$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json) Hash identifier: 9UWTCdqwycTrss5Q/Eg/nWaIeqKpsAv3kd45MAWU44Y= Subject key identifier: 15:5E:19:20:DD:9A:EE:28:FD:A6:26:CB:0A:24:A9:13:F0:12:2B:D2 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft Manifest number: 092C Signing time: Wed 02 Jul 2025 20:31:40 +0000 Manifest this update: Wed 02 Jul 2025 20:31:40 +0000 Manifest next update: Wed 09 Jul 2025 20:31:40 +0000 Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: 9Jx56k8K+tEEcFNIhjplBL+ggzhS4uYo+0j+y4Vla+w=) 2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: LRUqK0HbwhlophByZnm497LSzITbbBMeAuaK57/ofL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Jul 2 20:31:40 2025 GMT Not After : Jul 9 20:31:40 2025 GMT Subject: CN=6865972c-dc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:da:e0:79:40:4c:8f:50:75:bf:68:52:2f: 2b:9c:3a:cb:45:0f:55:1b:3a:bd:f2:7f:91:57:c1: b5:9d:89:10:da:38:da:ef:9f:e4:63:4e:ad:3a:f1: 8f:a8:ba:b7:c3:4a:cd:7e:13:38:b2:14:b8:91:9e: 23:34:bd:d1:fb:40:75:cb:4a:38:6d:04:5a:3d:b0: b1:5b:8e:3c:d5:9f:26:61:79:0d:d2:25:80:4e:ee: ea:48:7c:de:be:5e:3f:0f:76:9a:a5:8e:ae:24:1c: 64:f8:e7:9c:ff:93:d2:93:1a:0a:e3:bb:c9:3c:9a: 3f:48:71:88:6e:63:e2:30:20:81:76:c5:ba:0d:4f: 50:63:06:ba:c7:1d:1f:9e:3d:e1:32:5e:d0:2a:d2: 5a:21:e9:5c:80:42:c7:99:88:36:06:06:27:7f:11: bf:5e:de:44:1b:00:7a:2a:63:17:f7:fa:82:9e:93: 3e:9a:a6:8f:9b:73:b0:fc:66:2a:0e:73:88:73:ab: 55:2e:06:11:c3:9d:5d:36:81:9c:0f:b4:7a:79:f5: c6:bb:02:a4:72:2a:d2:86:5b:6e:32:f5:79:1a:2b: 84:4e:0d:7d:51:4f:17:6f:5b:8b:80:04:c1:a5:96: 5b:3c:f6:9b:56:31:4a:d1:e9:06:e5:a0:1d:cd:fa: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5E:19:20:DD:9A:EE:28:FD:A6:26:CB:0A:24:A9:13:F0:12:2B:D2 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:57:d9:cf:ca:07:46:b2:cc:d6:8b:ba:a6:e4:bb:70:b3:f4: c0:e7:68:d7:80:fe:ae:4d:bc:32:4f:47:8a:ec:17:e0:98:3d: c3:36:4a:36:29:98:46:b1:d5:a6:48:db:90:b6:f2:48:28:66: e3:38:93:70:99:69:cb:46:6d:65:62:28:94:91:23:3e:c9:2c: 95:80:0e:d3:f8:9a:b6:55:9d:24:fc:c3:bc:d5:24:ce:ec:2d: c1:8a:55:9a:78:b7:83:8c:27:19:db:92:40:c3:3e:b9:92:05: 8e:3f:db:9d:ff:29:12:98:83:75:4f:7a:25:11:45:16:88:1f: ed:16:5b:94:0c:5f:0a:8e:99:26:48:38:fb:4b:d9:8e:bb:f7: 70:e8:5d:e3:49:fe:3b:b6:e1:2a:61:da:c2:03:c6:29:06:a2: f7:c4:c7:d5:70:7e:18:c3:c2:54:e5:cc:10:ce:76:30:19:64: a3:30:9c:73:92:0f:d8:31:74:3d:a8:39:ae:90:2b:21:e9:26: fc:ba:c5:c0:c4:ee:9b:36:6f:51:45:a9:d8:32:a5:0e:01:57: b0:79:7b:d0:9e:5b:14:47:f8:cd:59:57:cf:c0:7e:a5:ca:7b: b7:57:74:c2:7c:cf:b0:ca:02:ff:8d:88:56:d7:81:42:9f:e9: e6:3e:2b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjUwNzAyMjAzMTQwWhcNMjUwNzA5MjAzMTQwWjAYMRYwFAYD VQQDEw02ODY1OTcyYy1kYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI/a4HlATI9Qdb9oUi8rnDrLRQ9VGzq98n+RV8G1nYkQ2jja75/kY06tOvGP qLq3w0rNfhM4shS4kZ4jNL3R+0B1y0o4bQRaPbCxW4481Z8mYXkN0iWATu7qSHze vl4/D3aapY6uJBxk+Oec/5PSkxoK47vJPJo/SHGIbmPiMCCBdsW6DU9QYwa6xx0f nj3hMl7QKtJaIelcgELHmYg2BgYnfxG/Xt5EGwB6KmMX9/qCnpM+mqaPm3Ow/GYq DnOIc6tVLgYRw51dNoGcD7R6efXGuwKkcirShltuMvV5GiuETg19UU8Xb1uLgATB pZZbPPabVjFK0ekG5aAdzfpj0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVeGSDd mu4o/aYmywokqRPwEivSMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPV9nPygdGsszWi7qm5Ltws/TA52jXgP6uTbwyT0eK7BfgmD3DNko2 KZhGsdWmSNuQtvJIKGbjOJNwmWnLRm1lYiiUkSM+ySyVgA7T+Jq2VZ0k/MO81STO 7C3BilWaeLeDjCcZ25JAwz65kgWOP9ud/ykSmIN1T3olEUUWiB/tFluUDF8Kjpkm SDj7S9mOu/dw6F3jSf47tuEqYdrCA8YpBqL3xMfVcH4Yw8JU5cwQznYwGWSjMJxz kg/YMXQ9qDmukCsh6Sb8usXAxO6bNm9RRanYMqUOAVeweXvQnlsUR/jNWVfPwH6l ynu3V3TCfM+wygL/jYhW14FCn+nmPivC -----END CERTIFICATE-----Generated at Fri Jul 4 18:43:56 2025 by rpki-client