$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: FfqEsRJlpvS27GAt6spF9jH3azYKErd8yj98PXzUcUg= Subject key identifier: F8:6F:B1:D2:21:BB:E9:0C:F7:73:28:76:2F:2E:A4:CF:F0:87:FB:98 Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 0730 Signing time: Wed 02 Jul 2025 22:06:20 +0000 Manifest this update: Wed 02 Jul 2025 22:06:20 +0000 Manifest next update: Wed 09 Jul 2025 22:06:20 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: 6VRo/tT5flDWqVikJ9f8fzFkDTUO9YcM0crmDpPm4RI=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Jul 2 22:06:20 2025 GMT Not After : Jul 9 22:06:20 2025 GMT Subject: CN=6865ad5c-5d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:af:f3:60:79:b9:cd:a3:00:b4:ff:9c:eb: e9:7a:b5:52:3c:fd:75:12:21:1b:3c:63:d5:52:f5: a6:35:c4:57:fb:d2:8a:fd:fe:b6:41:cc:84:e9:01: 07:02:5d:db:94:9d:70:b7:dd:72:3e:ff:55:fb:73: dc:35:68:2a:49:be:64:54:3a:f1:b3:a1:11:33:33: 8a:06:a4:e7:c6:63:5b:38:8c:1c:cf:59:1c:ea:4e: e9:4f:6f:b0:93:c8:e4:26:0e:ea:07:73:c7:a1:65: f5:61:12:f6:4e:04:e6:c3:5d:01:0a:56:69:bf:bf: 56:95:18:a5:17:a0:13:5f:31:f8:fb:cc:c6:08:32: fc:0b:b9:b1:6c:c1:13:9e:cd:dd:00:0a:22:22:ac: ca:51:09:c9:53:66:0b:a8:93:7f:0a:ef:a7:7e:de: 3e:1e:c2:47:5b:98:1b:92:92:e7:6a:94:0c:c8:eb: a0:89:d5:c9:d7:bd:51:9f:5c:40:09:b1:13:de:79: bf:97:5c:6f:55:fc:6e:8d:56:fb:0d:69:50:95:cd: 65:3f:0e:91:4b:9b:c1:62:45:15:9d:f8:e9:29:d8: fc:7d:22:13:ad:53:35:e3:db:46:4c:8e:2d:18:ba: 92:ec:cd:fe:1e:99:64:25:89:fb:88:ca:e4:a9:d2: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6F:B1:D2:21:BB:E9:0C:F7:73:28:76:2F:2E:A4:CF:F0:87:FB:98 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:31:25:bd:de:9c:7b:53:f9:9b:18:8e:80:31:b2:b7:82:7a: c7:de:eb:39:50:35:b9:d5:16:5e:98:65:de:33:d2:bd:d6:ad: 48:26:dd:6d:f6:8b:f5:a3:da:f9:ca:60:e6:e3:2d:8b:3c:cc: 33:7e:5d:60:8b:17:21:84:1a:28:6c:ae:53:05:a1:f8:df:f0: 96:31:e3:d2:5e:b1:25:2e:2d:06:07:c2:fa:d7:3b:e6:07:32: ea:98:c0:52:02:ec:5e:52:66:12:78:76:b5:2b:d5:5d:94:b3: 3b:40:19:52:83:76:1f:1e:a1:d6:42:49:14:1c:97:54:97:78: 2a:f1:10:ab:ec:bf:b0:e2:23:05:95:19:28:d3:11:45:cd:93: 36:a4:f6:4b:92:7d:cd:11:02:f8:6d:e2:36:91:02:aa:b6:e4: 26:9d:43:70:22:14:d5:c2:ee:67:55:97:ad:a5:97:c6:54:41: 7f:60:e2:6a:0d:b2:fe:d7:00:9c:c1:db:b1:d1:63:bf:28:df: f0:86:74:03:40:b7:76:19:17:2e:0d:ba:58:c9:f2:91:72:64: 86:f2:92:d1:a3:0d:97:96:12:d0:6d:ca:53:12:03:bd:bb:29: ff:15:c3:73:ea:76:e9:38:c7:ba:cb:5a:1a:0f:a7:75:eb:37: 2b:27:b2:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjUwNzAyMjIwNjIwWhcNMjUwNzA5MjIwNjIwWjAYMRYwFAYD VQQDEw02ODY1YWQ1Yy01ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RSv82B5uc2jALT/nOvperVSPP11EiEbPGPVUvWmNcRX+9KK/f62QcyE6QEH Al3blJ1wt91yPv9V+3PcNWgqSb5kVDrxs6ERMzOKBqTnxmNbOIwcz1kc6k7pT2+w k8jkJg7qB3PHoWX1YRL2TgTmw10BClZpv79WlRilF6ATXzH4+8zGCDL8C7mxbMET ns3dAAoiIqzKUQnJU2YLqJN/Cu+nft4+HsJHW5gbkpLnapQMyOugidXJ171Rn1xA CbET3nm/l1xvVfxujVb7DWlQlc1lPw6RS5vBYkUVnfjpKdj8fSITrVM149tGTI4t GLqS7M3+HplkJYn7iMrkqdKqkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhvsdIh u+kM93Modi8upM/wh/uYMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzMSW93px7U/mbGI6AMbK3gnrH3us5UDW51RZemGXeM9K91q1IJt1t 9ov1o9r5ymDm4y2LPMwzfl1gixchhBoobK5TBaH43/CWMePSXrElLi0GB8L61zvm BzLqmMBSAuxeUmYSeHa1K9VdlLM7QBlSg3YfHqHWQkkUHJdUl3gq8RCr7L+w4iMF lRko0xFFzZM2pPZLkn3NEQL4beI2kQKqtuQmnUNwIhTVwu5nVZetpZfGVEF/YOJq DbL+1wCcwdux0WO/KN/whnQDQLd2GRcuDbpYyfKRcmSG8pLRow2XlhLQbcpTEgO9 uyn/FcNz6nbpOMe6y1oaD6d16zcrJ7LT -----END CERTIFICATE-----Generated at Thu Jul 3 08:47:21 2025 by rpki-client