$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: icmmLCIgye/fiijlb9WCmxygAamQUxNBDVBL99eYxno= Subject key identifier: F2:E6:33:7C:9B:A0:CA:5A:1B:6C:C3:62:59:D6:9A:04:A6:50:4F:56 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 58 Signing time: Thu 03 Jul 2025 07:24:52 +0000 Manifest this update: Thu 03 Jul 2025 07:24:51 +0000 Manifest next update: Thu 10 Jul 2025 07:24:51 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: Mae3rO/Nz0z5bqaGMVrM8YzxvvHkj1lHTqqIMB9/CSI=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Jul 3 07:24:51 2025 GMT Not After : Jul 10 07:24:51 2025 GMT Subject: CN=68663043-38d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:29:d6:12:48:91:e8:6d:f1:72:1c:9c:b4: e2:9c:08:05:76:8b:de:54:7a:33:ad:b8:40:cc:31: de:b4:ca:17:2d:9e:fe:b9:f7:db:cd:b7:4f:e9:c3: 64:c6:a0:35:b0:df:10:ab:b8:36:c6:2b:ea:ce:54: 99:03:ba:26:20:40:d5:2f:e3:97:e5:61:69:c1:ee: 15:7b:20:73:92:b3:4f:90:78:01:a9:44:7f:89:a2: c5:ad:3c:52:a3:5a:bc:32:4e:f7:68:8b:42:4a:5a: 5d:ad:f0:5a:81:be:4d:80:0c:bb:f3:1e:6d:22:30: a9:03:9d:a4:91:cc:9f:17:7c:e7:31:ce:ec:b3:b9: 23:e0:19:11:44:79:5b:19:34:e6:5e:3e:c4:dc:b6: 73:7a:62:f6:10:39:c0:48:12:aa:28:85:74:bd:ec: aa:45:5c:ce:d6:52:cd:71:0c:57:3d:8e:87:ee:71: fa:03:4c:53:d1:5f:db:4b:5f:bb:4d:f8:0b:47:da: 40:83:f4:b6:5f:5b:33:fd:41:cf:0e:cd:01:bf:6f: a2:9d:5f:57:12:70:9a:fa:43:ed:77:c0:87:08:07: 6c:a6:b1:10:52:80:74:5b:09:30:4f:11:37:8b:1e: e2:97:60:09:f8:7b:c5:48:de:18:40:dc:f2:9b:b4: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:33:7C:9B:A0:CA:5A:1B:6C:C3:62:59:D6:9A:04:A6:50:4F:56 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e8:a6:8f:ad:4e:b0:5d:1a:e1:e1:ac:9e:67:b7:5c:87:72: 4c:37:8d:33:8e:71:91:04:f7:f1:d5:05:fe:a9:9f:85:2f:76: 87:c8:ff:25:66:f5:40:ab:b8:04:36:3a:b2:88:39:d7:29:a3: 30:96:9b:c7:f7:03:70:7d:46:7c:1f:04:5f:c3:2e:ed:6d:9d: e8:47:bb:c8:d3:55:fd:76:0c:79:1b:e2:a6:7c:b0:eb:99:10: bd:b4:d7:70:10:46:4f:46:b2:5e:46:59:c0:b8:15:2e:c0:90: 73:43:01:f2:b3:cf:b1:56:bb:e7:03:f4:3d:a7:75:5c:3f:76: 24:41:46:a7:b2:4c:2a:b5:c4:70:cf:21:2c:dd:4f:9c:db:f7: 16:c0:44:a4:c4:5e:17:2e:86:b7:b4:f3:ba:11:5f:e9:aa:37: d1:f2:7a:46:e8:c3:e4:00:45:d4:6f:c8:b4:30:38:03:57:92: 51:5c:45:8e:0b:d1:09:a6:6c:78:87:51:d1:fe:6e:c8:ca:03: 8c:9c:f4:4b:25:9d:a7:3c:3d:c4:d4:54:a3:f2:58:16:8d:c0: 0b:ce:ca:1c:7e:99:1f:c2:03:19:69:81:d9:8b:21:50:b1:fd: f6:4d:04:c1:bf:9a:e3:bd:ff:97:03:5d:12:95:27:fe:34:1b: 9f:42:be:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYzNjM0NEY3MTU2 MDBEOUE1ODAeFw0yNTA3MDMwNzI0NTFaFw0yNTA3MTAwNzI0NTFaMBgxFjAUBgNV BAMTDTY4NjYzMDQzLTM4ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK2SnWEkiR6G3xchyctOKcCAV2i95UejOtuEDMMd60yhctnv6599vNt0/pw2TG oDWw3xCruDbGK+rOVJkDuiYgQNUv45flYWnB7hV7IHOSs0+QeAGpRH+JosWtPFKj WrwyTvdoi0JKWl2t8FqBvk2ADLvzHm0iMKkDnaSRzJ8XfOcxzuyzuSPgGRFEeVsZ NOZePsTctnN6YvYQOcBIEqoohXS97KpFXM7WUs1xDFc9jofucfoDTFPRX9tLX7tN +AtH2kCD9LZfWzP9Qc8OzQG/b6KdX1cScJr6Q+13wIcIB2ymsRBSgHRbCTBPETeL HuKXYAn4e8VI3hhA3PKbtP2bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8uYzfJug ylobbMNiWdaaBKZQT1YwHwYDVR0jBBgwFoAUJ23PPyNBrcfQvEbzY0T3FWANmlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNEI5L0NFODQwNTY4RDIz NTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1s Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjIzUFB5TkJyY2ZRdkVielkwVDNGV0FObWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NEI5L0NFODQwNTY4RDIzNTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNm UXZFYnpZMFQzRldBTm1sZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLopo+tTrBdGuHhrJ5nt1yHckw3jTOOcZEE9/HVBf6pn4UvdofI/yVm 9UCruAQ2OrKIOdcpozCWm8f3A3B9RnwfBF/DLu1tnehHu8jTVf12DHkb4qZ8sOuZ EL2013AQRk9Gsl5GWcC4FS7AkHNDAfKzz7FWu+cD9D2ndVw/diRBRqeyTCq1xHDP ISzdT5zb9xbARKTEXhcuhre087oRX+mqN9Hyekbow+QARdRvyLQwOANXklFcRY4L 0QmmbHiHUdH+bsjKA4yc9Eslnac8PcTUVKPyWBaNwAvOyhx+mR/CAxlpgdmLIVCx /fZNBMG/muO9/5cDXRKVJ/40G59CvgQ= -----END CERTIFICATE-----Generated at Fri Jul 4 07:43:00 2025 by rpki-client