$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json) Hash identifier: TqISsbkt0ifRTZrONYNHyFVzi2YswDfvsJuIfIGkauA= Subject key identifier: C7:61:7D:6B:E1:1C:9B:C5:48:46:96:40:35:B9:B4:F6:D5:6E:BC:BD Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft Manifest number: 0153 Signing time: Thu 03 Jul 2025 04:13:06 +0000 Manifest this update: Thu 03 Jul 2025 04:13:06 +0000 Manifest next update: Thu 10 Jul 2025 04:13:06 +0000 Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: s897/4utpttfPaE9t1jO6xKFiH/ZCdwguVKLWC2ryWo=) 2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: IyPWuZN2CAoAoTar84CaLcssRy+6sPvCVGhYj/lXGDs=) 3: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: 8T3yBHmtCqlB+aM8ej4zblFk+WNFmZ0LxXxnA03WiR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Validity Not Before: Jul 3 04:13:06 2025 GMT Not After : Jul 10 04:13:06 2025 GMT Subject: CN=68660352-840a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:07:3a:95:f6:0d:13:1e:2d:3c:4e:75:a1: cf:04:fe:13:4c:ab:07:fa:59:a0:07:0d:b5:9d:aa: 62:86:0c:ed:7f:d1:31:83:ba:55:e2:18:bb:96:64: e4:ef:9d:02:db:26:7c:91:99:b9:a5:6f:ea:4b:46: 6a:ae:4f:11:6c:38:77:87:2d:5c:eb:a8:b0:35:e1: 0c:a2:36:d5:b9:80:52:96:ab:59:b4:88:e4:07:44: 28:35:33:1f:71:d1:61:0d:7b:53:fd:97:9c:42:0f: 06:96:b4:b9:ba:9e:46:b2:fc:83:a7:f0:f6:02:35: f9:91:13:98:b3:8b:61:dc:57:11:5c:82:9e:b1:16: 8a:eb:20:f3:14:af:5e:b4:f5:bc:28:66:0d:4b:ab: 75:6f:16:c8:17:aa:60:13:b0:85:26:2c:22:cb:82: 27:4d:1e:34:06:f5:f6:6e:34:c0:dc:1b:9b:d8:53: c1:64:05:6e:95:39:8a:d7:92:ea:22:04:13:ec:70: 85:94:b1:89:10:f4:11:d3:b8:8e:7e:80:d9:51:08: b1:bf:5b:6e:29:66:dd:2a:c4:a4:48:e2:f0:02:7e: 47:db:d8:6b:bc:44:a7:57:53:a1:1f:ea:cd:7b:e3: 52:e9:bb:3f:12:7b:36:35:5f:be:95:83:5d:69:d3: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:61:7D:6B:E1:1C:9B:C5:48:46:96:40:35:B9:B4:F6:D5:6E:BC:BD X509v3 Authority Key Identifier: keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:08:29:de:16:f6:01:98:fd:aa:ac:12:c8:1f:ba:ac:09:80: 86:c5:92:9e:12:38:b7:f0:65:cd:e8:74:bd:aa:94:c5:34:ab: 67:06:2b:ae:84:82:c4:8e:af:b4:4b:ad:43:d6:79:57:a5:7d: 69:80:ca:99:7d:34:e7:b7:26:2b:b6:c8:ba:1e:97:22:f5:a0: e5:3f:a2:5b:30:4a:83:db:d3:15:93:30:00:3b:a4:5b:43:59: 50:92:71:72:0a:b1:14:52:44:f1:50:5f:2a:10:37:f7:c0:09: 34:78:73:e5:c4:d7:04:b0:21:e0:00:e4:4e:04:49:c0:7e:78: 21:28:1b:d0:b2:b4:20:e6:d9:c2:47:fa:37:d1:d5:57:96:38: 4c:99:cf:6c:27:78:22:50:56:02:01:69:1c:29:ab:70:34:ee: 34:6b:34:f9:9d:07:fb:1a:71:10:5a:5d:4c:c1:ca:36:72:3d: fe:54:85:7e:91:a5:d6:22:cb:83:98:48:4e:b7:e8:c4:af:fc: d0:d1:7d:61:3c:38:04:b3:f9:62:7c:cb:43:dc:76:bc:5b:29: 6a:85:09:cb:a0:86:d1:41:09:3d:7a:8e:4e:87:30:c8:53:6e: 56:59:f9:81:8b:34:2a:be:d8:60:3d:e0:58:f7:f5:22:d0:df: 86:51:f4:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCRDYxMTAvBgNVBAUTKDI0ODQ4OUI3ODE4QjAwRTcwMDQwNUJBQkMxQUEzNTZD MEExOEYzOTQwHhcNMjUwNzAzMDQxMzA2WhcNMjUwNzEwMDQxMzA2WjAYMRYwFAYD VQQDEw02ODY2MDM1Mi04NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lkHOpX2DRMeLTxOdaHPBP4TTKsH+lmgBw21napihgztf9Exg7pV4hi7lmTk 750C2yZ8kZm5pW/qS0Zqrk8RbDh3hy1c66iwNeEMojbVuYBSlqtZtIjkB0QoNTMf cdFhDXtT/ZecQg8GlrS5up5GsvyDp/D2AjX5kROYs4th3FcRXIKesRaK6yDzFK9e tPW8KGYNS6t1bxbIF6pgE7CFJiwiy4InTR40BvX2bjTA3Bub2FPBZAVulTmK15Lq IgQT7HCFlLGJEPQR07iOfoDZUQixv1tuKWbdKsSkSOLwAn5H29hrvESnV1OhH+rN e+NS6bs/Ens2NV++lYNdadMaRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdhfWvh HJvFSEaWQDW5tPbVbry9MB8GA1UdIwQYMBaAFCSEibeBiwDnAEBbq8GqNWwKGPOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEJENi9BQkY4NzMwMjUw REMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFPY0FRRnVyd2FvMWJBb1k4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJU0p0NEdMQU9jQVFGdXJ3YW8xYkFvWTg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEJENi9BQkY4NzMwMjUwREMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFP Y0FRRnVyd2FvMWJBb1k4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnCCneFvYBmP2qrBLIH7qsCYCGxZKeEji38GXN6HS9qpTFNKtnBiuu hILEjq+0S61D1nlXpX1pgMqZfTTntyYrtsi6Hpci9aDlP6JbMEqD29MVkzAAO6Rb Q1lQknFyCrEUUkTxUF8qEDf3wAk0eHPlxNcEsCHgAOROBEnAfnghKBvQsrQg5tnC R/o30dVXljhMmc9sJ3giUFYCAWkcKatwNO40azT5nQf7GnEQWl1Mwco2cj3+VIV+ kaXWIsuDmEhOt+jEr/zQ0X1hPDgEs/lifMtD3Ha8WylqhQnLoIbRQQk9eo5OhzDI U25WWfmBizQqvthgPeBY9/Ui0N+GUfQ6 -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:09 2025 by rpki-client