$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: or1SqGoYSfPVMBuTuQZYukfEh9b/MorxwkHs4fhtiCc= Subject key identifier: 3F:23:BD:1B:CD:5B:70:61:74:44:9C:ED:70:3C:F7:5D:F4:CA:D5:39 Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0A2A Signing time: Mon 30 Jun 2025 20:14:18 +0000 Manifest this update: Mon 30 Jun 2025 20:14:17 +0000 Manifest next update: Mon 07 Jul 2025 20:14:17 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: xEVM/qilPgo6s6OP4/aHKlysEAkjoeoa3GWlgXvPn0Y=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Jun 30 20:14:17 2025 GMT Not After : Jul 7 20:14:17 2025 GMT Subject: CN=6862f01a-1e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:2a:ec:ae:37:b9:bb:01:ec:4b:a6:cd:9d: 8d:9c:e5:84:e5:fb:68:86:65:f6:e0:fc:ad:75:3a: 07:38:d1:11:a2:65:fe:f6:7e:df:cc:2f:0a:2c:46: 32:a1:b5:f5:22:3b:7e:d9:71:a3:8d:da:b5:f0:48: 99:83:df:86:ca:68:99:92:50:19:fe:b9:89:3b:85: 9a:3a:83:32:3b:60:cb:32:3e:e4:5f:50:57:d6:b5: 30:77:bc:fd:b6:56:6d:52:c2:f7:b6:d4:bb:63:c8: 1a:17:29:1e:91:34:63:00:c1:b0:54:0f:22:7a:a8: 7d:d6:cd:2a:d8:91:5b:31:a7:32:c0:f1:53:eb:55: ad:a8:c7:17:36:49:68:3b:a4:a9:3c:9b:e5:9e:0c: b7:31:96:17:f2:a2:12:eb:5e:ff:33:c1:13:29:88: d4:11:d0:92:ca:fc:fe:c2:fa:df:82:4c:c3:ad:8f: e9:e2:97:16:2a:f5:8e:1f:a8:4d:3d:6d:68:d4:ba: 8b:48:64:2d:50:d3:2f:40:82:75:39:43:be:6b:30: fa:fb:a2:ae:af:6f:4c:bf:1c:4e:5b:9b:19:3d:34: 61:7c:64:5b:66:cd:94:d3:2d:ef:a7:24:28:20:3b: 92:70:cd:97:14:c5:d5:16:b2:71:c7:f9:83:81:ab: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:23:BD:1B:CD:5B:70:61:74:44:9C:ED:70:3C:F7:5D:F4:CA:D5:39 X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:41:5a:9d:17:3f:68:0f:af:78:d2:18:93:d5:5d:0b:f6:c3: 1f:1f:56:60:77:1d:aa:bb:be:7f:10:83:37:42:97:07:8b:5e: 28:5e:81:c3:11:40:9d:4a:ce:a5:00:92:26:b9:e5:26:33:61: ec:eb:03:90:85:84:9d:99:1c:ea:e4:22:04:75:90:05:ce:fd: b8:86:91:33:0b:a6:e9:5c:d9:71:4f:d2:8f:c1:ee:87:3b:d8: c5:9f:ca:d8:00:1b:0b:4a:b1:38:1a:08:e1:b6:19:1c:70:db: 21:1c:0a:67:9d:3d:9f:4e:2b:70:be:18:eb:a7:6e:d8:89:4b: 78:5d:07:b9:e1:7d:5d:7f:84:1b:3f:b4:cc:30:95:d3:90:af: 0e:37:0a:22:c8:3f:57:af:59:d5:65:86:48:97:ff:09:ee:7b: a0:9f:b7:27:18:6f:f6:12:e9:4b:02:97:d7:3f:39:c9:fa:1e: e1:36:78:98:c9:03:b5:87:82:cd:73:be:1a:1e:5a:e6:56:93: 2c:c7:70:a2:5b:c0:25:25:b5:4c:69:ee:da:ad:85:10:a5:ef: fc:0a:aa:78:51:67:6e:a0:91:e6:a7:c4:10:ba:1f:8d:5b:f7: 36:96:6d:1e:ae:44:ba:00:b4:a1:be:56:eb:f2:12:0f:6a:24: 0e:ce:94:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjUwNjMwMjAxNDE3WhcNMjUwNzA3MjAxNDE3WjAYMRYwFAYD VQQDEw02ODYyZjAxYS0xZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3Uq7K43ubsB7EumzZ2NnOWE5ftohmX24PytdToHONERomX+9n7fzC8KLEYy obX1Ijt+2XGjjdq18EiZg9+GymiZklAZ/rmJO4WaOoMyO2DLMj7kX1BX1rUwd7z9 tlZtUsL3ttS7Y8gaFykekTRjAMGwVA8ieqh91s0q2JFbMacywPFT61WtqMcXNklo O6SpPJvlngy3MZYX8qIS617/M8ETKYjUEdCSyvz+wvrfgkzDrY/p4pcWKvWOH6hN PW1o1LqLSGQtUNMvQIJ1OUO+azD6+6Kur29MvxxOW5sZPTRhfGRbZs2U0y3vpyQo IDuScM2XFMXVFrJxx/mDgasX8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8jvRvN W3BhdESc7XA89130ytU5MB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvQVqdFz9oD6940hiT1V0L9sMfH1Zgdx2qu75/EIM3QpcHi14oXoHD EUCdSs6lAJImueUmM2Hs6wOQhYSdmRzq5CIEdZAFzv24hpEzC6bpXNlxT9KPwe6H O9jFn8rYABsLSrE4GgjhthkccNshHApnnT2fTitwvhjrp27YiUt4XQe54X1df4Qb P7TMMJXTkK8ONwoiyD9Xr1nVZYZIl/8J7nugn7cnGG/2EulLApfXPznJ+h7hNniY yQO1h4LNc74aHlrmVpMsx3CiW8AlJbVMae7arYUQpe/8Cqp4UWduoJHmp8QQuh+N W/c2lm0erkS6ALShvlbr8hIPaiQOzpSh -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:34 2025 by rpki-client