$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: AIfNTPEjUs+3xhENXMA14fUErl9iKewUIaKQy+62sCo= Subject key identifier: CD:5E:BE:41:0C:1B:C1:73:EF:A7:B4:1C:51:5B:F0:C3:28:DC:90:11 Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 0952 Signing time: Wed 02 Jul 2025 20:30:16 +0000 Manifest this update: Wed 02 Jul 2025 20:30:15 +0000 Manifest next update: Wed 09 Jul 2025 20:30:15 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: nLxnq/NVdc5yjGjdxIqWhNgnBl37a+dZ022EZucMkvE=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: oV5Kg/s7awHZvzZpO+JQXAELEp1giTzDedBNhKwTbhM=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: Jul 2 20:30:15 2025 GMT Not After : Jul 9 20:30:15 2025 GMT Subject: CN=686596d7-95ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:d8:36:ac:ab:7e:3b:da:ca:25:c3:82:b4: 59:cd:f4:30:3a:4f:97:99:08:08:13:f9:84:b9:d7: 35:87:0c:fc:86:f8:bc:11:ae:c9:35:d7:ca:a8:fe: 6c:81:8f:b6:d5:a9:bd:ce:b8:1a:80:df:9f:35:0a: c8:ee:1d:bd:c4:76:ac:fa:68:b3:44:b2:30:94:36: 02:25:39:97:5f:28:03:de:44:34:b2:90:09:64:55: 3f:8a:7d:6e:39:63:5a:df:8a:7a:f7:dd:f6:8a:cc: d1:3c:fd:d8:4f:a5:61:41:76:29:5e:0a:d0:c3:25: 14:5a:e7:b5:5f:50:74:de:6f:f2:bc:bc:7f:87:1a: 31:6e:8f:a5:72:d8:68:c1:e2:a7:dd:51:24:0c:cc: 25:eb:18:4f:16:33:27:62:dc:a3:60:79:f8:be:81: 5e:4b:8d:3e:fc:b4:08:93:f3:59:dd:67:17:32:07: 59:d4:a5:f4:93:26:2d:ba:45:f5:eb:83:86:91:e1: e4:d1:ec:6e:21:8d:c0:d3:9d:bf:74:de:c8:c7:57: f1:7d:2c:1a:df:d4:2e:7d:f0:7e:2f:14:9a:61:66: 65:6c:ca:a0:45:ca:39:b0:d9:c0:81:a7:e4:37:e9: 4b:bc:60:7c:12:65:0c:ab:f2:f7:34:ce:26:87:f6: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:BE:41:0C:1B:C1:73:EF:A7:B4:1C:51:5B:F0:C3:28:DC:90:11 X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:69:31:6e:f2:62:f2:b8:fb:91:2f:82:92:5a:d9:ba:3d:23: 2f:ef:82:f0:94:07:3d:50:68:b0:f1:35:95:ec:86:4b:27:09: d0:f1:79:d9:c1:1d:1d:27:ce:a4:fb:03:cb:33:20:35:f3:74: c1:92:af:64:ea:05:49:5a:9d:7e:46:24:15:be:f4:73:5a:a9: bf:48:6b:cd:c8:9d:d9:ca:6a:db:c8:9a:87:3a:13:ac:08:4f: 38:a9:27:b6:af:be:b0:22:da:ca:c5:80:f6:d3:a1:ab:9f:73: fa:72:0e:ab:fb:6d:a0:ca:09:97:77:c9:ce:1b:03:cf:3e:73: 53:49:24:6d:6a:5b:53:8d:f2:14:6f:09:da:cd:9b:c2:87:06: f0:c8:78:ae:c8:68:41:12:d3:ce:d8:21:f9:b7:b9:e7:6a:b3: 86:62:4e:04:15:41:f6:57:0f:3f:bf:1d:eb:b8:1b:86:b9:4f: a6:59:35:2e:b6:59:79:39:74:e4:c0:b9:f1:1b:fe:a0:ab:a1: 3e:4b:a2:63:a2:49:68:52:aa:98:e9:2f:ae:0b:40:95:f2:c6: d5:99:ca:a5:3c:91:24:a3:95:01:93:56:69:30:5c:e1:10:5d: 8b:ca:fc:2b:93:d8:79:5f:c9:a9:f0:9e:34:57:2b:5c:f4:5d: 3e:4d:bf:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjUwNzAyMjAzMDE1WhcNMjUwNzA5MjAzMDE1WjAYMRYwFAYD VQQDEw02ODY1OTZkNy05NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkfYNqyrfjvayiXDgrRZzfQwOk+XmQgIE/mEudc1hwz8hvi8Ea7JNdfKqP5s gY+21am9zrgagN+fNQrI7h29xHas+mizRLIwlDYCJTmXXygD3kQ0spAJZFU/in1u OWNa34p69932iszRPP3YT6VhQXYpXgrQwyUUWue1X1B03m/yvLx/hxoxbo+lctho weKn3VEkDMwl6xhPFjMnYtyjYHn4voFeS40+/LQIk/NZ3WcXMgdZ1KX0kyYtukX1 64OGkeHk0exuIY3A052/dN7Ix1fxfSwa39QuffB+LxSaYWZlbMqgRco5sNnAgafk N+lLvGB8EmUMq/L3NM4mh/akdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1evkEM G8Fz76e0HFFb8MMo3JARMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuaTFu8mLyuPuRL4KSWtm6PSMv74LwlAc9UGiw8TWV7IZLJwnQ8XnZ wR0dJ86k+wPLMyA183TBkq9k6gVJWp1+RiQVvvRzWqm/SGvNyJ3ZymrbyJqHOhOs CE84qSe2r76wItrKxYD206Grn3P6cg6r+22gygmXd8nOGwPPPnNTSSRtaltTjfIU bwnazZvChwbwyHiuyGhBEtPO2CH5t7nnarOGYk4EFUH2Vw8/vx3ruBuGuU+mWTUu tll5OXTkwLnxG/6gq6E+S6JjokloUqqY6S+uC0CV8sbVmcqlPJEko5UBk1ZpMFzh EF2Lyvwrk9h5X8mp8J40Vytc9F0+Tb8M -----END CERTIFICATE-----Generated at Thu Jul 3 10:12:04 2025 by rpki-client