$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft File: je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json) Hash identifier: ygNK/lbcs2CUR4Gs/vqnErXoNXIj4QVnRc+gDaCD2SM= Subject key identifier: CC:3C:D1:3F:00:7B:7F:C7:D7:9D:0B:01:08:F2:A0:EF:87:F5:45:46 Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft Manifest number: 0622 Signing time: Wed 02 Jul 2025 23:06:15 +0000 Manifest this update: Wed 02 Jul 2025 23:06:15 +0000 Manifest next update: Wed 09 Jul 2025 23:06:15 +0000 Files and hashes: 1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: p8n2Y66JEJpnjNaCgIcyk+gBT70by8mmEISitaMdT6c=) 2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: o6IdzF2JW4pdJz3buu3YPOk5TMt4Nbg8S9u/EOJTdU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Validity Not Before: Jul 2 23:06:15 2025 GMT Not After : Jul 9 23:06:15 2025 GMT Subject: CN=6865bb67-3fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9c:f5:5a:9e:46:92:31:5f:3e:fb:0e:7c:f3: 95:67:d3:c1:b6:b5:fc:df:4a:49:b0:b2:1b:07:34: fb:d3:c1:70:17:ae:17:05:35:73:47:9f:86:d3:b4: eb:6f:7e:96:4a:7d:4e:e1:78:35:b5:c0:65:6b:47: 69:59:4f:d4:f0:d5:f7:ec:ce:c8:e9:1c:52:6e:78: 9c:97:33:39:15:8f:40:e3:fa:d4:9b:08:51:3f:59: aa:9d:0f:56:7b:94:55:89:fa:4f:1f:ef:a9:cf:a4: 08:47:43:58:fd:73:f7:68:09:f9:03:95:8f:f1:91: 2b:4e:7b:e9:4a:1e:39:d9:4e:08:23:c3:bb:92:f0: 9a:d0:38:8a:15:59:df:c5:31:f2:94:b0:44:1e:1b: d9:82:7a:5a:0a:d7:62:62:af:1c:c3:40:3e:5d:72: 26:a2:b8:cd:ac:e9:51:1d:cd:42:b6:e7:24:eb:ff: 0f:27:03:83:aa:b6:2a:93:79:a1:b3:41:51:a8:a4: 65:cc:d4:5b:f3:14:73:27:7d:0c:ba:04:d2:eb:f0: 06:b4:d1:3f:f2:b8:e6:b5:dc:a1:f0:f7:2c:85:bb: 9e:b3:cb:aa:74:08:91:4c:9f:78:29:fe:c8:fb:25: 99:03:9f:bb:39:ce:ac:a2:c6:5a:b2:2f:ba:9a:25: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3C:D1:3F:00:7B:7F:C7:D7:9D:0B:01:08:F2:A0:EF:87:F5:45:46 X509v3 Authority Key Identifier: keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7d:41:fd:a1:20:df:28:bd:1e:81:5e:ac:9c:c9:86:17:27: 20:15:71:82:fa:f4:5f:80:87:d0:d0:8f:c7:00:79:a3:42:f3: 8a:8b:dc:bf:0a:11:5b:65:80:25:3d:f9:71:b8:f6:62:60:c2: 91:d4:c4:67:78:68:2f:74:50:4f:ac:59:03:97:c5:91:4b:86: de:57:cb:68:2b:05:d6:72:3d:d2:71:49:21:8c:ee:af:2c:c7: b8:10:3d:37:ab:12:e2:b0:8d:9b:12:55:9e:b2:8b:58:69:2a: ab:5c:f5:c1:b1:5a:c6:46:48:15:5c:70:0c:85:10:eb:63:8f: 8c:66:26:76:a7:59:c5:8b:1d:91:5b:72:45:34:88:7c:06:b7: 81:11:39:cf:a2:9e:25:9f:38:49:32:b9:7d:14:1b:8c:33:8b: 57:7d:87:8d:8e:a5:ea:73:43:18:14:72:2c:61:c9:7b:40:12: 5b:35:43:1a:09:6f:49:bf:58:c8:23:59:2e:5c:bf:2b:18:a4: 95:4a:ea:df:13:70:a7:9a:c8:62:ee:d0:82:e6:29:95:08:ab: c8:71:fc:da:3a:95:54:e8:22:06:91:03:e6:0c:1b:13:ac:d3: 40:3d:90:fe:9e:50:c7:fd:d6:0b:e3:25:f0:76:8b:19:e8:16: 91:f0:e2:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB NDVBNTdBNDQwHhcNMjUwNzAyMjMwNjE1WhcNMjUwNzA5MjMwNjE1WjAYMRYwFAYD VQQDEw02ODY1YmI2Ny0zZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Jz1Wp5GkjFfPvsOfPOVZ9PBtrX830pJsLIbBzT708FwF64XBTVzR5+G07Tr b36WSn1O4Xg1tcBla0dpWU/U8NX37M7I6RxSbniclzM5FY9A4/rUmwhRP1mqnQ9W e5RVifpPH++pz6QIR0NY/XP3aAn5A5WP8ZErTnvpSh452U4II8O7kvCa0DiKFVnf xTHylLBEHhvZgnpaCtdiYq8cw0A+XXImorjNrOlRHc1Ctuck6/8PJwODqrYqk3mh s0FRqKRlzNRb8xRzJ30MugTS6/AGtNE/8rjmtdyh8Pcshbues8uqdAiRTJ94Kf7I +yWZA5+7Oc6sosZasi+6miWIxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw80T8A e3/H150LAQjyoO+H9UVGMB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzlEMS8wODhDMUI0OEEyN0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4 NnM0UkxBb2VxWHVrV2xla1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcfUH9oSDfKL0egV6snMmGFycgFXGC+vRfgIfQ0I/HAHmjQvOKi9y/ ChFbZYAlPflxuPZiYMKR1MRneGgvdFBPrFkDl8WRS4beV8toKwXWcj3ScUkhjO6v LMe4ED03qxLisI2bElWesotYaSqrXPXBsVrGRkgVXHAMhRDrY4+MZiZ2p1nFix2R W3JFNIh8BreBETnPop4lnzhJMrl9FBuMM4tXfYeNjqXqc0MYFHIsYcl7QBJbNUMa CW9Jv1jII1kuXL8rGKSVSurfE3Cnmshi7tCC5imVCKvIcfzaOpVU6CIGkQPmDBsT rNNAPZD+nlDH/dYL4yXwdosZ6BaR8OK5 -----END CERTIFICATE-----Generated at Thu Jul 3 06:12:02 2025 by rpki-client