$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft File: jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json) Hash identifier: at8D/LD4rLH3berMnVL4xgyJm+1SuRYR0wJMNH5An+A= Subject key identifier: B6:39:D0:43:0C:8B:F4:7B:D3:1C:2F:D2:42:55:42:8A:0A:1D:A8:B8 Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B Certificate issuer: /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft Manifest number: 9B Signing time: Thu 03 Jul 2025 06:30:31 +0000 Manifest this update: Thu 03 Jul 2025 06:30:31 +0000 Manifest next update: Thu 10 Jul 2025 06:30:31 +0000 Files and hashes: 1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: Xgxk20bmRq5RYRbGJm1pHL0myWzsfxuOfsX+VLqHTTs=) 2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: n3pzdI1R6OnpGAR7FmeF9nZ8iLEx5lsOyhq7ASsGK90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Validity Not Before: Jul 3 06:30:31 2025 GMT Not After : Jul 10 06:30:31 2025 GMT Subject: CN=68662387-5e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:ad:d2:4e:60:52:99:65:f5:14:98:52:6e: 76:57:40:92:e2:8a:f0:9c:5f:fe:98:1e:99:e5:15: 3c:a0:19:37:13:56:6b:a5:6f:25:8f:ed:46:30:a8: 97:15:27:bd:49:ac:88:75:8e:23:dc:b1:ff:23:b3: 21:84:c9:bb:83:c2:9b:92:76:b7:4c:09:69:6f:1d: bb:48:41:e0:b3:51:2b:14:4e:0e:49:ef:26:52:73: c9:ae:8d:82:0c:d7:9b:c7:8a:ce:39:2b:b4:ce:6d: f9:9f:3d:18:50:f8:c9:3d:52:a9:b4:be:69:c8:37: cd:dc:07:3a:c9:b3:52:2b:67:78:e0:c1:40:79:96: 63:70:7d:bf:9d:5b:3e:e0:d9:6b:28:88:01:5b:fa: f6:67:26:59:ca:a5:3c:ca:65:0a:55:17:70:da:65: 73:62:67:b4:55:b8:44:48:3a:51:3a:cd:c4:b7:de: e7:50:6c:bb:03:31:05:d7:4b:d8:bf:04:6d:a0:1b: ef:6d:87:61:0c:a3:f3:5f:0e:59:14:50:84:f7:76: 9d:20:d5:22:b6:d7:dd:51:b2:f7:ea:0c:ec:7f:07: 28:b7:a7:29:d7:52:f4:40:02:0a:0b:c7:9b:e4:85: fb:34:91:e9:49:97:42:26:58:a3:b0:a1:80:e2:c0: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:39:D0:43:0C:8B:F4:7B:D3:1C:2F:D2:42:55:42:8A:0A:1D:A8:B8 X509v3 Authority Key Identifier: keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:19:13:e4:85:47:16:69:b4:b9:ca:3b:ad:09:2d:0e:3d:40: 40:98:f8:a7:1c:f8:77:e1:57:16:7b:71:eb:a2:b1:66:8e:24: 25:1b:a7:3c:36:9f:f7:04:6e:82:bc:aa:8c:cc:5d:c5:37:9a: 0e:cf:d6:e3:e0:e1:85:ce:f5:40:0e:d1:ba:49:68:22:5e:ef: 6c:82:4e:41:10:58:f8:fc:5b:b5:7a:59:b3:12:2e:d8:e5:ef: a2:e5:07:dc:bd:29:f3:00:81:f3:01:66:73:d0:eb:9c:15:fc: 9f:c7:e1:63:b7:de:5d:c5:a8:47:ae:b7:36:9a:2c:cf:a1:70: b8:f3:7b:d4:ca:78:e7:7f:ad:f7:8c:7b:8e:9b:eb:f4:74:66: 98:c8:48:2c:ef:05:08:52:a5:b0:25:3a:67:57:b4:5b:b5:b5: aa:78:54:94:ec:be:11:ff:12:a1:cb:37:da:04:13:aa:71:81: b3:80:48:6d:3e:c7:08:2d:9a:80:57:69:2b:ac:9f:35:87:08: 00:6b:24:7d:49:7c:d8:41:11:3c:fa:84:2d:5a:33:00:aa:11: 5b:93:1c:09:ad:5e:53:6c:6b:b6:c2:8a:0f:04:34:ab:a5:e9: 3d:28:87:c0:dd:c2:3b:eb:b5:dd:22:e6:d6:16:b6:c4:23:ee: 29:e7:a4:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKDhFQTVCOTU2MzIyN0MyRTU4RDQzOEJDMTdCQTgyMjUw NzU0MjQ0M0IwHhcNMjUwNzAzMDYzMDMxWhcNMjUwNzEwMDYzMDMxWjAYMRYwFAYD VQQDEw02ODY2MjM4Ny01ZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2ut0k5gUpll9RSYUm52V0CS4orwnF/+mB6Z5RU8oBk3E1ZrpW8lj+1GMKiX FSe9SayIdY4j3LH/I7MhhMm7g8Kbkna3TAlpbx27SEHgs1ErFE4OSe8mUnPJro2C DNebx4rOOSu0zm35nz0YUPjJPVKptL5pyDfN3Ac6ybNSK2d44MFAeZZjcH2/nVs+ 4NlrKIgBW/r2ZyZZyqU8ymUKVRdw2mVzYme0VbhESDpROs3Et97nUGy7AzEF10vY vwRtoBvvbYdhDKPzXw5ZFFCE93adINUittfdUbL36gzsfwcot6cp11L0QAIKC8eb 5IX7NJHpSZdCJlijsKGA4sC9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY50EMM i/R70xwv0kJVQooKHai4MB8GA1UdIwQYMBaAFI6luVYyJ8LljUOLwXuoIlB1QkQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83MDQwQThFODZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1V05RNHZCZTZnaVVIVkNS RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pxVzVWaklud3VXTlE0dkJlNmdpVUhWQ1JEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83MDQwQThFODZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1 V05RNHZCZTZnaVVIVkNSRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrGRPkhUcWabS5yjutCS0OPUBAmPinHPh34VcWe3HrorFmjiQlG6c8 Np/3BG6CvKqMzF3FN5oOz9bj4OGFzvVADtG6SWgiXu9sgk5BEFj4/Fu1elmzEi7Y 5e+i5QfcvSnzAIHzAWZz0OucFfyfx+Fjt95dxahHrrc2mizPoXC483vUynjnf633 jHuOm+v0dGaYyEgs7wUIUqWwJTpnV7RbtbWqeFSU7L4R/xKhyzfaBBOqcYGzgEht PscILZqAV2krrJ81hwgAayR9SXzYQRE8+oQtWjMAqhFbkxwJrV5TbGu2wooPBDSr pek9KIfA3cI767XdIubWFrbEI+4p56Qc -----END CERTIFICATE-----Generated at Thu Jul 3 23:27:58 2025 by rpki-client