$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json) Hash identifier: U5lb+TEBsZN4HfeC64Bqd3FjF6x6MvAZR0U11nnUUyM= Subject key identifier: DD:8E:67:50:4B:C0:F7:27:D8:C0:59:24:6D:48:5E:2B:71:0B:C5:BC Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft Manifest number: 0C2F Signing time: Wed 02 Jul 2025 18:56:27 +0000 Manifest this update: Wed 02 Jul 2025 18:56:26 +0000 Manifest next update: Wed 09 Jul 2025 18:56:26 +0000 Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: 89e5Er0E+L9813YEnt+of1i8Jhzala7nb77tSIeh60c=) 2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 4znOjftmOLUP9F0sqZtn3shUbp4rIvm9xbYnsSSpuqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Validity Not Before: Jul 2 18:56:26 2025 GMT Not After : Jul 9 18:56:26 2025 GMT Subject: CN=686580da-0332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:f3:42:a9:09:b8:f2:7d:b0:6b:41:9e:ef: 40:a9:f9:e6:d1:5c:c7:72:c6:b6:ad:a5:58:49:8d: e7:f2:23:cd:11:0a:7b:38:7b:94:cb:81:d3:c7:5e: 96:67:5a:7e:c8:9a:61:76:34:59:2e:0a:81:15:95: 6a:be:c8:a0:95:b0:13:38:cf:38:00:b0:ce:1a:69: 30:31:be:01:b6:07:44:41:9e:18:8a:4f:82:9e:cc: 71:7f:1f:e7:33:b1:db:55:2f:5d:f0:5a:a6:6d:cf: 5f:38:ce:c6:6d:46:c7:4a:bc:69:30:82:63:af:e0: d9:d2:d1:a5:d3:59:94:66:6b:f5:93:c7:68:7f:b7: 10:2b:aa:17:c0:c6:09:2a:12:c9:47:d1:49:55:74: 68:41:35:14:e2:da:99:03:b2:94:87:13:ae:91:32: 1a:55:e1:ad:b7:14:1a:70:33:44:ae:f1:ac:16:2f: 45:23:d5:15:9f:9b:9b:59:e1:bc:3e:5f:ca:4b:e2: 0f:dd:85:bf:c8:7f:7b:19:5c:72:57:b3:32:84:9e: 9e:1c:0f:99:b5:94:bf:ce:1f:d6:9f:a8:ab:27:48: 58:25:c7:8a:5d:83:92:e4:72:84:aa:0e:0c:a3:09: af:6a:6f:9c:e2:c6:ae:7a:fe:b3:87:3e:08:4e:50: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8E:67:50:4B:C0:F7:27:D8:C0:59:24:6D:48:5E:2B:71:0B:C5:BC X509v3 Authority Key Identifier: keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a4:50:5c:7f:66:cf:b4:b4:d0:7b:b7:57:8c:b0:c8:f6:a7: 9d:65:f9:ad:d3:8f:77:66:a1:b8:57:22:f2:05:4a:8a:d5:5b: 09:48:a7:d8:87:4f:02:ce:33:d2:9a:a7:48:56:a3:86:bf:f0: c0:f7:d8:e3:4d:1e:90:76:94:c0:41:56:07:83:68:11:e7:87: 22:5a:46:93:49:2c:6b:b7:1f:76:1b:66:92:cb:f9:ee:e4:f5: f1:23:15:86:8e:58:23:32:b0:4e:2e:19:a8:73:14:34:08:ee: 60:11:39:40:d3:92:54:b2:05:b2:0f:5e:f5:e5:76:42:db:90: c2:11:66:70:94:a6:2d:fa:1f:b1:e1:64:f9:81:73:70:7e:a2: 53:59:d2:ec:9c:f3:2c:ad:41:2c:fa:a0:23:48:7e:f5:b0:89: 67:28:bd:2f:7f:90:22:e3:0d:55:ce:67:f0:7d:57:c1:38:6d: 41:ab:82:1f:57:60:c2:5c:ec:52:d5:bf:cb:0d:8b:ea:1a:39: 1b:21:e8:1e:c2:68:c0:ac:e8:a6:58:ba:4f:0e:b9:a0:a7:a8: f2:bb:33:a6:e6:c2:e4:e2:99:ad:19:40:2b:a2:e7:37:54:8e: 5f:f6:53:7c:f7:de:a8:fe:68:d9:23:90:26:11:41:86:9c:8d: a3:87:61:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3 NDkwQjBBQjkwHhcNMjUwNzAyMTg1NjI2WhcNMjUwNzA5MTg1NjI2WjAYMRYwFAYD VQQDEw02ODY1ODBkYS0wMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzfzQqkJuPJ9sGtBnu9Aqfnm0VzHcsa2raVYSY3n8iPNEQp7OHuUy4HTx16W Z1p+yJphdjRZLgqBFZVqvsiglbATOM84ALDOGmkwMb4BtgdEQZ4Yik+Cnsxxfx/n M7HbVS9d8Fqmbc9fOM7GbUbHSrxpMIJjr+DZ0tGl01mUZmv1k8dof7cQK6oXwMYJ KhLJR9FJVXRoQTUU4tqZA7KUhxOukTIaVeGttxQacDNErvGsFi9FI9UVn5ubWeG8 Pl/KS+IP3YW/yH97GVxyV7MyhJ6eHA+ZtZS/zh/Wn6irJ0hYJceKXYOS5HKEqg4M owmvam+c4sauev6zhz4ITlD27wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2OZ1BL wPcn2MBZJG1IXitxC8W8MB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgpFBcf2bPtLTQe7dXjLDI9qedZfmt0493ZqG4VyLyBUqK1VsJSKfY h08CzjPSmqdIVqOGv/DA99jjTR6QdpTAQVYHg2gR54ciWkaTSSxrtx92G2aSy/nu 5PXxIxWGjlgjMrBOLhmocxQ0CO5gETlA05JUsgWyD1715XZC25DCEWZwlKYt+h+x 4WT5gXNwfqJTWdLsnPMsrUEs+qAjSH71sIlnKL0vf5Ai4w1VzmfwfVfBOG1Bq4If V2DCXOxS1b/LDYvqGjkbIegewmjArOimWLpPDrmgp6jyuzOm5sLk4pmtGUArouc3 VI5f9lN8996o/mjZI5AmEUGGnI2jh2GB -----END CERTIFICATE-----Generated at Thu Jul 3 10:30:27 2025 by rpki-client