$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: YP9u5UB+CQhy1vy+1qBAFzFcuW75EK0JZllxMwS5WRQ= Subject key identifier: 97:FB:2C:EB:0E:22:B4:CC:29:C3:78:35:94:E3:4E:59:31:BE:E3:07 Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 088E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 0888 Signing time: Sat 28 Jun 2025 20:17:14 +0000 Manifest this update: Sat 28 Jun 2025 20:17:14 +0000 Manifest next update: Sat 05 Jul 2025 20:17:14 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: 8WXfeHjdt+GXSrICUth2SeRtFupvx2r8LQyqXPwHfAI=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: oyNqHuI92CZn4/vowEHhL13J2MzcFLxMYrnO9NR1z4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Jun 28 20:17:14 2025 GMT Not After : Jul 5 20:17:14 2025 GMT Subject: CN=68604dca-3d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:39:14:7a:5d:c2:bf:47:40:5b:9a:35:be:a5: c4:c1:18:39:5a:e3:29:83:15:78:10:b0:d3:cc:62: c1:b3:17:27:f4:c9:01:dc:64:36:f9:41:a5:74:44: 0e:ce:c6:b7:f8:9e:e4:49:48:32:21:48:c4:45:2d: 89:fc:63:8c:f3:2b:91:0e:11:f5:d8:de:78:4f:83: f9:56:b1:c6:a5:8d:68:b9:35:9d:1f:f0:89:21:c5: 7a:d0:67:cf:19:65:a0:fc:4b:63:9e:33:93:1a:d7: f3:09:3d:22:d6:37:2f:31:64:38:9e:dc:5b:ae:e8: 19:27:79:db:91:68:88:84:c7:15:01:1f:46:a0:e2: 93:93:ed:09:e9:6f:d4:6e:0f:fd:57:2b:1b:ef:3e: 1a:df:2a:bf:6e:da:fb:d4:6e:ec:ae:b2:92:92:0b: 5c:e5:c5:f5:9c:d2:90:50:34:7e:85:1f:d0:84:30: e3:b3:48:f2:00:3f:4f:6b:5d:87:ed:c2:b6:bb:9f: f3:f9:aa:b6:a4:16:27:38:fe:04:3b:a8:50:6f:52: 10:48:97:a1:c8:8d:bc:bc:15:39:a9:fa:0d:23:03: 9d:7b:22:3e:36:a2:f9:ae:64:62:cc:3d:95:f2:12: d4:5a:92:db:0f:ad:04:48:e6:d3:3e:ff:5a:f7:ee: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FB:2C:EB:0E:22:B4:CC:29:C3:78:35:94:E3:4E:59:31:BE:E3:07 X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7d:df:7b:b8:66:a7:a2:7d:61:54:77:3d:f9:73:01:e5:1d: dc:91:55:e0:d9:0a:63:ab:12:41:58:34:58:df:e4:e6:ec:76: 53:02:56:e6:c5:3b:ca:9d:20:c5:a8:d3:c7:82:ee:2a:9a:5c: 1e:be:cd:e6:4c:88:76:71:1b:4c:37:01:63:08:0e:7a:58:79: e3:a8:6d:30:7e:fd:fd:60:b2:a7:ec:1f:dc:a7:64:4b:c6:f4: ab:2f:17:a4:cc:17:8f:31:35:f3:64:aa:5a:94:34:f8:11:d8: 43:ef:14:98:09:65:c4:97:c8:d9:d1:d8:16:24:18:4b:ea:09: 0e:21:9d:f0:a3:09:a8:61:72:d7:12:bd:71:28:f9:b5:3b:92: c9:58:3d:d2:67:fe:df:54:ba:1f:03:b5:42:43:8e:e4:52:72: 76:2e:58:63:ad:0e:fd:04:36:10:d8:4f:28:a1:dd:5a:9c:ab: ab:c0:bc:77:92:32:04:4a:e6:b3:74:a1:39:4d:15:f3:c0:72: 49:c3:61:15:ad:44:a5:13:02:2b:b1:60:b2:44:44:e9:5c:98: ec:29:3d:c7:87:78:7c:78:58:ca:a1:9d:be:7b:b2:81:66:5d: 2f:4a:5d:94:c1:d1:16:30:a6:46:6f:69:c7:44:ac:6d:f1:9a: 7c:78:c5:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjUwNjI4MjAxNzE0WhcNMjUwNzA1MjAxNzE0WjAYMRYwFAYD VQQDEw02ODYwNGRjYS0zZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zkUel3Cv0dAW5o1vqXEwRg5WuMpgxV4ELDTzGLBsxcn9MkB3GQ2+UGldEQO zsa3+J7kSUgyIUjERS2J/GOM8yuRDhH12N54T4P5VrHGpY1ouTWdH/CJIcV60GfP GWWg/EtjnjOTGtfzCT0i1jcvMWQ4ntxbrugZJ3nbkWiIhMcVAR9GoOKTk+0J6W/U bg/9Vysb7z4a3yq/btr71G7srrKSkgtc5cX1nNKQUDR+hR/QhDDjs0jyAD9Pa12H 7cK2u5/z+aq2pBYnOP4EO6hQb1IQSJehyI28vBU5qfoNIwOdeyI+NqL5rmRizD2V 8hLUWpLbD60ESObTPv9a9+5R+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf7LOsO IrTMKcN4NZTjTlkxvuMHMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZfd97uGanon1hVHc9+XMB5R3ckVXg2QpjqxJBWDRY3+Tm7HZTAlbm xTvKnSDFqNPHgu4qmlwevs3mTIh2cRtMNwFjCA56WHnjqG0wfv39YLKn7B/cp2RL xvSrLxekzBePMTXzZKpalDT4EdhD7xSYCWXEl8jZ0dgWJBhL6gkOIZ3wowmoYXLX Er1xKPm1O5LJWD3SZ/7fVLofA7VCQ47kUnJ2LlhjrQ79BDYQ2E8ood1anKurwLx3 kjIESuazdKE5TRXzwHJJw2EVrUSlEwIrsWCyRETpXJjsKT3Hh3h8eFjKoZ2+e7KB Zl0vSl2UwdEWMKZGb2nHRKxt8Zp8eMX/ -----END CERTIFICATE-----Generated at Sun Jun 29 20:14:30 2025 by rpki-client