$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json) Hash identifier: f6pxyy2G2LUJiuaJ67u2ys2An8TKKah42rv5GZ5NyJg= Subject key identifier: 37:24:45:0A:24:98:82:84:8B:80:31:5B:5B:4C:4A:05:13:01:10:21 Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft Manifest number: 04F4 Signing time: Thu 03 Jul 2025 00:01:59 +0000 Manifest this update: Thu 03 Jul 2025 00:01:58 +0000 Manifest next update: Thu 10 Jul 2025 00:01:58 +0000 Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: T8ddtlzxd/Km4gW5GjRGj99S5Mp+o8czlBHiLQOTHQU=) 2: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: eZkG1iVHjA07zqibQCS20vDKvxGWhApC6gs+W5wfJ9g=) 3: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 8CERVYgkltWj4G95QfjHRAzhZOs/2MofXT3PQbZreQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Jul 3 00:01:58 2025 GMT Not After : Jul 10 00:01:58 2025 GMT Subject: CN=6865c876-9275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:2e:0b:b9:05:fd:a7:ec:d7:9b:20:f4:40: b9:0a:38:16:74:1a:c6:e6:10:d0:b5:50:4f:92:ae: 53:9d:02:e1:c1:00:05:9f:72:08:77:05:83:ce:84: f0:1a:bd:68:af:2a:48:33:8c:0a:a4:53:a7:9f:22: 79:23:ad:d3:3c:ee:4d:a6:b1:73:c3:4b:ed:e3:07: a9:9a:d4:44:ad:cc:6b:67:73:3f:75:08:0d:93:24: d2:a4:a3:6d:21:78:6a:05:ef:d9:96:33:bc:06:d4: 7e:a4:7c:d7:d7:ff:11:1e:f6:b2:af:ac:fc:61:53: 63:a0:69:11:94:8f:b3:97:c4:16:37:0f:de:f9:84: dd:49:0f:fc:ab:42:10:0e:c3:0e:79:e2:a3:59:a8: 17:96:fa:65:b6:6f:e9:64:b9:74:fe:dd:dc:00:2d: 54:2f:e4:69:6f:5b:88:d8:87:be:b9:9a:13:e5:02: 69:1a:68:c8:e8:13:bd:62:a9:b1:49:5a:01:10:b2: 9f:c5:e3:f0:99:97:28:0f:a3:1a:7d:fb:e3:e1:02: 1d:ad:41:4b:ea:e7:c1:2a:38:70:51:42:b4:fd:a9: 7e:6c:6a:75:ce:ba:83:4e:7f:6c:fe:47:3e:d3:e8: be:e6:ca:80:91:4d:1b:91:99:98:75:1a:29:84:b4: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:24:45:0A:24:98:82:84:8B:80:31:5B:5B:4C:4A:05:13:01:10:21 X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5c:ce:d7:65:65:e2:99:78:bd:2a:c7:c0:d6:26:0d:8d:2b: f9:6c:60:dc:f5:6e:12:18:cf:02:54:58:04:c2:3a:fa:b4:d4: ac:ff:ba:c1:9c:d6:23:87:8f:af:26:f1:e6:2b:6c:ff:6e:8f: b7:e6:6c:95:fd:7c:e9:94:9d:3f:49:52:73:ca:25:5f:b4:ba: a2:47:9b:db:74:69:05:42:86:9e:eb:cd:b6:08:3c:fa:b7:bd: 43:cd:a5:56:fa:88:6d:e0:1e:94:74:5e:bd:74:8a:7f:d7:0b: d6:f1:48:12:7e:37:8c:83:af:cf:3b:1c:a6:8f:a2:05:a8:01: fc:1c:dd:86:1a:33:eb:8d:b4:26:4a:94:9b:51:a4:a7:47:a5: cc:d4:1e:3d:1e:47:08:e2:0e:9d:2a:ac:bd:ab:58:b3:bf:db: 70:fc:e4:a7:c0:28:4c:4f:8b:95:e9:16:8f:7c:49:83:5c:a4: eb:09:ce:ce:a7:ce:68:d3:ad:49:28:24:cd:81:1e:0f:88:d4: 63:d3:58:96:d1:09:d3:f5:ff:40:49:78:e3:95:9b:8b:e4:85: 7c:70:78:0f:ec:a3:b8:00:d7:1f:84:ca:a2:f2:3e:38:b0:51: ff:ad:a8:c7:83:14:b2:ee:7b:f2:33:8e:52:6d:61:44:9b:8a: a5:75:ce:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjUwNzAzMDAwMTU4WhcNMjUwNzEwMDAwMTU4WjAYMRYwFAYD VQQDEw02ODY1Yzg3Ni05Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApikuC7kF/afs15sg9EC5CjgWdBrG5hDQtVBPkq5TnQLhwQAFn3IIdwWDzoTw Gr1orypIM4wKpFOnnyJ5I63TPO5NprFzw0vt4wepmtRErcxrZ3M/dQgNkyTSpKNt IXhqBe/ZljO8BtR+pHzX1/8RHvayr6z8YVNjoGkRlI+zl8QWNw/e+YTdSQ/8q0IQ DsMOeeKjWagXlvpltm/pZLl0/t3cAC1UL+Rpb1uI2Ie+uZoT5QJpGmjI6BO9Yqmx SVoBELKfxePwmZcoD6Maffvj4QIdrUFL6ufBKjhwUUK0/al+bGp1zrqDTn9s/kc+ 0+i+5sqAkU0bkZmYdRophLS/fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDckRQok mIKEi4AxW1tMSgUTARAhMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQxQi82OUY2QjdERTFBODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJL NExkdkVlQTNMT2xoaDNyWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZXM7XZWXimXi9KsfA1iYNjSv5bGDc9W4SGM8CVFgEwjr6tNSs/7rB nNYjh4+vJvHmK2z/bo+35myV/XzplJ0/SVJzyiVftLqiR5vbdGkFQoae6822CDz6 t71DzaVW+oht4B6UdF69dIp/1wvW8UgSfjeMg6/POxymj6IFqAH8HN2GGjPrjbQm SpSbUaSnR6XM1B49HkcI4g6dKqy9q1izv9tw/OSnwChMT4uV6RaPfEmDXKTrCc7O p85o061JKCTNgR4PiNRj01iW0QnT9f9ASXjjlZuL5IV8cHgP7KO4ANcfhMqi8j44 sFH/rajHgxSy7nvyM45SbWFEm4qldc4M -----END CERTIFICATE-----Generated at Thu Jul 3 23:37:51 2025 by rpki-client