$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: x7W630+TT9IkEb8koqX+ujPlAcfg0dRg8gprbZtXt6A= Subject key identifier: EC:73:95:01:F4:83:F3:69:7D:9A:76:C4:F2:66:E8:D8:04:6D:47:9E Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 012E Signing time: Tue 01 Jul 2025 05:07:11 +0000 Manifest this update: Tue 01 Jul 2025 05:07:10 +0000 Manifest next update: Tue 08 Jul 2025 05:07:10 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: aarUo0nd2rPBtO9K6LWBwJ0TpigyeWN+6M1E+MK/ikM=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: Jul 1 05:07:10 2025 GMT Not After : Jul 8 05:07:10 2025 GMT Subject: CN=68636cfe-3d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:3b:c8:ec:fe:36:3b:99:a9:d7:1f:45:7e: e4:b6:7e:16:51:36:6d:7b:41:5b:37:46:c3:7f:ae: 84:dc:7e:88:cb:a5:81:ef:aa:2c:aa:01:64:53:b1: 49:d5:d1:b2:d9:4e:d8:f1:38:0a:5b:f5:e7:92:a8: 59:77:2d:b7:05:e6:fd:03:49:ac:80:19:a5:a2:28: 9c:83:ef:cb:ae:55:5a:52:d7:f6:c0:75:b0:73:2d: b7:18:cc:b3:6f:91:b9:ec:6c:68:42:04:b3:d0:5a: 4d:79:3a:64:ce:e6:dd:5a:60:bf:ea:5c:27:c2:10: e7:e2:c0:9c:1b:a4:42:95:1f:97:55:bf:c9:90:5c: 92:8c:d1:e0:14:c0:01:86:c1:ba:67:dd:3e:7f:fe: 01:8d:8b:10:6c:5a:b4:5d:26:76:42:b1:45:fe:c5: f9:8c:5f:64:2e:5f:24:e7:15:0e:f4:ce:df:2d:d0: ec:29:1c:e6:bf:76:02:f7:9b:cd:ea:45:76:21:61: 78:68:bb:00:09:2f:50:71:ad:66:91:7d:73:d7:25: 60:ef:d8:c1:aa:dd:c7:41:37:3b:dd:7b:48:71:b2: 43:24:71:c4:42:e7:c3:4e:18:f3:f9:b2:fa:0c:1a: dc:29:4e:4d:92:19:f1:f6:cd:0f:f3:c1:85:0d:2f: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:95:01:F4:83:F3:69:7D:9A:76:C4:F2:66:E8:D8:04:6D:47:9E X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:4a:18:95:dd:1d:b9:cb:18:40:0c:ed:35:4e:b5:01:37:6b: f8:d6:5d:ec:cc:b1:80:fd:25:1c:d8:3a:c3:1d:c7:e6:94:80: d9:0f:4c:fa:40:e3:b9:4c:29:9e:26:54:fe:8a:d2:58:06:b9: 05:a3:40:fa:7f:bd:ae:28:18:cf:05:0e:f6:79:84:ec:2c:f5: c7:ec:30:c6:27:ae:e7:b4:c7:97:72:3d:5c:9d:d3:ef:20:eb: 10:52:93:1d:2b:50:45:fc:d1:bc:a4:46:66:8b:d4:29:fa:bc: e8:09:10:4e:0d:ad:4f:e9:de:64:22:2a:cd:2c:5f:d2:ca:c1: 8e:b0:30:ac:47:5f:f1:90:c5:16:ea:37:63:cc:c5:0f:1f:c6: 28:9a:72:04:5a:99:04:f2:30:f9:3b:82:72:8a:cc:7b:83:30: 8a:aa:9f:de:12:95:88:3d:4e:62:5e:22:5b:64:5c:8e:aa:17: 8e:e6:4f:8b:f7:e0:66:59:06:ba:8b:a0:b3:99:27:e8:29:87: ec:24:39:83:fb:26:37:b4:f3:b5:08:6f:30:3d:9d:c8:6e:bc: 1a:8f:8f:2e:eb:b6:95:6c:e6:8c:23:ca:b0:96:ee:5d:06:35: 69:21:a7:c5:cd:d6:46:6b:a8:ee:75:1d:33:d4:cb:83:b2:8b: 08:f8:71:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjUwNzAxMDUwNzEwWhcNMjUwNzA4MDUwNzEwWjAYMRYwFAYD VQQDEw02ODYzNmNmZS0zZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F47yOz+NjuZqdcfRX7ktn4WUTZte0FbN0bDf66E3H6Iy6WB76osqgFkU7FJ 1dGy2U7Y8TgKW/XnkqhZdy23Beb9A0msgBmloiicg+/LrlVaUtf2wHWwcy23GMyz b5G57GxoQgSz0FpNeTpkzubdWmC/6lwnwhDn4sCcG6RClR+XVb/JkFySjNHgFMAB hsG6Z90+f/4BjYsQbFq0XSZ2QrFF/sX5jF9kLl8k5xUO9M7fLdDsKRzmv3YC95vN 6kV2IWF4aLsACS9Qca1mkX1z1yVg79jBqt3HQTc73XtIcbJDJHHEQufDThjz+bL6 DBrcKU5Nkhnx9s0P88GFDS9YWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxzlQH0 g/NpfZp2xPJm6NgEbUeeMB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjRGNi9FMUNGM0M1NjkwREIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJ OFNiQWJvS1hEcnRJdGtZOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoShiV3R25yxhADO01TrUBN2v41l3szLGA/SUc2DrDHcfmlIDZD0z6 QOO5TCmeJlT+itJYBrkFo0D6f72uKBjPBQ72eYTsLPXH7DDGJ67ntMeXcj1cndPv IOsQUpMdK1BF/NG8pEZmi9Qp+rzoCRBODa1P6d5kIirNLF/SysGOsDCsR1/xkMUW 6jdjzMUPH8YomnIEWpkE8jD5O4Jyisx7gzCKqp/eEpWIPU5iXiJbZFyOqheO5k+L 9+BmWQa6i6CzmSfoKYfsJDmD+yY3tPO1CG8wPZ3Ibrwaj48u67aVbOaMI8qwlu5d BjVpIafFzdZGa6judR0z1MuDsosI+HHS -----END CERTIFICATE-----Generated at Wed Jul 2 15:26:00 2025 by rpki-client