$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: yq+79dNXOu9A2h5GeXeyiOed35Yd+oEyhDwRNCpD7Wc= Subject key identifier: F0:DC:26:9D:AD:4A:72:4C:F5:38:27:97:29:C0:BB:BC:90:DB:30:90 Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: 13 Signing time: Tue 01 Jul 2025 08:50:57 +0000 Manifest this update: Tue 01 Jul 2025 08:50:56 +0000 Manifest next update: Tue 08 Jul 2025 08:50:56 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: StJkS3me+8E8FejoLyFE/aVii8ZkFqHgd4QI14ohNus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Jul 1 08:50:56 2025 GMT Not After : Jul 8 08:50:56 2025 GMT Subject: CN=6863a170-8cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:bf:49:f1:51:f0:1a:04:33:1f:47:76:43: f9:c6:15:5a:e9:e5:b2:83:8b:e8:7d:c1:90:62:bd: 42:03:bc:af:ef:83:eb:b2:f7:84:11:b7:13:45:c9: c1:25:72:6c:c2:bd:ff:74:2f:86:4e:c9:5c:ca:1a: 2e:e0:57:aa:cf:75:42:27:f0:89:e9:75:ed:50:27: 60:61:8e:01:13:b6:0f:19:09:6b:08:6c:a1:91:8d: 3f:6a:c3:e8:db:46:ac:50:f2:8c:c1:ce:db:40:ad: 88:11:f0:59:99:7b:85:54:a8:d9:96:02:3d:13:b5: 19:1c:00:3a:ab:e9:b8:40:88:35:01:46:f9:da:68: 69:e7:70:5e:49:fe:52:0a:7e:fc:f8:1d:94:1e:1e: ab:7e:60:ab:56:60:65:03:e4:d3:73:a8:12:d1:90: 87:9f:5e:37:fe:a3:09:e5:1d:40:1e:b3:ce:f6:3a: a5:8a:08:a9:04:ee:7c:59:de:c0:5c:51:bc:27:81: e9:60:9a:20:86:3c:07:2a:1c:40:c4:6c:86:16:14: 11:94:4a:39:85:d9:ea:9f:3d:7a:5e:5e:90:73:45: ab:72:bf:1f:e4:b4:36:86:ba:aa:e3:00:8d:fd:c8: c9:b1:7a:f7:9d:53:fe:eb:e9:80:37:93:2c:2d:da: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:26:9D:AD:4A:72:4C:F5:38:27:97:29:C0:BB:BC:90:DB:30:90 X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:09:57:09:87:6c:2c:eb:f1:df:ea:c0:6f:88:b0:de:bb:37: 26:e4:96:44:d2:01:bf:53:6e:cf:34:7c:3c:6a:f1:b3:ba:5b: 0b:94:0f:45:24:0e:5d:b2:5c:18:d1:2b:0b:9c:43:ab:e5:7d: 8a:c3:d8:86:d0:d9:50:b8:55:48:4a:07:ff:ba:43:ce:9e:7d: 7a:cb:55:bf:07:82:6a:8d:fa:e3:4b:51:79:9a:59:6b:47:9f: 6d:8d:f2:8c:e1:00:97:cc:56:19:3c:06:f9:ce:01:19:5a:6e: ca:da:63:49:7c:98:ba:53:d1:86:4b:f0:d8:53:c7:0f:2d:dc: df:94:cc:db:c9:f7:bd:31:55:3a:8c:e6:cc:ce:c7:72:dc:7c: 2a:47:70:98:c0:20:94:75:b1:a0:37:8c:0a:15:7e:d8:c6:71: 86:bd:20:f5:3c:07:f8:db:c4:0d:88:76:2a:12:fa:f3:36:d8: 54:2e:2d:d5:e0:95:ec:fa:e3:45:24:e6:9d:7a:84:a6:6f:53: 80:03:c5:03:8e:2d:68:3f:e9:28:ce:66:a6:cf:78:59:e7:0c: 18:4b:bb:dc:02:37:12:b9:9b:3e:90:49:b7:ed:05:16:1e:b0: e8:3d:fe:08:58:f4:80:97:f1:39:02:65:20:5b:27:6b:e5:d2: d6:33:a0:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoOERFOUQwNzRGRjNDOEQ1MTU0MTVFQkYwRjBFNTZBQzAz RUVBREQzQTAeFw0yNTA3MDEwODUwNTZaFw0yNTA3MDgwODUwNTZaMBgxFjAUBgNV BAMTDTY4NjNhMTcwLThjZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXS79J8VHwGgQzH0d2Q/nGFVrp5bKDi+h9wZBivUIDvK/vg+uy94QRtxNFycEl cmzCvf90L4ZOyVzKGi7gV6rPdUIn8Inpde1QJ2BhjgETtg8ZCWsIbKGRjT9qw+jb RqxQ8ozBzttArYgR8FmZe4VUqNmWAj0TtRkcADqr6bhAiDUBRvnaaGnncF5J/lIK fvz4HZQeHqt+YKtWYGUD5NNzqBLRkIefXjf+ownlHUAes872OqWKCKkE7nxZ3sBc UbwngelgmiCGPAcqHEDEbIYWFBGUSjmF2eqfPXpeXpBzRatyvx/ktDaGuqrjAI39 yMmxevedU/7r6YA3kywt2o7pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8Nwmna1K ckz1OCeXKcC7vJDbMJAwHwYDVR0jBBgwFoAUjenQdP88jVFUFevw8OVqwD7q3Tow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzNEOEFDNTQ2M0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamVuUWRQODhqVkZVRmV2dzhPVnF3RDdxM1RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzNEOEFDNTQ2M0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZG VUZldnc4T1Zxd0Q3cTNUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFAJVwmHbCzr8d/qwG+IsN67NybklkTSAb9Tbs80fDxq8bO6WwuUD0Uk Dl2yXBjRKwucQ6vlfYrD2IbQ2VC4VUhKB/+6Q86efXrLVb8HgmqN+uNLUXmaWWtH n22N8ozhAJfMVhk8BvnOARlabsraY0l8mLpT0YZL8NhTxw8t3N+UzNvJ970xVTqM 5szOx3LcfCpHcJjAIJR1saA3jAoVftjGcYa9IPU8B/jbxA2IdioS+vM22FQuLdXg lez640Uk5p16hKZvU4ADxQOOLWg/6SjOZqbPeFnnDBhLu9wCNxK5mz6QSbftBRYe sOg9/ghY9ICX8TkCZSBbJ2vl0tYzoNA= -----END CERTIFICATE-----Generated at Wed Jul 2 19:57:42 2025 by rpki-client