$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: X98tneTft8Q957uWMsE0JMT2/gYh+F80vzVw1KSvkN8= Subject key identifier: 48:2A:84:15:6E:05:3F:5B:01:6B:09:72:19:70:63:6C:C3:58:0D:87 Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 0759 Signing time: Mon 30 Jun 2025 21:55:08 +0000 Manifest this update: Mon 30 Jun 2025 21:55:08 +0000 Manifest next update: Mon 07 Jul 2025 21:55:08 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: 5qdoXJ7ujGgzxjqkiGsEJgT4WAeItsP8g7z1WsEN2Eo=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Jun 30 21:55:08 2025 GMT Not After : Jul 7 21:55:08 2025 GMT Subject: CN=686307bc-c47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:5a:0e:f2:ec:48:58:bc:66:a4:5b:e0:60: ec:b0:7d:50:73:30:d8:5f:c2:4d:1e:ac:63:df:4a: 67:bf:04:2f:a6:2e:7f:3c:0c:a7:e8:bf:09:19:e4: 52:1d:86:6d:3d:6b:08:f9:83:bd:ae:fd:1c:ac:48: 34:63:af:21:b1:47:6a:9f:fe:b2:46:e5:a5:2d:cd: 7b:d6:a3:69:8e:f0:0c:d7:b0:b6:9d:bb:68:44:c9: 6a:6b:33:7b:f9:54:6c:a2:69:f9:89:f4:40:a4:d2: c9:31:f1:81:9d:88:7d:14:d7:36:c5:16:84:88:6a: d7:fe:c3:8d:5d:a3:3a:6c:6b:45:42:ad:77:13:80: 42:3b:3d:73:8c:e7:71:12:69:29:38:ea:e2:dc:7b: 4d:9f:cc:af:de:7b:38:31:8d:76:37:e1:d8:6e:04: c3:dd:4e:bc:ea:9b:b4:bf:08:5f:86:5a:ff:56:cf: 7a:1d:46:b1:74:bd:11:55:8a:60:5e:f9:57:74:8f: 68:5e:3a:56:9b:74:60:02:bd:14:fc:31:02:5f:92: 48:23:7d:a9:0f:c9:f2:b1:97:f7:1a:2d:4e:d0:eb: a1:aa:f2:94:db:64:21:b9:ca:1c:8c:61:e2:cf:b9: 6b:58:a2:a3:26:98:e2:1a:c7:2f:47:30:8d:a9:66: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2A:84:15:6E:05:3F:5B:01:6B:09:72:19:70:63:6C:C3:58:0D:87 X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:93:ac:9a:1e:f5:9a:64:99:dd:d3:52:3b:dc:ca:2d:77:22: 70:11:6b:31:8e:e1:85:1b:d6:9b:52:1e:a0:24:df:9e:1e:e0: f6:bc:08:a3:06:4c:1a:45:33:00:df:d1:b6:1d:d8:06:d3:b7: 3a:a0:3f:31:94:c0:43:fd:eb:71:99:18:5a:59:9a:47:46:8d: e3:d7:8a:5c:80:2f:90:31:ae:2a:9f:9c:ea:38:f6:ef:12:58: a5:4f:13:20:8b:a5:b8:85:80:de:b5:00:21:c6:3f:d1:fb:8f: c7:32:c1:72:ee:79:b7:a3:49:ff:1f:c2:d4:ae:9b:07:f9:32: ca:c4:9a:63:69:03:65:1a:54:9b:bd:6c:a2:06:13:87:99:57: ba:ac:1c:cd:31:3c:6d:14:37:c8:2a:b8:05:52:67:65:0d:00: 0c:a4:fb:17:87:45:82:b4:eb:6f:77:9f:05:9c:53:77:0b:dd: 08:84:c7:81:17:00:16:9b:ba:a4:51:bb:57:45:3d:ec:4f:a6: b4:42:4e:32:3e:56:ef:b7:21:17:a4:de:2b:36:cd:0d:21:e3: 9d:9b:a8:64:5b:5e:f9:80:33:49:cb:13:a2:92:1b:2f:0b:fd: 4c:07:82:7d:58:20:4b:a9:eb:a4:11:7f:83:39:f0:8b:13:1e: cc:14:48:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjUwNjMwMjE1NTA4WhcNMjUwNzA3MjE1NTA4WjAYMRYwFAYD VQQDEw02ODYzMDdiYy1jNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtldaDvLsSFi8ZqRb4GDssH1QczDYX8JNHqxj30pnvwQvpi5/PAyn6L8JGeRS HYZtPWsI+YO9rv0crEg0Y68hsUdqn/6yRuWlLc171qNpjvAM17C2nbtoRMlqazN7 +VRsomn5ifRApNLJMfGBnYh9FNc2xRaEiGrX/sONXaM6bGtFQq13E4BCOz1zjOdx EmkpOOri3HtNn8yv3ns4MY12N+HYbgTD3U686pu0vwhfhlr/Vs96HUaxdL0RVYpg XvlXdI9oXjpWm3RgAr0U/DECX5JII32pD8nysZf3Gi1O0OuhqvKU22QhucocjGHi z7lrWKKjJpjiGscvRzCNqWYAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgqhBVu BT9bAWsJchlwY2zDWA2HMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpk6yaHvWaZJnd01I73MotdyJwEWsxjuGFG9abUh6gJN+eHuD2vAij BkwaRTMA39G2HdgG07c6oD8xlMBD/etxmRhaWZpHRo3j14pcgC+QMa4qn5zqOPbv ElilTxMgi6W4hYDetQAhxj/R+4/HMsFy7nm3o0n/H8LUrpsH+TLKxJpjaQNlGlSb vWyiBhOHmVe6rBzNMTxtFDfIKrgFUmdlDQAMpPsXh0WCtOtvd58FnFN3C90IhMeB FwAWm7qkUbtXRT3sT6a0Qk4yPlbvtyEXpN4rNs0NIeOdm6hkW175gDNJyxOikhsv C/1MB4J9WCBLqeukEX+DOfCLEx7MFEiN -----END CERTIFICATE-----Generated at Wed Jul 2 06:46:16 2025 by rpki-client