$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: 2SUixh/azo9NtAWCWKnoZIdf87h/lCUV8+ATUEaE+ak= Subject key identifier: 84:AB:32:2A:6C:C7:04:2A:6E:11:D5:87:69:4E:69:5A:99:07:6F:23 Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: B9 Signing time: Sun 29 Jun 2025 04:56:25 +0000 Manifest this update: Sun 29 Jun 2025 04:56:24 +0000 Manifest next update: Sun 06 Jul 2025 04:56:24 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: 8JGkxxuzEbTkuS57TbLJQLGGb90yaTVc5vVnkcBLvaQ=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qyHVBU6r1vopcSbtOHBuL6JaUanY0OBKOoUk8MRDDbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Jun 29 04:56:24 2025 GMT Not After : Jul 6 04:56:24 2025 GMT Subject: CN=6860c779-f5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:c9:f2:f1:dd:1b:ef:fb:51:3d:22:32:26: c4:cc:02:30:4a:ac:fc:9d:f7:03:1e:e7:19:42:43: e8:24:ae:3f:6d:f7:ee:31:e3:d1:85:7d:ae:1e:4c: 28:cf:79:c0:f3:54:61:29:3c:89:c6:ef:0f:34:31: c5:f2:b5:1b:74:d9:52:a9:e3:ff:d4:e8:98:3f:fc: ba:6f:cd:35:82:fb:42:15:50:cc:49:de:c9:6c:5e: ac:2a:e8:38:e8:5f:a2:35:47:a9:d7:6a:23:59:bf: 64:61:3f:73:d5:74:2d:9f:4c:36:d9:10:4e:22:51: d1:ba:f7:25:08:a7:e6:d1:75:2f:bd:28:89:93:82: dc:71:ee:ef:b2:a0:e0:f7:0e:a3:31:1a:d1:38:15: 4f:3f:32:67:9b:67:97:c8:0b:0f:49:16:97:c7:34: 76:5e:34:e8:39:ca:c4:1f:9a:f4:a8:cc:f9:3d:08: 90:09:2f:e4:7a:ed:d6:36:c0:27:a8:fa:53:f9:66: bf:ca:cd:d5:91:94:ee:47:8f:d5:54:5e:1a:ba:6c: 52:b4:b6:f4:1a:68:e6:28:9f:f2:08:b3:99:bf:9c: 6c:1e:7a:d5:5b:3e:69:66:1e:65:7c:5a:aa:bb:cd: fe:7f:bd:c9:44:52:64:b5:0d:b2:3e:56:63:10:97: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:32:2A:6C:C7:04:2A:6E:11:D5:87:69:4E:69:5A:99:07:6F:23 X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:04:54:08:8f:5b:f9:d5:bb:af:18:67:0b:57:fb:c5:67:cf: e6:81:0f:48:7b:fe:02:00:49:a4:0a:f4:de:71:63:6f:24:a9: 78:ed:47:f9:db:99:12:b7:eb:0e:92:ed:11:e8:24:cd:8e:ec: 60:ff:07:1a:b2:b9:9f:74:ec:3e:46:a2:3c:87:79:83:30:c4: a5:1a:7a:63:df:47:f5:a9:48:0e:7b:29:c4:b5:96:fb:a4:1b: 6f:a6:15:6a:8c:2b:d2:39:1a:20:01:cf:d9:ad:ce:ce:4e:5a: fc:63:63:76:2e:1e:8e:1b:4d:c5:f1:01:ca:94:1f:e9:d5:ef: 8d:73:68:52:b5:ef:d9:28:79:3d:8e:ac:86:f9:c0:dd:44:19: 7b:1c:ee:37:79:40:82:f5:01:08:1c:91:0b:a5:7f:92:13:b0: ea:06:4e:19:4a:97:3f:f6:da:c0:e8:4c:0a:19:e9:db:3b:c9: 9d:73:3d:83:41:86:86:23:87:12:fb:a9:ea:95:fe:3c:19:28: 2e:c0:fb:95:3a:42:56:24:b7:47:e2:00:5a:bd:ec:d3:72:5c: d7:3f:b9:2b:8b:77:bd:44:33:cd:41:8a:cd:ce:38:d4:bd:44: 2b:cc:ca:45:8f:f0:65:89:34:f2:ee:8e:4e:c3:40:5d:d9:4e: d6:34:17:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUwNjI5MDQ1NjI0WhcNMjUwNzA2MDQ1NjI0WjAYMRYwFAYD VQQDEw02ODYwYzc3OS1mNWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwjJ8vHdG+/7UT0iMibEzAIwSqz8nfcDHucZQkPoJK4/bffuMePRhX2uHkwo z3nA81RhKTyJxu8PNDHF8rUbdNlSqeP/1OiYP/y6b801gvtCFVDMSd7JbF6sKug4 6F+iNUep12ojWb9kYT9z1XQtn0w22RBOIlHRuvclCKfm0XUvvSiJk4Lcce7vsqDg 9w6jMRrROBVPPzJnm2eXyAsPSRaXxzR2XjToOcrEH5r0qMz5PQiQCS/keu3WNsAn qPpT+Wa/ys3VkZTuR4/VVF4aumxStLb0GmjmKJ/yCLOZv5xsHnrVWz5pZh5lfFqq u83+f73JRFJktQ2yPlZjEJc27wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISrMips xwQqbhHVh2lOaVqZB28jMB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmBFQIj1v51buvGGcLV/vFZ8/mgQ9Ie/4CAEmkCvTecWNvJKl47Uf5 25kSt+sOku0R6CTNjuxg/wcasrmfdOw+RqI8h3mDMMSlGnpj30f1qUgOeynEtZb7 pBtvphVqjCvSORogAc/Zrc7OTlr8Y2N2Lh6OG03F8QHKlB/p1e+Nc2hSte/ZKHk9 jqyG+cDdRBl7HO43eUCC9QEIHJELpX+SE7DqBk4ZSpc/9trA6EwKGenbO8mdcz2D QYaGI4cS+6nqlf48GSguwPuVOkJWJLdH4gBavezTclzXP7kri3e9RDPNQYrNzjjU vUQrzMpFj/BliTTy7o5Ow0Bd2U7WNBdo -----END CERTIFICATE-----Generated at Sun Jun 29 17:38:42 2025 by rpki-client