$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: pReNhaz5ua0fnyVY4+J6G97rHUHWELZJ4VZCD9dxGYs= Subject key identifier: EF:FA:AC:4B:C7:B7:93:AD:8C:40:1C:60:A2:A6:F9:1A:33:03:50:7B Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 0102 Signing time: Thu 03 Jul 2025 05:15:22 +0000 Manifest this update: Thu 03 Jul 2025 05:15:21 +0000 Manifest next update: Thu 10 Jul 2025 05:15:21 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: 8Wo7ZKs7vehW7aXKxU5EuVXaEaPPoh/dFnUsF3GRG48=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 3XSRq2gf3Qq1teYkUqCY6q4aLkAm0S7clGDEwM9Zv2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Jul 3 05:15:21 2025 GMT Not After : Jul 10 05:15:21 2025 GMT Subject: CN=686611e9-8c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:2a:a3:f9:6d:07:33:02:8e:42:f8:80:4f: 83:b8:9e:5e:1d:49:6d:25:f0:a5:e3:cd:ac:07:f2: 8c:d8:c9:d8:bd:14:14:fc:fc:f4:76:57:b4:ad:b6: 70:c4:71:d2:98:28:2b:fc:14:c3:23:6c:04:bc:93: d6:51:d4:5e:43:c6:d8:14:91:0e:eb:e1:ef:34:4a: d9:9c:4c:0f:42:ff:d4:e3:de:47:66:af:31:d5:bd: c7:99:7c:99:b9:08:02:9d:73:5b:72:95:05:e2:38: a3:e3:41:a5:4c:0e:d1:51:96:ec:3e:56:67:24:06: 32:3b:64:bc:39:ea:5d:20:0c:c8:83:1a:e8:d3:28: 35:b4:00:5f:72:42:e8:c6:3e:2b:41:9e:13:31:2f: c0:8c:a6:3c:1c:b3:e2:fc:d5:37:25:e6:21:ca:9a: b7:8f:96:24:e3:c8:ca:60:31:26:7d:2c:ca:dd:f1: e5:15:c7:a7:75:36:1f:4c:a2:5c:f9:33:fa:5a:52: b8:a4:8e:3e:27:a2:fe:fa:38:ce:f9:3b:2d:e6:29: ba:08:1d:88:f4:9b:77:11:03:3f:77:0f:20:54:18: 18:69:99:8c:88:38:f4:ac:8f:c7:e4:0e:a0:54:fe: da:94:01:e5:e2:57:51:05:99:b1:4c:d0:5a:06:8c: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FA:AC:4B:C7:B7:93:AD:8C:40:1C:60:A2:A6:F9:1A:33:03:50:7B X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:45:35:ad:00:22:13:9e:c9:2e:68:4c:96:ae:a6:05:25:ec: e4:61:98:56:15:6c:0d:27:f0:67:cc:f2:4c:a9:1c:07:d9:b9: 12:35:67:ef:4f:40:ac:20:08:a2:3e:cd:bc:64:48:7b:0b:78: 5e:e4:a6:ef:a4:4a:98:ce:ce:e8:e3:62:9e:3e:30:98:35:00: 27:99:ec:65:fa:7c:fa:26:58:1c:b1:f6:e4:2d:4c:e3:2d:83: cd:1e:76:4a:8c:66:1e:c5:e7:13:de:96:2f:df:cf:04:d1:8d: 69:14:7c:71:84:37:af:95:53:1e:3a:38:14:f0:ab:d8:94:f9: 3e:c2:77:2d:c7:83:f3:be:f9:41:ad:71:57:77:d7:2e:83:be: 26:d5:6b:f0:a6:89:77:ff:9e:1f:9d:50:cd:de:5b:88:7a:e0: 3e:90:19:e3:3d:bd:25:bd:d6:ad:4d:a1:a1:96:be:e7:ef:72: 81:44:f8:a8:25:c1:6d:aa:03:f4:27:c4:60:b1:60:fd:95:64: 2f:04:13:4b:1f:93:78:a7:bc:df:7a:42:7a:76:b4:d8:45:85: ac:d9:69:59:e9:f6:e4:dc:ce:5c:ea:b1:5d:fb:69:7c:73:79: 2a:c6:0a:60:2f:7e:3f:d4:71:de:ee:1b:51:f4:53:74:25:41: 0d:e5:43:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjUwNzAzMDUxNTIxWhcNMjUwNzEwMDUxNTIxWjAYMRYwFAYD VQQDEw02ODY2MTFlOS04YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PYqo/ltBzMCjkL4gE+DuJ5eHUltJfCl482sB/KM2MnYvRQU/Pz0dle0rbZw xHHSmCgr/BTDI2wEvJPWUdReQ8bYFJEO6+HvNErZnEwPQv/U495HZq8x1b3HmXyZ uQgCnXNbcpUF4jij40GlTA7RUZbsPlZnJAYyO2S8OepdIAzIgxro0yg1tABfckLo xj4rQZ4TMS/AjKY8HLPi/NU3JeYhypq3j5Yk48jKYDEmfSzK3fHlFcendTYfTKJc +TP6WlK4pI4+J6L++jjO+Tst5im6CB2I9Jt3EQM/dw8gVBgYaZmMiDj0rI/H5A6g VP7alAHl4ldRBZmxTNBaBoxymQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/6rEvH t5OtjEAcYKKm+RozA1B7MB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1RTWtACITnskuaEyWrqYFJezkYZhWFWwNJ/BnzPJMqRwH2bkSNWfv T0CsIAiiPs28ZEh7C3he5KbvpEqYzs7o42KePjCYNQAnmexl+nz6JlgcsfbkLUzj LYPNHnZKjGYexecT3pYv388E0Y1pFHxxhDevlVMeOjgU8KvYlPk+wnctx4PzvvlB rXFXd9cug74m1Wvwpol3/54fnVDN3luIeuA+kBnjPb0lvdatTaGhlr7n73KBRPio JcFtqgP0J8RgsWD9lWQvBBNLH5N4p7zfekJ6drTYRYWs2WlZ6fbk3M5c6rFd+2l8 c3kqxgpgL34/1HHe7htR9FN0JUEN5UMj -----END CERTIFICATE-----Generated at Fri Jul 4 22:06:02 2025 by rpki-client