$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: ijK+bG64roJ0BK5kxv9hgslOlGubdqk+1PikGMa5VUU= Subject key identifier: 38:4E:82:A0:31:50:6C:12:AE:35:D1:82:FF:DC:46:E3:12:EC:3F:A3 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34A4 Signing time: Wed 02 Jul 2025 14:22:23 +0000 Manifest this update: Wed 02 Jul 2025 14:22:22 +0000 Manifest next update: Wed 09 Jul 2025 14:22:22 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 9i6snm3Gjcwpw/87vs0XorGgHaNCqwRhk4oOe7eRR3g=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Jul 2 14:22:22 2025 GMT Not After : Jul 9 14:22:22 2025 GMT Subject: CN=6865409e-9515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:49:5c:d3:1a:d6:65:5b:5f:62:ea:fb:e9: 41:df:39:85:ec:19:da:d3:22:c5:10:04:8b:ba:ee: 13:00:e4:d7:b8:65:fe:b9:1a:24:a8:bf:cd:98:91: 2c:d0:1d:29:8d:50:d6:cf:da:2c:45:04:52:84:b9: 72:71:58:92:b2:14:47:18:77:15:e8:53:eb:2b:ba: d1:ad:2f:2c:22:a2:dd:18:2e:b7:04:14:2f:e8:24: 56:0e:4e:79:84:af:1a:ca:83:f7:ac:0e:64:a5:31: d3:be:2b:74:89:21:a7:6b:9f:00:32:04:5e:4d:06: 53:e7:c3:eb:c6:30:a8:2e:b6:54:2c:fc:bf:97:34: 1e:bf:d9:c4:c4:e7:0b:eb:ed:f0:35:84:e1:29:60: 68:d8:c6:0d:07:b9:36:2e:f3:92:d1:37:1e:d2:3f: b6:99:7b:fe:3d:94:a4:fa:0f:9c:4a:d6:71:7c:9e: 36:75:0b:09:04:1e:d3:a0:78:e9:01:08:ec:2d:b4: 48:ed:0f:8d:0c:11:99:3e:eb:58:81:e1:b1:03:ed: 5f:62:7f:af:46:c3:0f:c2:de:98:b3:47:0e:6e:31: 9e:02:18:a5:c1:87:4c:8c:8e:5f:1a:ad:d2:4c:c8: fd:bd:33:50:0c:33:54:95:f4:43:27:f6:96:ab:4d: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4E:82:A0:31:50:6C:12:AE:35:D1:82:FF:DC:46:E3:12:EC:3F:A3 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:af:3b:ff:0c:f4:84:d7:db:dc:13:39:d3:61:86:ff:06:3b: 41:67:b7:c8:d4:0a:d8:44:0a:3f:98:e9:1b:5e:a2:2f:9a:fe: 30:45:97:51:a6:47:ad:e2:d4:fa:cc:57:45:00:ad:35:52:c4: c9:a4:bc:bd:60:a5:86:ae:09:71:08:d1:9f:23:c3:1e:f3:81: 4e:31:8b:70:5f:b2:3d:b0:ae:f4:78:bf:5e:3f:3e:15:b1:6c: f0:b1:20:99:04:f3:be:5a:95:6a:e3:22:24:fe:7e:cc:ee:8b: 4e:f0:ae:31:93:36:30:65:68:19:99:35:fb:01:ec:9a:51:7b: e8:27:49:ed:5f:22:41:a8:34:8c:63:d3:28:89:62:34:8c:9c: d5:1d:c6:70:8c:66:7b:bb:0a:d6:1f:15:16:6c:d9:b9:43:c9: 52:91:db:17:63:c3:cc:ea:f3:a1:22:4f:f2:11:92:b7:6e:0a: 70:a0:f7:44:3e:2f:0a:f7:87:b7:a1:4e:90:07:9d:7c:03:b2: 56:1d:d0:e7:95:6b:a4:ac:1d:50:45:12:44:17:24:c3:0d:c9: 62:11:01:d5:33:76:59:17:98:ab:3d:39:93:e3:f7:97:12:87: 8e:7f:be:93:cd:f9:83:0b:e9:43:5f:ea:43:b8:20:93:58:cd: a7:3c:c0:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwNzAyMTQyMjIyWhcNMjUwNzA5MTQyMjIyWjAYMRYwFAYD VQQDEw02ODY1NDA5ZS05NTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSlJXNMa1mVbX2Lq++lB3zmF7Bna0yLFEASLuu4TAOTXuGX+uRokqL/NmJEs 0B0pjVDWz9osRQRShLlycViSshRHGHcV6FPrK7rRrS8sIqLdGC63BBQv6CRWDk55 hK8ayoP3rA5kpTHTvit0iSGna58AMgReTQZT58PrxjCoLrZULPy/lzQev9nExOcL 6+3wNYThKWBo2MYNB7k2LvOS0Tce0j+2mXv+PZSk+g+cStZxfJ42dQsJBB7ToHjp AQjsLbRI7Q+NDBGZPutYgeGxA+1fYn+vRsMPwt6Ys0cObjGeAhilwYdMjI5fGq3S TMj9vTNQDDNUlfRDJ/aWq02GjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhOgqAx UGwSrjXRgv/cRuMS7D+jMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdrzv/DPSE19vcEznTYYb/BjtBZ7fI1ArYRAo/mOkbXqIvmv4wRZdR pket4tT6zFdFAK01UsTJpLy9YKWGrglxCNGfI8Me84FOMYtwX7I9sK70eL9ePz4V sWzwsSCZBPO+WpVq4yIk/n7M7otO8K4xkzYwZWgZmTX7AeyaUXvoJ0ntXyJBqDSM Y9MoiWI0jJzVHcZwjGZ7uwrWHxUWbNm5Q8lSkdsXY8PM6vOhIk/yEZK3bgpwoPdE Pi8K94e3oU6QB518A7JWHdDnlWukrB1QRRJEFyTDDcliEQHVM3ZZF5irPTmT4/eX EoeOf76TzfmDC+lDX+pDuCCTWM2nPMBI -----END CERTIFICATE-----Generated at Thu Jul 3 23:33:06 2025 by rpki-client