifglIXj177GIgXiwYxeqJ8lZpkOQISV5SrBzV5qyq3HRrprfJ 6b7upfXwSdJcOhRioIwvGxiEqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5/TyBF hoMiA4hL5zFwku0RitQjMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN5ir/ATN1NCrjdcMH5sI4DEEIA0yMK1hq7S945gbs0L91PsQghmd4 ENJPSFNdDWMoWtGfTbH4Oscck+QwQsD2vdcE8qs3paSj/8vE+tu35GZIkqRIRQIt n6kbBUQSLRYvtfptXS3HCMcCgGysm377jLahmxSVP0jwGrzxZbH8bza6FHtXfYVY h8AsEWqqBkVii3vVAiFi8fpU1qSJfKfAnSzrVJ8PzicA0tYWBSCViuGRE6oWVY4z vqyPsTcNviEBa1n1ldelkmCZ3u0AkCDxNqP3EUDC6QRz/arDzFEcn0s+qx3+4EtW YTVEUNEWpCSxXJpzrBaWu8vRayVFbKkF -----END CERTIFICATE-----Generated at Wed Jul 2 19:47:24 2025 by rpki-client