$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: dI5XDIyMNQAb8kKoSuWFVuQ9YYQ0I9cu0uHaaqRCpc0= Subject key identifier: 46:0A:5D:39:24:3D:19:A9:5A:8B:9A:A5:55:8F:F1:CF:5C:BA:BB:A1 Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0A3D Signing time: Wed 02 Jul 2025 19:57:52 +0000 Manifest this update: Wed 02 Jul 2025 19:57:51 +0000 Manifest next update: Wed 09 Jul 2025 19:57:51 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: LXGsfoj34qG8oSmLtIMgD5VQoI7qil15ucAAhREijlM=) 2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: EkYTFmKjanasajMVGUVTZ322q1F+k60qJOC2SSq8q9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Jul 2 19:57:51 2025 GMT Not After : Jul 9 19:57:51 2025 GMT Subject: CN=68658f3f-5f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:88:cd:2a:27:f0:5b:30:5b:fb:8d:f5:16: 60:45:07:de:83:8d:d4:5e:f0:ee:ed:c5:2a:30:17: 24:40:d4:ce:2f:f2:c0:9a:9b:a6:2d:51:00:3b:c1: ed:d3:a1:59:0e:bd:8a:9b:6e:fe:c3:42:1f:e0:af: c0:3d:95:4a:5a:e8:15:90:bc:fc:22:75:69:47:f6: d6:2c:09:12:a2:29:ba:0b:46:ea:68:80:62:fd:87: 06:ba:3c:7f:84:23:bc:4d:c9:83:4d:91:34:fa:13: 92:28:f7:2c:25:4a:56:dd:74:d4:b8:9c:28:89:84: 2d:87:e1:2f:7c:a2:ae:45:80:f1:ff:dc:17:b8:76: 89:5d:37:dd:52:70:01:b9:1a:4e:ba:c4:20:14:96: 02:80:36:b1:65:93:53:e4:e1:e4:34:15:d9:bc:22: 1f:ef:3a:30:14:c2:5a:0e:39:99:f4:66:8a:52:17: 0b:4c:79:eb:76:3d:2d:3b:5f:1a:dc:cd:10:d3:a5: 03:2b:a8:5b:ac:77:c0:40:f7:95:6f:0e:74:75:67: 29:7f:f4:29:b1:81:d9:af:c2:08:b1:dc:8b:d0:40: 90:29:64:26:19:1b:fb:c2:16:f8:b3:f8:43:d6:db: d2:82:49:3e:b6:dd:ab:f6:42:9b:75:bc:24:60:42: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:5D:39:24:3D:19:A9:5A:8B:9A:A5:55:8F:F1:CF:5C:BA:BB:A1 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4c:9a:17:ac:db:ad:df:11:72:40:f5:16:d6:33:04:53:0a: 70:50:4b:c9:b7:1b:c4:43:e3:21:03:10:63:87:29:c5:24:ea: 1d:42:d6:27:cf:f8:36:e2:f2:15:aa:73:0b:4c:6d:f0:fb:45: 9d:fc:22:ec:11:60:13:5a:7b:27:39:de:2d:34:94:59:40:21: ab:ad:e0:a5:e0:06:88:d1:b9:1a:8b:cb:70:d7:71:a6:a9:2f: d6:43:c7:1c:94:ca:f4:34:65:e5:11:b0:8d:6f:f7:1c:6a:1b: 3b:92:73:45:02:b8:be:89:6c:0f:4a:d9:90:43:5e:94:5f:ae: d2:09:e2:1c:ef:0d:33:43:10:61:0b:8c:a7:d7:97:0f:98:ad: 60:7d:5e:73:ce:f3:11:13:e0:23:b2:dc:14:19:73:2a:0e:7c: 76:b7:3b:d5:22:c9:ab:25:32:2d:6b:b8:59:da:a2:2c:e8:a3: 6c:d1:4f:ea:36:a7:31:d2:dc:d5:43:17:e9:d4:19:68:32:cc: 43:06:37:34:ca:a8:fa:1b:26:d7:01:b5:d1:86:17:24:21:46: a2:ea:3d:bb:6d:5e:30:8f:38:b8:49:c9:b6:06:42:69:12:d0: 1e:45:4f:0c:d3:6e:95:6c:54:7a:7c:06:52:01:92:83:e6:5c: 14:12:ce:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUwNzAyMTk1NzUxWhcNMjUwNzA5MTk1NzUxWjAYMRYwFAYD VQQDEw02ODY1OGYzZi01ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2iIzSon8FswW/uN9RZgRQfeg43UXvDu7cUqMBckQNTOL/LAmpumLVEAO8Ht 06FZDr2Km27+w0If4K/APZVKWugVkLz8InVpR/bWLAkSoim6C0bqaIBi/YcGujx/ hCO8TcmDTZE0+hOSKPcsJUpW3XTUuJwoiYQth+EvfKKuRYDx/9wXuHaJXTfdUnAB uRpOusQgFJYCgDaxZZNT5OHkNBXZvCIf7zowFMJaDjmZ9GaKUhcLTHnrdj0tO18a 3M0Q06UDK6hbrHfAQPeVbw50dWcpf/QpsYHZr8IIsdyL0ECQKWQmGRv7whb4s/hD 1tvSgkk+tt2r9kKbdbwkYEI5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYKXTkk PRmpWouapVWP8c9curuhMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCTJoXrNut3xFyQPUW1jMEUwpwUEvJtxvEQ+MhAxBjhynFJOodQtYn z/g24vIVqnMLTG3w+0Wd/CLsEWATWnsnOd4tNJRZQCGrreCl4AaI0bkai8tw13Gm qS/WQ8cclMr0NGXlEbCNb/ccahs7knNFAri+iWwPStmQQ16UX67SCeIc7w0zQxBh C4yn15cPmK1gfV5zzvMRE+AjstwUGXMqDnx2tzvVIsmrJTIta7hZ2qIs6KNs0U/q Nqcx0tzVQxfp1BloMsxDBjc0yqj6GybXAbXRhhckIUai6j27bV4wjzi4Scm2BkJp EtAeRU8M026VbFR6fAZSAZKD5lwUEs7n -----END CERTIFICATE-----Generated at Fri Jul 4 14:29:20 2025 by rpki-client