$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: a1KrgOfFxSUC4RTu/UUBgDQMGaa5iZ+SHpgIYz4UyX8= Subject key identifier: C1:F2:86:FF:7D:EB:3B:1A:27:1F:DE:C0:06:49:F6:55:0B:A9:8B:83 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 0123 Signing time: Tue 01 Jul 2025 05:13:23 +0000 Manifest this update: Tue 01 Jul 2025 05:13:23 +0000 Manifest next update: Tue 08 Jul 2025 05:13:23 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: rSVSInML/5IJUCfe2obPsz6gEhdD+ONDNTXFCIThYdc=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Jul 1 05:13:23 2025 GMT Not After : Jul 8 05:13:23 2025 GMT Subject: CN=68636e73-211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:dc:0a:92:51:9c:83:64:8f:6b:a6:14:6d: 5f:cf:09:ff:a8:84:5c:78:cb:fb:45:a8:11:50:3f: c9:65:01:15:58:3b:0a:a7:3e:1d:3e:fe:f4:82:95: 34:ff:a9:c1:ee:08:bd:39:c7:24:50:5f:ac:08:49: 92:99:c1:25:2b:78:a4:c8:33:5c:96:5a:ab:a2:ad: 03:bb:c8:c6:93:a1:e3:a5:0f:fe:4f:85:08:9f:61: 4c:c9:ad:9f:2f:bd:c6:15:4d:bf:9e:72:c2:e6:4f: 33:9b:ad:80:0f:5e:59:3d:ba:06:23:7d:f1:35:88: eb:9f:82:1e:5e:8b:39:46:c9:d3:73:f8:d4:0e:b0: 3c:42:6b:54:53:d9:51:2d:7e:35:00:21:c1:44:ed: a7:d0:c3:39:0e:f3:b9:7a:9b:8a:a0:f4:a1:00:ff: c2:7d:d2:8a:72:c8:8e:e1:c1:d7:3a:96:7b:69:ab: 83:45:28:03:21:a2:3c:ba:59:3a:6d:99:de:fc:1a: b8:c5:13:8f:07:dd:52:a3:b1:6f:b9:e5:2c:06:a9: 6b:c6:64:4e:1f:b1:1e:4a:64:af:98:74:7a:21:c6: e3:0b:33:77:20:c4:7f:b4:70:38:de:0d:f5:46:a2: 1a:97:86:51:8c:6e:00:2f:4a:27:19:af:1c:08:a4: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:86:FF:7D:EB:3B:1A:27:1F:DE:C0:06:49:F6:55:0B:A9:8B:83 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:3f:97:13:e5:23:10:a2:3b:f9:d4:1c:87:bd:67:c8:8e: 1c:25:aa:4e:59:4e:ac:6b:47:b5:63:29:a2:35:2b:79:b7:6d: 05:b5:c5:f1:da:ba:dd:d7:9a:fb:0e:2f:33:ab:eb:a3:a1:6a: 8d:dc:17:50:e4:18:4e:5f:6f:98:c5:4e:16:50:81:80:1b:b7: 0c:f8:c0:bc:57:4d:f0:4e:18:ff:9c:cb:f1:91:9c:72:77:4d: d2:29:b6:17:a2:57:d7:7a:6b:63:12:0c:49:99:ac:bc:3c:d6: 72:b2:71:1c:3a:a3:ab:e8:c0:47:9c:cb:39:03:ec:ed:35:91: 3d:bd:18:b6:35:da:4a:b3:34:f3:7e:8c:56:8a:f0:31:9f:b5: 51:2d:9a:15:3f:58:da:65:21:6f:78:3c:44:97:ac:e7:81:3b: 79:8f:7f:26:d6:d6:56:67:a0:fd:ba:22:41:4b:92:69:ff:8f: cc:e4:ad:44:9d:f5:6e:6a:a8:60:1a:db:73:35:fb:4d:e6:77: bc:35:7e:e0:7e:d7:cc:98:8b:31:6a:4e:e6:28:80:c4:8c:c9: 05:01:fd:0d:75:e8:b0:d9:0a:bb:9d:f1:25:81:62:8f:ab:1e: 7e:7c:a4:91:1f:7d:32:cd:7c:db:01:62:74:84:ec:2e:dd:97: da:e4:b8:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUwNzAxMDUxMzIzWhcNMjUwNzA4MDUxMzIzWjAYMRYwFAYD VQQDEw02ODYzNmU3My0yMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDDcCpJRnINkj2umFG1fzwn/qIRceMv7RagRUD/JZQEVWDsKpz4dPv70gpU0 /6nB7gi9OcckUF+sCEmSmcElK3ikyDNcllqroq0Du8jGk6HjpQ/+T4UIn2FMya2f L73GFU2/nnLC5k8zm62AD15ZPboGI33xNYjrn4IeXos5RsnTc/jUDrA8QmtUU9lR LX41ACHBRO2n0MM5DvO5epuKoPShAP/CfdKKcsiO4cHXOpZ7aauDRSgDIaI8ulk6 bZne/Bq4xROPB91So7FvueUsBqlrxmROH7EeSmSvmHR6IcbjCzN3IMR/tHA43g31 RqIal4ZRjG4AL0onGa8cCKQKewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHyhv99 6zsaJx/ewAZJ9lULqYuDMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCByz+XE+UjEKI7+dQch71nyI4cJapOWU6sa0e1YymiNSt5t20FtcXx 2rrd15r7Di8zq+ujoWqN3BdQ5BhOX2+YxU4WUIGAG7cM+MC8V03wThj/nMvxkZxy d03SKbYXolfXemtjEgxJmay8PNZysnEcOqOr6MBHnMs5A+ztNZE9vRi2NdpKszTz foxWivAxn7VRLZoVP1jaZSFveDxEl6zngTt5j38m1tZWZ6D9uiJBS5Jp/4/M5K1E nfVuaqhgGttzNftN5ne8NX7gftfMmIsxak7mKIDEjMkFAf0Ndeiw2Qq7nfElgWKP qx5+fKSRH30yzXzbAWJ0hOwu3Zfa5Lg5 -----END CERTIFICATE-----Generated at Wed Jul 2 05:33:17 2025 by rpki-client