$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: TDIPPOhQ7z+IPzrDviTB7pneTwwNsnh9URtwEr0DusA= Subject key identifier: C0:09:3A:3B:62:40:1E:10:D7:B7:62:79:7A:6C:91:C7:82:2E:70:C5 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 0126 Signing time: Tue 01 Jul 2025 05:13:16 +0000 Manifest this update: Tue 01 Jul 2025 05:13:15 +0000 Manifest next update: Tue 08 Jul 2025 05:13:15 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: ZYz05qvGtgu1Z3GeiarGIFijaP5f3Mv0hzXCfNmyGY0=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Jul 1 05:13:15 2025 GMT Not After : Jul 8 05:13:15 2025 GMT Subject: CN=68636e6b-25b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a3:63:f9:a3:71:b7:ce:68:f4:e0:aa:f9:e1: 8a:30:6c:1c:cf:df:13:44:e0:2b:f7:d6:13:a8:2a: 32:16:0e:09:00:b7:3e:e5:55:96:a0:c4:74:b4:96: f9:28:07:3b:e3:38:74:3c:a4:e7:77:97:ec:97:3c: 02:9c:57:c3:72:d2:43:41:c6:1c:b9:11:19:80:8c: e8:15:ae:b7:52:c8:fa:7e:61:15:b6:23:7b:aa:07: 43:90:56:16:80:99:be:d2:eb:0b:c5:5e:c4:d7:1e: 94:1f:9a:a0:f0:ba:82:c5:b9:03:79:e3:ac:b0:5e: ec:8c:7e:89:3d:c8:8a:78:f1:b8:af:4f:08:d6:17: 29:ee:cf:45:6a:f2:9c:03:0b:ac:7b:cd:c7:7e:be: 32:43:0f:b0:2a:67:d4:b0:fd:86:82:2c:4f:a4:a6: 7f:b4:8a:e3:70:e1:6d:c4:df:ad:69:24:ff:ee:8d: 51:eb:1d:38:bd:7f:ab:f3:59:d2:61:6e:50:b8:26: de:02:3e:3e:e6:a0:6d:ca:54:b0:1c:05:66:ec:ba: c8:1f:e4:af:45:ee:8a:d9:9b:d0:3b:3c:0f:b6:b3: c0:c7:7f:a5:78:b1:51:f0:c1:74:bf:08:60:01:17: ee:f2:5c:da:a3:22:6d:ed:b4:d8:97:ca:22:6e:cd: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:3A:3B:62:40:1E:10:D7:B7:62:79:7A:6C:91:C7:82:2E:70:C5 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:46:35:d6:26:46:d2:2c:88:5a:80:a4:1a:d1:72:1b:6c:26: 7b:a8:f5:c4:68:d7:87:ec:24:59:ef:5e:0c:12:3f:bb:f1:b8: 7e:0e:39:4d:b0:c0:4e:dd:17:65:f9:ef:80:59:ba:b6:21:ed: 8a:ec:81:f7:02:e0:ff:fb:65:ad:9c:2f:70:f1:2c:d8:79:cc: f8:f4:a1:c4:8d:91:73:c1:b7:cf:e4:57:e1:7b:92:f0:af:64: 25:8d:1d:a4:e7:2b:c9:06:05:33:1e:c8:8e:8d:a2:26:8b:49: d3:d7:29:b6:d9:4b:76:dc:92:fb:f4:34:26:fa:e2:2e:ae:5c: 47:2d:5f:c9:5a:a8:bd:4d:b2:80:ef:cf:0d:76:b9:b5:97:43: 1d:81:2b:6e:14:3d:10:a7:c2:5d:28:39:a6:54:3b:aa:4e:58: 9e:d7:27:d8:4b:ee:9d:65:0f:1d:d7:eb:a9:4f:34:62:54:ac: ee:fb:dd:05:8e:4c:93:bd:3a:3d:77:98:90:1d:80:b0:5b:21: 0f:a1:ef:b5:d4:4f:bc:3b:7c:d6:76:b8:b8:1a:78:35:1c:a8: 58:6c:64:b4:56:d2:a4:66:8b:31:d8:65:b1:8d:99:66:66:2d: 92:8f:78:f0:d6:89:2c:80:1e:2a:ad:a2:fa:ea:8d:3a:4e:fd: c9:ad:06:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwNzAxMDUxMzE1WhcNMjUwNzA4MDUxMzE1WjAYMRYwFAYD VQQDEw02ODYzNmU2Yi0yNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8aNj+aNxt85o9OCq+eGKMGwcz98TROAr99YTqCoyFg4JALc+5VWWoMR0tJb5 KAc74zh0PKTnd5fslzwCnFfDctJDQcYcuREZgIzoFa63Usj6fmEVtiN7qgdDkFYW gJm+0usLxV7E1x6UH5qg8LqCxbkDeeOssF7sjH6JPciKePG4r08I1hcp7s9FavKc Awuse83Hfr4yQw+wKmfUsP2GgixPpKZ/tIrjcOFtxN+taST/7o1R6x04vX+r81nS YW5QuCbeAj4+5qBtylSwHAVm7LrIH+SvRe6K2ZvQOzwPtrPAx3+leLFR8MF0vwhg ARfu8lzaoyJt7bTYl8oibs3ufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAJOjti QB4Q17dieXpskceCLnDFMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZRjXWJkbSLIhagKQa0XIbbCZ7qPXEaNeH7CRZ714MEj+78bh+DjlN sMBO3Rdl+e+AWbq2Ie2K7IH3AuD/+2WtnC9w8SzYecz49KHEjZFzwbfP5Ffhe5Lw r2QljR2k5yvJBgUzHsiOjaImi0nT1ym22Ut23JL79DQm+uIurlxHLV/JWqi9TbKA 788Ndrm1l0MdgStuFD0Qp8JdKDmmVDuqTlie1yfYS+6dZQ8d1+upTzRiVKzu+90F jkyTvTo9d5iQHYCwWyEPoe+11E+8O3zWdri4Gng1HKhYbGS0VtKkZosx2GWxjZlm Zi2Sj3jw1oksgB4qraL66o06Tv3JrQa1 -----END CERTIFICATE-----Generated at Wed Jul 2 06:10:43 2025 by rpki-client