$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: elYf9ZZPWWTx16oF+0lTudcHE+QyW8onSfStM3Mqdd8= Subject key identifier: 2D:DC:EC:4F:53:10:E4:BA:A0:E2:0A:EC:E1:CF:53:DD:8F:D3:DC:8C Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C70 Signing time: Wed 02 Jul 2025 18:30:48 +0000 Manifest this update: Wed 02 Jul 2025 18:30:47 +0000 Manifest next update: Wed 09 Jul 2025 18:30:47 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: qD+Vci1X7ZN4OLhHOz0R80wN5n44bktpTwxfoUdxeNA=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Jul 2 18:30:47 2025 GMT Not After : Jul 9 18:30:47 2025 GMT Subject: CN=68657ad8-ba08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:ec:93:9c:33:8e:f9:9d:4c:21:eb:ba:a5: 77:bd:15:2e:b1:79:19:a2:4e:5d:9e:c5:c3:75:e7: 94:79:d9:62:f1:ae:2f:6a:ce:37:c9:e3:b8:37:d4: e5:70:f7:f2:21:17:df:50:8a:4e:52:89:ea:0e:7b: 3b:a5:d2:fd:33:4a:48:2c:7b:b1:b5:33:93:44:9b: 8f:29:1b:0d:21:cc:75:01:53:f0:73:02:80:d2:97: d2:fb:54:56:a5:bb:95:2f:3e:43:05:2c:97:6f:b6: 46:72:c7:84:e0:01:d0:64:ef:63:01:e2:e1:d5:30: e1:aa:95:22:6d:23:6d:17:4d:cd:09:2d:c6:1d:dc: 70:69:c7:fa:3d:f8:0a:cb:56:00:92:04:52:98:63: 19:e5:d1:a4:25:15:49:a9:6f:7f:d3:ef:6a:3e:5b: 42:51:78:9b:6c:c5:a1:60:d8:b8:73:9e:7e:3c:f6: 69:cd:fb:14:41:00:73:a7:3d:84:8b:e7:53:4a:18: b1:0f:81:b4:91:f3:61:3d:30:69:68:a3:3b:81:0d: 56:ec:78:cf:4b:26:e6:4d:8b:73:88:d9:b0:b2:e5: 9c:ab:62:ea:71:75:d2:d6:f3:5b:cc:23:43:73:37: 54:f9:64:9d:f2:e7:73:58:03:14:54:09:4b:73:e0: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DC:EC:4F:53:10:E4:BA:A0:E2:0A:EC:E1:CF:53:DD:8F:D3:DC:8C X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7c:0e:b3:41:cf:43:cd:23:78:5b:cf:d5:aa:55:8d:22:db: 49:87:88:87:0f:5c:4c:65:81:7f:72:cc:db:88:7d:14:dd:2b: dc:c8:14:8e:dd:c6:6d:44:54:c4:05:72:99:3b:53:95:dc:c1: 51:00:c7:c3:84:74:fd:e7:ff:ea:22:02:f4:82:aa:98:bd:f7: d1:85:3d:83:d5:78:fe:12:8a:14:ad:b8:04:ce:b0:2d:79:d2: f6:c2:6d:5e:54:a1:e2:26:2d:85:a4:a7:0a:14:7a:c7:3d:6b: 5a:cf:f0:c4:60:8d:9f:f2:f3:72:a5:06:dc:6f:99:d6:be:8a: 0e:ff:50:7c:a2:7d:57:5a:20:55:45:e0:c7:3c:fe:89:2f:29: 36:d5:43:2c:f6:09:76:52:99:98:ca:65:4b:69:7f:85:c1:f9: a7:2a:2c:19:10:42:aa:f9:54:b4:b2:dd:66:50:e5:04:3d:27: 41:ed:fe:d2:01:6a:fc:e1:98:76:4e:27:c9:af:4b:13:ee:ed: a4:37:5c:35:6f:da:b8:6c:d3:b1:78:19:d4:d4:94:5a:8c:da: 7e:28:83:ee:8d:2b:78:ce:64:21:96:97:52:4f:92:5b:19:6d: b1:77:ac:62:4e:b8:04:80:a8:7a:dc:2d:30:a9:17:84:f8:dd: e1:72:f6:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwNzAyMTgzMDQ3WhcNMjUwNzA5MTgzMDQ3WjAYMRYwFAYD VQQDEw02ODY1N2FkOC1iYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WHsk5wzjvmdTCHruqV3vRUusXkZok5dnsXDdeeUedli8a4vas43yeO4N9Tl cPfyIRffUIpOUonqDns7pdL9M0pILHuxtTOTRJuPKRsNIcx1AVPwcwKA0pfS+1RW pbuVLz5DBSyXb7ZGcseE4AHQZO9jAeLh1TDhqpUibSNtF03NCS3GHdxwacf6PfgK y1YAkgRSmGMZ5dGkJRVJqW9/0+9qPltCUXibbMWhYNi4c55+PPZpzfsUQQBzpz2E i+dTShixD4G0kfNhPTBpaKM7gQ1W7HjPSybmTYtziNmwsuWcq2LqcXXS1vNbzCND czdU+WSd8udzWAMUVAlLc+BZtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3c7E9T EOS6oOIK7OHPU92P09yMMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6fA6zQc9DzSN4W8/VqlWNIttJh4iHD1xMZYF/cszbiH0U3SvcyBSO 3cZtRFTEBXKZO1OV3MFRAMfDhHT95//qIgL0gqqYvffRhT2D1Xj+EooUrbgEzrAt edL2wm1eVKHiJi2FpKcKFHrHPWtaz/DEYI2f8vNypQbcb5nWvooO/1B8on1XWiBV ReDHPP6JLyk21UMs9gl2UpmYymVLaX+FwfmnKiwZEEKq+VS0st1mUOUEPSdB7f7S AWr84Zh2TifJr0sT7u2kN1w1b9q4bNOxeBnU1JRajNp+KIPujSt4zmQhlpdST5Jb GW2xd6xiTrgEgKh63C0wqReE+N3hcvZR -----END CERTIFICATE-----Generated at Thu Jul 3 06:00:48 2025 by rpki-client