$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json) Hash identifier: fR296Nw0B0DMK3g05M51WciHlpPKXWnTcup/BwItBrw= Subject key identifier: A4:63:03:3E:8F:03:A5:33:EE:2E:97:FA:A1:92:DC:57:66:EA:53:65 Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft Manifest number: 028E Signing time: Sun 29 Jun 2025 01:09:13 +0000 Manifest this update: Sun 29 Jun 2025 01:09:12 +0000 Manifest next update: Sun 06 Jul 2025 01:09:12 +0000 Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: Ox5ATI0k7mPzmcuqLmRopMr3o5C9KPu7Theiq7MlX9I=) 2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: hJkxXQfC6FPhKQvUl8F7nqWwJZPrWQsil7QshGWSWw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Validity Not Before: Jun 29 01:09:12 2025 GMT Not After : Jul 6 01:09:12 2025 GMT Subject: CN=68609238-312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:97:37:86:2b:5b:84:97:a5:6d:f7:ab:cd: 9a:d4:8f:e5:ab:64:fc:59:8e:75:82:19:12:e6:ed: f1:01:d6:84:77:e0:1f:80:5c:28:2b:41:9e:5b:4a: 87:5f:dc:cb:a8:fc:83:9b:59:11:c2:50:d2:57:2c: db:05:7a:35:29:10:43:90:c6:d4:c1:c5:0a:7a:f7: 15:ed:71:1f:cb:43:d9:1d:47:2f:08:86:aa:34:31: ae:bf:95:b9:8a:a7:f3:c5:2a:a1:92:c1:0f:de:67: ee:43:f5:19:68:8b:7a:2d:18:85:20:24:b3:84:f9: b7:cb:0d:94:8a:74:c9:81:1b:b8:82:aa:08:6f:89: 92:63:7e:e3:4a:e0:46:19:6c:1c:a6:75:a3:27:b3: 3e:22:70:94:d7:a2:31:24:68:39:dc:0c:1e:63:f8: 4e:22:15:b8:e2:be:33:43:a4:e5:a4:63:83:99:d3: df:7c:31:48:88:00:03:ea:d5:06:29:e5:ef:07:4a: 37:62:b5:ce:e7:c4:47:25:72:cd:84:69:09:a8:03: a6:71:ec:cc:20:fb:33:ca:d9:e6:7c:74:e5:57:d6: 38:1a:a3:ff:2f:4b:c3:d9:46:55:86:b3:8e:e8:50: e5:69:21:42:f7:14:12:02:b2:7b:7e:86:24:77:76: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:63:03:3E:8F:03:A5:33:EE:2E:97:FA:A1:92:DC:57:66:EA:53:65 X509v3 Authority Key Identifier: keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4c:38:c4:79:84:31:fe:d5:3f:a5:73:a8:3d:d5:f9:55:95: b8:47:57:ad:af:d5:3f:f1:f3:b2:9e:08:64:f0:fc:e4:9b:6f: 87:bf:5d:03:14:97:b1:f0:ff:69:c9:af:d1:72:bc:22:3f:55: 9e:56:89:bb:ab:de:74:dc:6c:76:01:d0:ba:60:fa:78:4d:e4: 04:44:05:8b:34:34:79:88:13:d3:cc:09:34:a5:9f:ed:fa:12: dc:58:6c:ce:ef:c6:00:1a:2e:8b:0e:5c:05:20:f8:24:6f:56: 88:f9:4f:01:c8:76:1f:36:65:3b:24:53:3a:1c:f9:d4:c8:02: f1:2a:f5:3b:97:60:f9:3a:a8:f7:54:f2:78:86:a1:31:ba:a3: 15:c5:40:55:ab:1e:05:b7:6d:e9:cc:08:0b:27:51:94:59:90: a6:7c:36:11:d7:25:f0:cd:16:61:20:ae:9d:49:8c:f6:55:5d: 10:e6:04:83:be:8f:1c:fb:25:fb:b9:f2:2a:c0:ab:79:00:e8: 03:15:aa:ca:6f:a3:6d:74:d0:28:3d:cd:01:b1:82:38:46:2d: 98:29:b9:98:e4:10:71:e7:ab:85:97:c8:1d:35:f1:61:55:fd: 91:a2:ba:69:21:7a:2b:8b:e5:0f:92:ff:c4:98:a8:a2:b0:8d: 10:0c:b9:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcwQjcxMTAvBgNVBAUTKDI3Nzc3OUFDNjkzNkEyRDMyMTRBNUYxNzQwMjEzRkRC OTI1NkM2QTMwHhcNMjUwNjI5MDEwOTEyWhcNMjUwNzA2MDEwOTEyWjAYMRYwFAYD VQQDEw02ODYwOTIzOC0zMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXWXN4YrW4SXpW33q82a1I/lq2T8WY51ghkS5u3xAdaEd+AfgFwoK0GeW0qH X9zLqPyDm1kRwlDSVyzbBXo1KRBDkMbUwcUKevcV7XEfy0PZHUcvCIaqNDGuv5W5 iqfzxSqhksEP3mfuQ/UZaIt6LRiFICSzhPm3yw2UinTJgRu4gqoIb4mSY37jSuBG GWwcpnWjJ7M+InCU16IxJGg53AweY/hOIhW44r4zQ6TlpGODmdPffDFIiAAD6tUG KeXvB0o3YrXO58RHJXLNhGkJqAOmcezMIPszytnmfHTlV9Y4GqP/L0vD2UZVhrOO 6FDlaSFC9xQSArJ7foYkd3YR4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRjAz6P A6Uz7i6X+qGS3Fdm6lNlMB8GA1UdIwQYMBaAFCd3eaxpNqLTIUpfF0AhP9uSVsaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzBCNy9BNTI2NEVFMDBC REQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90TWhTbDhYUUNFXzI1Sld4 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozZDVyR2syb3RNaFNsOFhRQ0VfMjVKV3hxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzBCNy9BNTI2NEVFMDBCREQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90 TWhTbDhYUUNFXzI1Sld4cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOTDjEeYQx/tU/pXOoPdX5VZW4R1etr9U/8fOynghk8Pzkm2+Hv10D FJex8P9pya/RcrwiP1WeVom7q9503Gx2AdC6YPp4TeQERAWLNDR5iBPTzAk0pZ/t +hLcWGzO78YAGi6LDlwFIPgkb1aI+U8ByHYfNmU7JFM6HPnUyALxKvU7l2D5Oqj3 VPJ4hqExuqMVxUBVqx4Ft23pzAgLJ1GUWZCmfDYR1yXwzRZhIK6dSYz2VV0Q5gSD vo8c+yX7ufIqwKt5AOgDFarKb6NtdNAoPc0BsYI4Ri2YKbmY5BBx56uFl8gdNfFh Vf2RorppIXori+UPkv/EmKiisI0QDLkD -----END CERTIFICATE-----Generated at Sun Jun 29 17:01:23 2025 by rpki-client