$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: X4A2cFITfhxMYoa0ZFUJAeZpf28OOHPjPUQSjPfyY1c= Subject key identifier: AB:D1:CF:B5:CD:FB:A1:EA:05:4D:B9:5B:8B:37:59:9C:3C:05:DA:7F Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 0299 Signing time: Thu 03 Jul 2025 01:58:23 +0000 Manifest this update: Thu 03 Jul 2025 01:58:22 +0000 Manifest next update: Thu 10 Jul 2025 01:58:22 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: zIFpjRWPMvzTKoFUskrvKgID8hZMyol5Rr2GOD0fCpw=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Jul 3 01:58:22 2025 GMT Not After : Jul 10 01:58:22 2025 GMT Subject: CN=6865e3be-eb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:ab:11:06:cf:59:27:b1:b1:4c:6b:8e:08: 6a:9b:25:15:0c:16:df:60:78:0f:21:09:93:ec:3d: 84:fe:3b:d8:c2:b5:e2:3f:9b:e4:22:b2:a3:f7:3d: e1:f2:9c:a1:21:de:17:36:ce:43:df:d5:52:04:13: 0c:c4:5b:0e:e6:32:09:8c:b4:88:bb:88:66:80:b4: 5a:70:20:ca:97:85:2e:a9:fa:dd:0d:33:c6:22:57: bb:c0:86:da:24:e1:af:16:a4:25:e4:e9:9b:0e:d5: b7:50:ed:fb:fe:e4:0e:16:b4:fc:a7:b6:55:56:42: d1:ee:ee:ea:c7:b9:1e:85:a9:ce:2f:ab:55:87:2f: c8:e0:a8:2d:22:a2:be:80:b7:86:0f:d0:7d:d5:50: ff:4f:bb:da:d6:ac:91:66:89:5b:7c:96:65:98:1e: 9c:76:03:b3:ef:2b:51:17:4c:55:99:e9:14:47:46: 33:2c:31:f7:ee:c4:81:24:8f:0a:25:8d:b5:7f:c3: d2:be:7f:51:9c:7f:51:c6:9a:9e:d0:02:07:2b:b3: 2f:3e:4e:7f:22:ba:83:2c:9c:69:75:bf:0f:67:b7: 6a:b1:74:c1:d1:da:cd:a9:e9:52:8a:a4:55:d9:3b: 3d:fe:bb:10:ca:7d:9d:f3:f5:9f:12:53:e4:4e:f3: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D1:CF:B5:CD:FB:A1:EA:05:4D:B9:5B:8B:37:59:9C:3C:05:DA:7F X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:78:e5:5c:24:1f:b3:92:95:28:72:31:7c:8b:fb:6a:45:ae: a8:8d:33:ad:db:67:d8:78:a4:a5:fb:a0:11:12:86:5a:3b:5c: 7f:1f:50:e2:b1:1c:63:8b:6c:46:35:dc:17:ac:c3:19:63:6d: 14:c5:dc:41:c5:40:d3:73:e2:b6:43:47:7b:66:1d:98:51:f4: 1d:12:83:78:28:94:53:87:54:e7:ca:5d:de:17:5a:11:ff:ba: 2f:62:72:e2:b1:dc:0d:ba:20:87:44:50:07:c7:9c:62:fd:8a: 8d:1c:01:1e:7a:b1:bc:33:fb:07:21:30:a0:df:2f:20:99:e1: 39:a0:2d:e1:fa:d2:40:c3:84:87:00:b5:c8:94:13:29:a3:26: 8b:74:37:38:70:52:34:86:1f:20:db:c0:d5:ca:a6:a3:69:24: 11:7b:d7:32:77:de:d1:fb:f8:3a:9e:8d:02:f2:7f:fd:d6:cc: 29:95:79:c9:be:8e:de:a2:ae:3f:a3:bc:44:ab:5c:ca:26:31: d8:53:56:bd:a4:a1:e4:a6:a8:d5:9c:44:08:76:dd:15:1d:70: 56:c7:eb:47:ed:bf:50:fb:7d:31:48:10:f3:8c:dc:9e:90:88: ba:18:b6:eb:84:9d:1a:07:a1:bd:78:e9:6d:1c:f5:98:c5:db: 54:b0:50:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUwNzAzMDE1ODIyWhcNMjUwNzEwMDE1ODIyWjAYMRYwFAYD VQQDEw02ODY1ZTNiZS1lYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2z+rEQbPWSexsUxrjghqmyUVDBbfYHgPIQmT7D2E/jvYwrXiP5vkIrKj9z3h 8pyhId4XNs5D39VSBBMMxFsO5jIJjLSIu4hmgLRacCDKl4UuqfrdDTPGIle7wIba JOGvFqQl5OmbDtW3UO37/uQOFrT8p7ZVVkLR7u7qx7kehanOL6tVhy/I4KgtIqK+ gLeGD9B91VD/T7va1qyRZolbfJZlmB6cdgOz7ytRF0xVmekUR0YzLDH37sSBJI8K JY21f8PSvn9RnH9Rxpqe0AIHK7MvPk5/IrqDLJxpdb8PZ7dqsXTB0drNqelSiqRV 2Ts9/rsQyn2d8/WfElPkTvPfpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvRz7XN +6HqBU25W4s3WZw8Bdp/MB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCneOVcJB+zkpUocjF8i/tqRa6ojTOt22fYeKSl+6AREoZaO1x/H1Di sRxji2xGNdwXrMMZY20UxdxBxUDTc+K2Q0d7Zh2YUfQdEoN4KJRTh1Tnyl3eF1oR /7ovYnLisdwNuiCHRFAHx5xi/YqNHAEeerG8M/sHITCg3y8gmeE5oC3h+tJAw4SH ALXIlBMpoyaLdDc4cFI0hh8g28DVyqajaSQRe9cyd97R+/g6no0C8n/91swplXnJ vo7eoq4/o7xEq1zKJjHYU1a9pKHkpqjVnEQIdt0VHXBWx+tH7b9Q+30xSBDzjNye kIi6GLbrhJ0aB6G9eOltHPWYxdtUsFAD -----END CERTIFICATE-----Generated at Fri Jul 4 22:09:06 2025 by rpki-client