$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: QdohsVr4nP2ptYM/sP5zCTLpHzsp62gmhl4UNi3INtQ= Subject key identifier: 48:E7:81:2A:FC:C8:06:80:0C:41:E0:F1:AB:AE:AF:A2:D0:0A:98:BD Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 01D0 Signing time: Thu 03 Jul 2025 02:56:50 +0000 Manifest this update: Thu 03 Jul 2025 02:56:49 +0000 Manifest next update: Thu 10 Jul 2025 02:56:49 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: 1zf8NwMb4KyeAJgem5rknpfQJyyx6yv3fU+45Xfa4WQ=) 2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: fGEw+qeCcqB/RBoNg72OOghHbjbROkzgK5a78Db2wZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Jul 3 02:56:49 2025 GMT Not After : Jul 10 02:56:49 2025 GMT Subject: CN=6865f172-9e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:1f:07:2c:db:f2:eb:6c:d8:b4:9e:00:f1: 37:7b:0d:3e:e4:ae:37:86:cf:79:61:ff:03:81:f0: 33:15:0f:d2:36:58:18:5e:c7:3a:30:b5:e3:fe:44: 9e:34:5a:3e:d1:e7:79:f2:ae:d4:ad:93:67:6c:b7: 31:55:f3:e8:a7:e8:40:d0:97:ea:f8:14:98:88:33: 0d:c9:cb:37:88:66:e4:d8:1f:18:56:ad:88:cc:27: 6d:55:31:e5:0d:0f:2d:5f:27:ba:58:e4:db:40:55: 38:9d:0e:61:82:6c:0f:7c:3e:98:04:59:a7:09:ea: 89:ff:ee:11:e8:52:bd:ac:f6:89:53:81:31:ea:da: 7f:4a:c4:ba:ea:0a:c4:cc:84:96:2f:66:e5:9f:18: 21:00:1e:a4:7b:14:0a:13:01:0d:00:1e:1e:ad:24: a4:a6:7c:fb:4c:79:b2:c6:c9:9e:d3:e5:82:17:c4: fb:17:7f:dc:af:fd:4e:9e:45:af:dc:d8:04:b6:a9: c8:c0:06:df:67:72:ef:a4:38:ea:a8:42:78:46:46: 0c:b3:c3:bc:89:c1:e7:8a:0c:06:da:3b:82:23:75: bb:59:f9:78:1c:c4:83:fd:3e:78:cf:e0:94:16:f4: 6d:e7:ab:f7:4c:e1:1f:e7:bb:40:99:7d:ae:08:45: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:81:2A:FC:C8:06:80:0C:41:E0:F1:AB:AE:AF:A2:D0:0A:98:BD X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f8:63:04:c6:53:9d:e4:24:a8:f2:20:4a:c9:16:55:23:7c: 78:1c:fd:2d:38:2d:b2:2b:d4:5d:83:46:05:02:76:78:fa:a9: ac:38:bc:db:33:2c:6b:a8:01:2b:3d:41:ec:95:95:5a:96:f4: 3f:f6:5a:8e:9e:8c:91:d1:e2:a2:04:1b:69:fc:26:35:d2:15: db:9a:ec:5a:8f:31:2b:98:cc:bd:01:05:b1:c5:03:38:a0:80: 50:c7:8d:47:2c:76:a9:3d:27:bf:d9:83:df:3f:2a:10:6a:91: 56:77:0b:91:1f:4e:32:1c:66:13:9d:52:72:fc:34:db:70:78: 17:b2:de:51:c1:84:e5:8f:8e:78:dd:1b:b8:b6:fc:91:a4:9d: 2d:2c:74:b8:f9:ce:dc:d8:56:ae:84:48:3b:f2:c2:7c:b3:cf: 6d:60:e4:3f:e7:b2:ac:dc:ad:d6:9b:4c:b0:54:74:86:ab:dc: 88:6e:43:04:0f:90:6a:3d:67:73:61:bb:f8:72:c7:06:44:2f: 64:e8:d3:39:3b:e4:1e:62:3b:2f:9c:43:32:10:6a:68:85:1f: 62:4c:98:41:bc:bc:c0:17:03:1e:ef:86:28:f7:6f:34:53:46: ba:b0:ee:4c:7d:6f:7e:fe:a5:8f:97:07:d4:99:68:83:d6:25: 2c:23:92:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUwNzAzMDI1NjQ5WhcNMjUwNzEwMDI1NjQ5WjAYMRYwFAYD VQQDEw02ODY1ZjE3Mi05ZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl0fByzb8uts2LSeAPE3ew0+5K43hs95Yf8DgfAzFQ/SNlgYXsc6MLXj/kSe NFo+0ed58q7UrZNnbLcxVfPop+hA0Jfq+BSYiDMNycs3iGbk2B8YVq2IzCdtVTHl DQ8tXye6WOTbQFU4nQ5hgmwPfD6YBFmnCeqJ/+4R6FK9rPaJU4Ex6tp/SsS66grE zISWL2blnxghAB6kexQKEwENAB4erSSkpnz7THmyxsme0+WCF8T7F3/cr/1OnkWv 3NgEtqnIwAbfZ3LvpDjqqEJ4RkYMs8O8icHnigwG2juCI3W7Wfl4HMSD/T54z+CU FvRt56v3TOEf57tAmX2uCEXbHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjngSr8 yAaADEHg8auur6LQCpi9MB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR+GMExlOd5CSo8iBKyRZVI3x4HP0tOC2yK9Rdg0YFAnZ4+qmsOLzb MyxrqAErPUHslZValvQ/9lqOnoyR0eKiBBtp/CY10hXbmuxajzErmMy9AQWxxQM4 oIBQx41HLHapPSe/2YPfPyoQapFWdwuRH04yHGYTnVJy/DTbcHgXst5RwYTlj454 3Ru4tvyRpJ0tLHS4+c7c2FauhEg78sJ8s89tYOQ/57Ks3K3Wm0ywVHSGq9yIbkME D5BqPWdzYbv4cscGRC9k6NM5O+QeYjsvnEMyEGpohR9iTJhBvLzAFwMe74Yo9280 U0a6sO5MfW9+/qWPlwfUmWiD1iUsI5LK -----END CERTIFICATE-----Generated at Fri Jul 4 21:49:20 2025 by rpki-client