$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: QDuRc88J+3LPBYjpRKjZnPfNVhQqqpYugXKDKRfRYm0= Subject key identifier: CE:9E:18:7A:18:18:6F:3C:91:65:BE:0C:CD:00:57:31:C8:B9:32:F6 Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 0764 Signing time: Mon 30 Jun 2025 21:52:26 +0000 Manifest this update: Mon 30 Jun 2025 21:52:25 +0000 Manifest next update: Mon 07 Jul 2025 21:52:25 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: Kn4vsCTICdzUKBox4OAhzYEGSmPZL9MAjKyapAdW8xc=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6, serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: Jun 30 21:52:25 2025 GMT Not After : Jul 7 21:52:25 2025 GMT Subject: CN=68630719-564a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:1f:86:d7:f2:2c:63:be:d4:24:dd:f2:2e: a3:69:c9:14:80:6c:03:47:f4:a0:17:23:74:25:19: 9b:d7:46:bf:32:82:f3:1c:e7:a3:06:d8:4a:11:40: b2:f7:bf:db:3f:d0:f4:37:00:cb:0a:a5:25:0f:a0: be:69:f7:6f:5d:a3:10:87:b3:64:1a:be:76:6f:ba: 25:3d:02:35:73:3e:43:1a:b0:77:83:99:60:06:63: 44:2b:f9:47:85:40:38:8e:4e:b1:70:27:1d:fa:2e: 21:7f:d4:0c:60:e0:ae:d4:9e:be:23:a0:e0:58:fa: a6:29:ca:2d:9e:35:42:56:83:ed:be:00:7e:74:ce: e0:cc:15:2d:e2:fb:0a:23:d9:83:9e:5a:e9:b0:21: 76:47:2b:b1:3e:36:c1:4b:95:4a:d1:87:89:50:ca: cb:06:87:08:bf:99:5b:18:1b:bd:2b:1e:26:63:5a: 8e:1a:a1:cd:48:17:a4:65:6e:4f:e8:2d:57:1b:13: 99:7f:34:0e:46:cc:d7:64:2a:ea:8c:da:98:70:58: 4f:c2:06:f6:2e:3d:8e:85:8b:f1:98:0f:14:75:dd: 1f:c3:db:f5:f3:a8:f9:91:ea:8a:62:1e:e7:99:ad: 8b:28:d4:d2:0d:cc:c4:f8:23:a7:6a:23:40:7a:f6: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:18:7A:18:18:6F:3C:91:65:BE:0C:CD:00:57:31:C8:B9:32:F6 X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c2:80:57:46:40:2d:e7:0d:1c:43:6d:7e:4c:66:b8:1c:76: cb:fd:ee:5c:8c:d4:45:2f:a9:fd:30:4f:46:8c:29:77:f6:7a: 51:05:65:1a:bc:f3:97:fa:5b:e8:45:0f:35:38:5f:52:f8:d7: 46:8c:6e:f2:6c:05:ce:04:4f:b4:0d:bd:e2:23:b6:4a:70:54: 5c:67:15:73:31:d4:c0:4e:b9:47:11:50:e7:26:8e:c1:25:bd: 26:ce:6c:91:9f:7c:e4:7a:a1:d6:f6:8b:ca:6e:06:b9:fb:1f: c3:18:b9:65:cb:6c:66:73:08:bd:0b:c8:97:e5:3a:90:64:92: 87:65:50:77:62:6d:86:83:f4:c2:80:9b:13:29:1e:6e:5e:5f: 56:f7:f8:69:a4:46:b2:86:e4:e0:69:34:55:7e:2a:8b:ee:88: 72:4d:e7:d0:cf:a6:24:fa:d7:ac:59:86:b0:75:df:81:e5:8a: 48:e2:96:14:2c:5e:38:31:05:ea:b6:60:7f:b1:27:11:62:43: d8:41:b7:a6:0a:69:0c:8c:a0:02:34:df:1e:43:22:b0:c8:9d: 1c:d0:3f:a1:42:39:f3:1e:df:c3:77:0e:1e:2b:6c:10:a2:a4: b4:7b:02:c7:2d:72:da:67:43:3d:4e:44:4e:b6:d5:dd:01:20: 7f:41:3f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjUwNjMwMjE1MjI1WhcNMjUwNzA3MjE1MjI1WjAYMRYwFAYD VQQDEw02ODYzMDcxOS01NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlIfhtfyLGO+1CTd8i6jackUgGwDR/SgFyN0JRmb10a/MoLzHOejBthKEUCy 97/bP9D0NwDLCqUlD6C+afdvXaMQh7NkGr52b7olPQI1cz5DGrB3g5lgBmNEK/lH hUA4jk6xcCcd+i4hf9QMYOCu1J6+I6DgWPqmKcotnjVCVoPtvgB+dM7gzBUt4vsK I9mDnlrpsCF2RyuxPjbBS5VK0YeJUMrLBocIv5lbGBu9Kx4mY1qOGqHNSBekZW5P 6C1XGxOZfzQORszXZCrqjNqYcFhPwgb2Lj2OhYvxmA8Udd0fw9v186j5keqKYh7n ma2LKNTSDczE+COnaiNAevYBmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6eGHoY GG88kWW+DM0AVzHIuTL2MB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATwoBXRkAt5w0cQ21+TGa4HHbL/e5cjNRFL6n9ME9GjCl39npRBWUa vPOX+lvoRQ81OF9S+NdGjG7ybAXOBE+0Db3iI7ZKcFRcZxVzMdTATrlHEVDnJo7B Jb0mzmyRn3zkeqHW9ovKbga5+x/DGLlly2xmcwi9C8iX5TqQZJKHZVB3Ym2Gg/TC gJsTKR5uXl9W9/hppEayhuTgaTRVfiqL7ohyTefQz6Yk+tesWYawdd+B5YpI4pYU LF44MQXqtmB/sScRYkPYQbemCmkMjKACNN8eQyKwyJ0c0D+hQjnzHt/Ddw4eK2wQ oqS0ewLHLXLaZ0M9TkROttXdASB/QT8f -----END CERTIFICATE-----Generated at Wed Jul 2 21:03:57 2025 by rpki-client