$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: fePL3p+ABHGXAr/EcPZ4+lEc1566hV5QXsT6euDOj88= Subject key identifier: 48:03:8D:04:90:04:34:2D:40:8A:14:23:91:82:F3:92:4A:3E:81:24 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0BE4 Signing time: Wed 02 Jul 2025 19:01:49 +0000 Manifest this update: Wed 02 Jul 2025 19:01:49 +0000 Manifest next update: Wed 09 Jul 2025 19:01:49 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: TpXbHzHJ74Y5jiVeolqRR6eps9OdJTOfztO5cmM4lrI=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Jul 2 19:01:49 2025 GMT Not After : Jul 9 19:01:49 2025 GMT Subject: CN=6865821d-d614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:80:7d:9b:bf:50:df:26:d5:1f:03:b9:1e: a7:a0:07:7b:08:e6:a7:f1:62:35:bd:a6:b0:de:ec: 08:20:cf:ac:9a:7e:7a:8c:33:08:14:68:c7:6a:0a: f0:17:89:1e:35:e9:c1:64:1c:b5:d8:9b:52:62:14: d8:38:cf:17:2e:17:f3:17:a0:d4:52:5b:04:ac:ec: 89:f3:a6:c3:94:da:40:5d:b6:d4:14:d2:90:5c:00: d7:82:fc:d0:1f:e3:00:91:5f:d9:f4:08:2f:9d:76: 9e:de:b9:1f:1d:e1:68:ec:83:d5:53:b3:b3:ac:17: 4f:e6:71:4e:c9:20:4a:04:da:f9:08:65:1c:05:e2: b6:1d:f0:39:d4:05:83:9e:b8:3b:30:bc:28:92:31: 9d:b3:e9:78:a0:4c:8b:96:0c:b8:74:50:16:93:3d: 8f:9a:ea:4a:8d:7b:b1:38:62:36:aa:f9:38:a7:02: 6c:74:ae:ac:11:df:01:70:50:ee:43:eb:59:bc:f5: af:65:3f:c3:4e:8a:ce:9a:f0:70:30:f8:bd:e8:7f: 36:1a:77:71:60:a7:5a:c6:33:7e:09:1e:91:4a:b0: de:dd:b1:d3:d0:59:f2:77:bb:12:a9:7e:6d:e0:29: bf:d2:85:80:8b:97:db:3c:e1:a6:1a:a2:c8:09:8a: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:8D:04:90:04:34:2D:40:8A:14:23:91:82:F3:92:4A:3E:81:24 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ef:fd:15:c0:21:15:6d:b3:d6:7f:e8:65:62:ad:f1:6a:d9: 4a:ee:68:cc:2e:f8:c4:93:53:fd:d9:3d:47:fd:ce:69:f4:94: 25:eb:08:fc:aa:7a:df:99:ab:d0:46:23:e8:64:b2:2e:5a:32: 0a:a4:1c:39:1a:1c:f4:45:32:62:15:08:87:27:ff:ae:3d:b6: 9b:d5:5b:6b:ca:2c:d6:2f:a8:c1:28:0a:32:e7:6f:3b:ad:25: 4c:7f:c3:c5:7d:23:27:6d:10:3d:4b:2f:b9:67:38:91:28:4c: 6c:bc:25:c1:a9:f5:f7:29:18:6f:5e:b2:06:61:ce:17:b1:a3: ce:5b:ba:d6:d7:8b:80:d4:15:5f:ba:f5:0f:36:64:08:93:25: 13:66:cc:50:96:3c:ec:20:fb:b9:c1:3e:48:ac:54:9a:a9:5d: 17:d8:0d:1d:54:e7:0c:7d:2d:f4:1d:60:75:e3:27:c0:5c:c2: 5d:14:f8:18:f8:00:dd:3d:f1:04:2e:9a:22:cc:e8:5b:25:b8: ec:8d:1a:a7:fd:da:31:46:67:49:2c:1b:d1:f9:95:62:be:00: 53:74:50:d2:39:d9:1d:e4:4e:12:9e:91:03:f1:65:0f:9b:fd: ff:96:ad:8a:ae:d1:8c:bf:3c:a3:c3:3b:22:37:dc:dd:ee:b3: 53:bd:34:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUwNzAyMTkwMTQ5WhcNMjUwNzA5MTkwMTQ5WjAYMRYwFAYD VQQDEw02ODY1ODIxZC1kNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDeAfZu/UN8m1R8DuR6noAd7COan8WI1vaaw3uwIIM+smn56jDMIFGjHagrw F4keNenBZBy12JtSYhTYOM8XLhfzF6DUUlsErOyJ86bDlNpAXbbUFNKQXADXgvzQ H+MAkV/Z9AgvnXae3rkfHeFo7IPVU7OzrBdP5nFOySBKBNr5CGUcBeK2HfA51AWD nrg7MLwokjGds+l4oEyLlgy4dFAWkz2PmupKjXuxOGI2qvk4pwJsdK6sEd8BcFDu Q+tZvPWvZT/DTorOmvBwMPi96H82GndxYKdaxjN+CR6RSrDe3bHT0Fnyd7sSqX5t 4Cm/0oWAi5fbPOGmGqLICYqzzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgDjQSQ BDQtQIoUI5GC85JKPoEkMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB67/0VwCEVbbPWf+hlYq3xatlK7mjMLvjEk1P92T1H/c5p9JQl6wj8 qnrfmavQRiPoZLIuWjIKpBw5Ghz0RTJiFQiHJ/+uPbab1VtryizWL6jBKAoy5287 rSVMf8PFfSMnbRA9Sy+5ZziRKExsvCXBqfX3KRhvXrIGYc4XsaPOW7rW14uA1BVf uvUPNmQIkyUTZsxQljzsIPu5wT5IrFSaqV0X2A0dVOcMfS30HWB14yfAXMJdFPgY +ADdPfEELpoizOhbJbjsjRqn/doxRmdJLBvR+ZVivgBTdFDSOdkd5E4SnpED8WUP m/3/lq2KrtGMvzyjwzsiN9zd7rNTvTSh -----END CERTIFICATE-----Generated at Thu Jul 3 01:13:30 2025 by rpki-client