$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: FONiomZR8Lk8RBbfCuJ2XORFP+GG4F2dzvRSY1jMnBM= Subject key identifier: 8C:E8:0F:AE:5C:A5:C3:1A:C9:74:86:B5:D5:59:D0:5B:56:40:B0:7A Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FAA Signing time: Sat 28 Jun 2025 17:20:31 +0000 Manifest this update: Sat 28 Jun 2025 17:20:30 +0000 Manifest next update: Sat 05 Jul 2025 17:20:30 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: J9AyOaDWizQztA66uGf5GToZYHCaaSXSfjItPTIGFGE=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4017 (0xfb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Jun 28 17:20:30 2025 GMT Not After : Jul 5 17:20:30 2025 GMT Subject: CN=6860245f-72aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a1:92:eb:f7:c6:56:7d:a1:2f:27:4f:f5:87: ff:e6:9b:49:92:e8:e7:3a:f2:5c:fa:dd:c1:c3:96: 4e:d9:ab:51:72:f4:26:1e:e1:26:81:ee:7c:11:92: 1d:00:bc:43:e1:aa:92:67:bc:4d:ff:01:cf:14:75: 23:2e:bf:6a:f6:36:6c:02:1d:be:f6:7b:5d:b0:a0: 25:b9:15:2d:58:f9:c6:d1:c6:4e:57:4d:e2:b8:44: 62:f3:08:5d:dc:5a:e9:c0:17:6a:20:25:cb:14:2c: 3a:85:0c:e5:52:f0:60:dd:53:6c:50:fe:75:b7:57: 95:42:e2:5c:e0:6f:82:16:59:de:de:f2:2a:cd:87: 8f:73:4e:c4:a0:ea:33:ea:9b:1d:d7:bd:dc:0e:93: 78:00:04:84:07:a2:3c:19:04:c5:4c:83:a3:be:c7: 2e:5a:f5:07:5b:f6:3e:15:c6:21:4f:28:e6:8e:73: 5f:da:7f:e4:5b:76:e5:16:ed:43:9d:59:6c:52:61: 71:38:56:45:01:70:80:d4:8d:4a:0e:d8:45:5c:5c: ea:36:e9:88:3a:dc:0e:bb:60:8e:80:67:f6:02:49: a6:60:63:7b:f0:19:0f:b1:15:61:14:64:f3:63:e5: 1c:7b:b3:ae:a9:69:a4:92:1e:dd:62:ef:cf:cc:b1: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:0F:AE:5C:A5:C3:1A:C9:74:86:B5:D5:59:D0:5B:56:40:B0:7A X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cb:4c:f4:77:5e:c7:f1:5f:14:59:28:44:8d:fa:9f:cf:aa: 03:82:62:5b:e2:fd:21:e0:ce:ba:e5:c7:34:cc:8c:1c:b4:04: 13:ab:2d:2d:95:e9:aa:e6:c2:cc:7f:db:d2:9e:bd:f0:d3:0a: e9:50:7d:1e:98:84:32:cf:bd:50:89:fd:53:1a:32:56:84:49: 24:25:37:43:87:41:92:76:e2:82:c7:5e:fe:3f:6e:e1:3b:c3: d7:28:06:9b:24:b6:34:06:0d:8f:cf:97:a1:da:32:de:da:b2: 03:64:38:5e:d0:28:8c:d9:43:43:ff:ed:31:f9:c1:0e:d0:a6: 2b:69:ea:c6:57:c7:8c:0e:65:c5:af:e0:2e:cd:c6:2e:58:7c: a6:0d:9b:1c:62:7e:35:a5:8a:60:8f:c4:78:36:f9:54:c6:a4: c9:1c:26:da:01:76:40:e9:bf:5a:45:83:c5:89:ec:0c:0d:0a: 01:7b:a7:1b:3c:be:6e:62:55:5c:ae:47:2c:f6:d4:52:b8:45: fe:85:44:29:c7:a9:fe:e6:fa:f4:c9:d9:6e:ca:5b:d1:50:03: 2e:aa:7b:57:42:57:8f:c2:fd:8b:70:b0:32:02:c9:df:09:05: a9:0b:38:f8:ba:a0:6a:68:5b:1d:a9:8a:df:3f:9d:a5:a8:c0: 2a:7e:5c:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwNjI4MTcyMDMwWhcNMjUwNzA1MTcyMDMwWjAYMRYwFAYD VQQDEw02ODYwMjQ1Zi03MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56GS6/fGVn2hLydP9Yf/5ptJkujnOvJc+t3Bw5ZO2atRcvQmHuEmge58EZId ALxD4aqSZ7xN/wHPFHUjLr9q9jZsAh2+9ntdsKAluRUtWPnG0cZOV03iuERi8whd 3FrpwBdqICXLFCw6hQzlUvBg3VNsUP51t1eVQuJc4G+CFlne3vIqzYePc07EoOoz 6psd173cDpN4AASEB6I8GQTFTIOjvscuWvUHW/Y+FcYhTyjmjnNf2n/kW3blFu1D nVlsUmFxOFZFAXCA1I1KDthFXFzqNumIOtwOu2COgGf2AkmmYGN78BkPsRVhFGTz Y+Uce7OuqWmkkh7dYu/PzLHmeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzoD65c pcMayXSGtdVZ0FtWQLB6MB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsy0z0d17H8V8UWShEjfqfz6oDgmJb4v0h4M665cc0zIwctAQTqy0t lemq5sLMf9vSnr3w0wrpUH0emIQyz71Qif1TGjJWhEkkJTdDh0GSduKCx17+P27h O8PXKAabJLY0Bg2Pz5eh2jLe2rIDZDhe0CiM2UND/+0x+cEO0KYraerGV8eMDmXF r+AuzcYuWHymDZscYn41pYpgj8R4NvlUxqTJHCbaAXZA6b9aRYPFiewMDQoBe6cb PL5uYlVcrkcs9tRSuEX+hUQpx6n+5vr0ydluylvRUAMuqntXQlePwv2LcLAyAsnf CQWpCzj4uqBqaFsdqYrfP52lqMAqflyd -----END CERTIFICATE-----Generated at Sun Jun 29 19:32:13 2025 by rpki-client