$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: UxCpXp+LtoAkC892Sh+L9u4EaUvKd6Rmh8SrI2P1b88= Subject key identifier: 6A:E3:C2:89:97:5D:B6:C9:91:38:5A:98:07:F7:81:84:7B:98:7D:61 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: 97 Signing time: Thu 03 Jul 2025 06:35:57 +0000 Manifest this update: Thu 03 Jul 2025 06:35:57 +0000 Manifest next update: Thu 10 Jul 2025 06:35:56 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: 2SdsW7XhlGwkxgIKoVYUq5sVD58EhfAf3i7dCQMkfbo=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: /HTBqf5H3Uz657hsatlKZqGr2vioW9ZJotjtVpnDq5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Jul 3 06:35:57 2025 GMT Not After : Jul 10 06:35:56 2025 GMT Subject: CN=686624cd-6a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ce:8b:99:63:02:26:27:b1:ff:9b:4c:67:01: 71:6a:df:d0:d5:da:85:0b:91:8d:42:d5:0e:83:7e: a2:dd:24:c3:48:9f:f1:aa:6a:6c:6c:31:18:13:c2: b7:6b:70:89:62:f2:d9:32:3a:6d:64:a1:d6:14:a9: 39:f1:ad:f0:66:7b:cf:26:53:ba:49:e3:5a:24:b4: 17:24:89:67:6d:ce:a8:39:7f:cf:58:b6:1f:bf:aa: 80:04:d1:8c:4d:07:5b:61:50:00:5e:22:3e:55:30: 10:c9:f0:26:8c:9c:d5:36:4a:31:28:dd:ed:af:e8: d7:2e:31:16:01:3e:6c:64:a9:44:69:e8:61:66:7e: 97:b7:5c:dc:ed:22:f8:11:70:46:a8:98:12:e0:f2: 2f:a3:2b:2f:63:71:13:7f:1c:ea:b9:6e:b4:2a:99: 5a:2b:38:98:1a:0a:b0:10:26:fa:c5:32:0b:32:5a: e9:ce:28:72:7a:7e:ac:f5:16:9f:bb:61:78:c4:c1: 01:95:c7:1d:08:36:ac:70:f7:fd:aa:ac:6b:8f:c8: a8:9c:e7:d4:24:66:4d:60:ef:0f:61:48:01:59:fa: 01:c3:70:53:38:93:9c:10:a0:f6:19:3f:2a:3e:e4: 92:20:42:32:e7:f1:ab:53:0c:8d:f7:68:e4:76:2e: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E3:C2:89:97:5D:B6:C9:91:38:5A:98:07:F7:81:84:7B:98:7D:61 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:86:e0:6a:28:0a:4d:a0:ef:29:28:e6:b3:35:c8:be:b1:c2: da:6c:a9:90:26:28:a0:7f:08:ad:9e:09:5c:a3:4d:1d:e7:6d: 40:fd:d3:11:02:65:51:46:33:2a:1c:34:36:61:49:ab:88:00: 0d:ff:21:42:09:ae:d9:86:17:48:d0:45:93:bd:48:64:52:ea: 8f:92:27:8c:0b:bf:47:ac:ae:c9:44:3f:cf:c3:46:0b:37:1f: c5:e9:34:06:35:d1:58:a1:a7:18:49:7f:e4:ec:09:76:75:8f: 5d:e2:9b:28:b1:6c:53:05:18:7b:c1:17:d4:7a:e0:90:ef:33: d8:f2:a5:bc:9f:bf:72:06:5b:49:f1:59:55:29:2d:99:06:89: c5:be:a8:32:e8:eb:4b:51:40:48:c9:fe:4e:77:bf:eb:83:b4: c7:68:9d:51:38:54:26:b0:ba:f4:0c:7c:5e:cc:17:03:61:e4: be:46:8a:c0:f5:2e:66:fd:a4:41:3e:0d:f5:a8:94:55:6c:cc: d9:e1:2b:5c:31:26:00:64:45:cd:1a:d1:b3:63:17:c7:ba:c5: 7d:19:79:c5:61:d8:7d:c2:29:f1:7c:ce:a0:99:2b:c0:fd:d1: d2:53:ae:93:ca:8e:61:1b:bd:e2:bb:5f:2b:26:e4:64:b4:d0: 58:e3:3c:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDhERDQxNDQ4NTkxN0NENEM4MDE2N0JEQTE5RDcyNDk2 NDZCMDY3MjUwHhcNMjUwNzAzMDYzNTU3WhcNMjUwNzEwMDYzNTU2WjAYMRYwFAYD VQQDEw02ODY2MjRjZC02YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3c6LmWMCJiex/5tMZwFxat/Q1dqFC5GNQtUOg36i3STDSJ/xqmpsbDEYE8K3 a3CJYvLZMjptZKHWFKk58a3wZnvPJlO6SeNaJLQXJIlnbc6oOX/PWLYfv6qABNGM TQdbYVAAXiI+VTAQyfAmjJzVNkoxKN3tr+jXLjEWAT5sZKlEaehhZn6Xt1zc7SL4 EXBGqJgS4PIvoysvY3ETfxzquW60KplaKziYGgqwECb6xTILMlrpzihyen6s9Raf u2F4xMEBlccdCDascPf9qqxrj8ionOfUJGZNYO8PYUgBWfoBw3BTOJOcEKD2GT8q PuSSIEIy5/GrUwyN92jkdi6RQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrjwomX XbbJkThamAf3gYR7mH1hMB8GA1UdIwQYMBaAFI3UFEhZF81MgBZ72hnXJJZGsGcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EMjdDOTE1Qzc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpVeUFGbnZhR2Rja2xrYXda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EMjdDOTE1Qzc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpV eUFGbnZhR2Rja2xrYXdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdhuBqKApNoO8pKOazNci+scLabKmQJiigfwitnglco00d521A/dMR AmVRRjMqHDQ2YUmriAAN/yFCCa7ZhhdI0EWTvUhkUuqPkieMC79HrK7JRD/Pw0YL Nx/F6TQGNdFYoacYSX/k7Al2dY9d4psosWxTBRh7wRfUeuCQ7zPY8qW8n79yBltJ 8VlVKS2ZBonFvqgy6OtLUUBIyf5Od7/rg7THaJ1ROFQmsLr0DHxezBcDYeS+RorA 9S5m/aRBPg31qJRVbMzZ4StcMSYAZEXNGtGzYxfHusV9GXnFYdh9winxfM6gmSvA /dHSU66Tyo5hG73iu18rJuRktNBY4zwN -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:26 2025 by rpki-client