$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json) Hash identifier: IIuDuHs4YZlLjE7/UkfRwKeuX0cYW1RU1JAZYE+HXhw= Subject key identifier: 93:94:8E:10:83:A8:0E:82:4E:6C:AE:D9:80:99:27:19:AF:73:96:7C Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Certificate serial: 1A95 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft Manifest number: 1A8E Signing time: Wed 02 Jul 2025 15:49:34 +0000 Manifest this update: Wed 02 Jul 2025 15:49:33 +0000 Manifest next update: Wed 09 Jul 2025 15:49:33 +0000 Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: 9RdHeKa6HsPVBGyQNF61i/UBEKHEBHP4XqrUmm/aeqk=) 2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: EvR5gfpmDfAVmSaNBVyf31LRk9wTqTU6OTSsCqxA5UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6805 (0x1a95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Validity Not Before: Jul 2 15:49:33 2025 GMT Not After : Jul 9 15:49:33 2025 GMT Subject: CN=6865550e-8762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:be:8e:7f:66:9e:19:67:61:5b:c1:0f:90:78: de:7c:89:3f:03:df:7e:ef:a7:14:3c:1a:2b:66:c2: c5:e4:06:05:a9:a4:3b:e7:3c:43:f2:78:5c:12:69: 60:d3:a8:4d:c8:9c:95:97:81:42:3a:74:31:87:29: 89:6e:ef:f7:27:51:c1:19:b9:72:2b:e6:f5:30:9e: f2:46:f3:5c:38:e4:aa:70:d3:7e:64:ef:79:2b:90: 00:2b:3b:cf:ba:56:bb:05:b6:60:28:1b:b7:f5:bc: 1f:3d:7c:73:fd:db:0c:77:ea:64:4b:c8:f9:4a:15: d1:59:4c:c4:c8:cc:58:c2:c8:ed:74:02:f5:d5:80: 84:9e:1f:a7:69:26:44:c8:e7:2f:7f:91:39:05:14: a6:84:6e:e2:7f:6c:44:3d:bd:a8:b6:74:34:7b:f6: 30:9a:46:c6:f4:f3:dc:db:c9:cc:15:7b:cd:35:39: e8:37:00:c6:3e:64:71:47:45:8f:af:3d:30:a8:2d: cf:45:1f:e1:15:db:b9:c0:16:3f:5e:0f:11:37:9b: 50:c9:84:ea:5c:c4:d6:9f:a2:20:9b:b9:d5:84:be: c2:5b:ca:cf:8f:0a:5e:23:d1:80:af:93:8c:06:27: e2:11:0e:84:50:4c:eb:75:69:cf:be:cb:96:e4:a0: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:94:8E:10:83:A8:0E:82:4E:6C:AE:D9:80:99:27:19:AF:73:96:7C X509v3 Authority Key Identifier: keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a8:fb:ae:60:cd:b3:b3:6d:88:2d:f3:69:f1:91:a2:59:22: 3e:fd:d2:77:0d:28:a6:f2:47:16:ec:50:fe:bd:b5:36:8a:43: 16:82:86:4c:7d:91:b7:48:e1:28:1e:d2:40:e4:00:d0:e6:5b: 24:6c:d3:d7:b3:35:29:5c:3a:59:68:95:75:60:09:7b:32:1b: 9d:54:38:e8:eb:dd:55:a1:3f:2d:31:40:ed:42:a2:49:a9:45: 1a:30:35:97:b1:6f:8d:02:19:bd:68:e4:0b:90:46:69:72:b8: 7a:82:e1:92:5f:8d:8d:1b:20:37:26:bd:39:c3:68:5a:7b:da: 65:eb:49:0c:e9:69:16:f0:8c:f3:38:d5:a5:96:da:a0:a9:83: 7a:65:c5:fc:45:08:b7:c2:3f:cc:8b:4e:9e:f9:40:ec:f8:46: a2:ac:5b:e2:1c:c1:6c:d4:57:84:a0:00:5b:0f:be:34:cd:6c: 1c:b4:a8:ea:7f:9b:7b:6d:19:fa:d4:c3:fa:0b:3a:4f:57:77: f7:d6:89:5f:39:a1:b7:4f:e6:5e:29:66:94:46:ea:50:5e:8b: b1:34:75:f1:a2:03:85:09:dd:16:9b:2d:32:2f:b5:65:9a:85: 56:18:58:b2:9f:8b:41:92:aa:6a:e0:7c:fb:da:f9:fe:4b:ae: 29:54:a5:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex NzRGOUM0M0MwHhcNMjUwNzAyMTU0OTMzWhcNMjUwNzA5MTU0OTMzWjAYMRYwFAYD VQQDEw02ODY1NTUwZS04NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6L6Of2aeGWdhW8EPkHjefIk/A99+76cUPBorZsLF5AYFqaQ75zxD8nhcEmlg 06hNyJyVl4FCOnQxhymJbu/3J1HBGblyK+b1MJ7yRvNcOOSqcNN+ZO95K5AAKzvP ula7BbZgKBu39bwfPXxz/dsMd+pkS8j5ShXRWUzEyMxYwsjtdAL11YCEnh+naSZE yOcvf5E5BRSmhG7if2xEPb2otnQ0e/YwmkbG9PPc28nMFXvNNTnoNwDGPmRxR0WP rz0wqC3PRR/hFdu5wBY/Xg8RN5tQyYTqXMTWn6Igm7nVhL7CW8rPjwpeI9GAr5OM BifiEQ6EUEzrdWnPvsuW5KChAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOUjhCD qA6CTmyu2YCZJxmvc5Z8MB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4 RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5 SjdoT3N0VW1jTW9YVDV4RHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAqPuuYM2zs22ILfNp8ZGiWSI+/dJ3DSim8kcW7FD+vbU2ikMWgoZM fZG3SOEoHtJA5ADQ5lskbNPXszUpXDpZaJV1YAl7MhudVDjo691VoT8tMUDtQqJJ qUUaMDWXsW+NAhm9aOQLkEZpcrh6guGSX42NGyA3Jr05w2hae9pl60kM6WkW8Izz ONWlltqgqYN6ZcX8RQi3wj/Mi06e+UDs+EairFviHMFs1FeEoABbD740zWwctKjq f5t7bRn61MP6CzpPV3f31olfOaG3T+ZeKWaURupQXouxNHXxogOFCd0Wmy0yL7Vl moVWGFiyn4tBkqpq4Hz72vn+S64pVKVo -----END CERTIFICATE-----Generated at Fri Jul 4 11:10:21 2025 by rpki-client