$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json) Hash identifier: hE9Tk2pTpL2kjEf57p6njXdaJewNENYJtpzz2WlfJTg= Subject key identifier: 48:E1:08:BF:04:FE:F0:97:9C:7A:63:94:48:32:B7:1B:85:99:94:0C Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft Manifest number: 025A Signing time: Sun 29 Jun 2025 01:21:17 +0000 Manifest this update: Sun 29 Jun 2025 01:21:16 +0000 Manifest next update: Sun 06 Jul 2025 01:21:16 +0000 Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: pET/dNjzl/rtxvDWhQg/kRd2Zk1MWbOvmJDrl5p/B0s=) 2: E60CA9B06B3311EFB79B5F87C4F9AE02.roa (hash: xA2I3SK1LrwCNTYfAy8aXGaXpbqj6PnMmp3xWe4cBbs=) 3: 274B6ADCF15B11ED950C456FC4F9AE02.roa (hash: BiugR8dn8pnpzPHCg7eZaT65u46wR3tiYmJITlqhZck=) 4: 26C50D3EF15B11ED950C456FC4F9AE02.roa (hash: H9+at/H3w6hcTEAgzVR2r70qV9olS6sufdVX4JIUdXE=) 5: 285AD17A061811EEADC2405AC4F9AE02.roa (hash: WVJ4UwY6KypbKvk4Ln4sfzY4jnw/x07G6eZ4nvVHo1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: Jun 29 01:21:16 2025 GMT Not After : Jul 6 01:21:16 2025 GMT Subject: CN=6860950d-9042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:d4:77:1b:64:32:dd:a5:17:99:e0:66:53: d1:1e:41:30:e6:20:7f:76:28:21:29:68:bf:3d:08: b1:97:e3:b4:a3:12:1b:1c:03:1d:19:82:a4:f6:f7: 0c:51:7a:25:d8:e6:99:3e:2b:56:87:6a:31:96:b1: e3:b1:12:80:9f:d0:92:92:8c:3f:7e:e3:ce:fa:ef: ce:57:96:2f:31:3f:32:d1:bc:17:22:ef:98:ba:cd: 80:d6:5e:81:a6:d2:c9:cf:c4:8c:d7:77:d4:1f:e0: 37:56:7a:3c:ce:24:cd:04:ac:19:1a:8e:ee:41:1b: b1:f0:7c:9f:e6:cc:4d:6d:e8:4f:a1:c6:03:25:20: fa:b3:c3:42:9f:b5:0f:62:02:04:6b:28:84:0b:da: 36:e1:71:f0:5e:42:ce:62:a6:85:88:51:69:1d:64: dd:43:d4:c7:30:09:9a:28:7f:22:3f:eb:b7:24:7a: 5d:71:73:98:89:7a:0f:85:f6:7e:d7:7b:71:f8:e7: 1d:02:48:3e:44:22:6b:32:7a:5d:c9:9a:a4:8a:d7: e2:0c:81:43:b9:da:27:56:b6:fc:22:ad:7e:81:c1: bc:3d:e4:c9:4b:fa:44:24:1b:68:e2:05:a8:14:6a: b5:2d:83:b4:b3:33:d1:74:2f:7a:e9:01:8b:5f:c5: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E1:08:BF:04:FE:F0:97:9C:7A:63:94:48:32:B7:1B:85:99:94:0C X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4d:83:bc:16:ce:7b:27:57:93:24:77:35:c7:52:01:78:78: e2:b4:f2:7e:03:be:13:bd:4e:1c:79:2b:30:6a:6e:2a:15:64: e7:3d:5f:76:69:77:a6:30:c6:84:31:35:9b:c7:a1:97:a4:ba: 21:36:78:0f:cd:26:7e:a3:b4:c1:ec:c7:53:77:3f:15:06:0a: 30:1c:f8:2e:08:d6:88:6d:2b:40:f9:a5:42:5a:55:66:1a:a8: ce:13:b8:e6:40:7b:4c:93:45:de:59:89:26:2c:a5:b8:bc:25: 16:bc:21:df:c7:e2:05:cb:8c:eb:96:e4:9f:d4:ce:e0:b4:3a: 3b:2e:f7:3c:a1:67:f4:01:6b:a6:1c:2d:b9:2d:09:37:61:bc: 43:bd:78:a3:27:b7:d4:6a:b7:9e:40:86:b3:e4:52:47:53:97: b9:e5:9b:69:e3:68:06:30:c3:82:ed:d6:27:83:25:2d:07:46: e3:c2:c2:5c:55:d7:55:fc:c1:b3:17:6d:e9:58:74:b3:ef:db: 82:59:05:0e:24:d9:af:84:a4:30:b5:e8:19:75:cd:ad:85:1a: b4:58:7c:f1:84:47:06:3a:0a:be:09:90:34:b6:21:dd:82:9a: a7:79:aa:3e:07:30:e1:26:0c:7a:2a:97:b9:c9:3a:ce:0b:6c: 5d:4d:94:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjUwNjI5MDEyMTE2WhcNMjUwNzA2MDEyMTE2WjAYMRYwFAYD VQQDEw02ODYwOTUwZC05MDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY3UdxtkMt2lF5ngZlPRHkEw5iB/dighKWi/PQixl+O0oxIbHAMdGYKk9vcM UXol2OaZPitWh2oxlrHjsRKAn9CSkow/fuPO+u/OV5YvMT8y0bwXIu+Yus2A1l6B ptLJz8SM13fUH+A3Vno8ziTNBKwZGo7uQRux8Hyf5sxNbehPocYDJSD6s8NCn7UP YgIEayiEC9o24XHwXkLOYqaFiFFpHWTdQ9THMAmaKH8iP+u3JHpdcXOYiXoPhfZ+ 13tx+OcdAkg+RCJrMnpdyZqkitfiDIFDudonVrb8Iq1+gcG8PeTJS/pEJBto4gWo FGq1LYO0szPRdC966QGLX8VAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjhCL8E /vCXnHpjlEgytxuFmZQMMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDNFRS8wMUU0RTY5NjIzQ0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9o Y1JzQUp6SlFSR19odEpPTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiTYO8Fs57J1eTJHc1x1IBeHjitPJ+A74TvU4ceSswam4qFWTnPV92 aXemMMaEMTWbx6GXpLohNngPzSZ+o7TB7MdTdz8VBgowHPguCNaIbStA+aVCWlVm GqjOE7jmQHtMk0XeWYkmLKW4vCUWvCHfx+IFy4zrluSf1M7gtDo7Lvc8oWf0AWum HC25LQk3YbxDvXijJ7fUareeQIaz5FJHU5e55Ztp42gGMMOC7dYngyUtB0bjwsJc VddV/MGzF23pWHSz79uCWQUOJNmvhKQwtegZdc2thRq0WHzxhEcGOgq+CZA0tiHd gpqneao+BzDhJgx6Kpe5yTrOC2xdTZTI -----END CERTIFICATE-----Generated at Sun Jun 29 10:47:50 2025 by rpki-client