$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: dhc13lxKeUdl2z+oNidPl12ohBrJNLmFeRLj80HHFss= Subject key identifier: 50:3D:1B:01:78:84:DF:06:2E:A5:A4:E6:54:F1:D6:A0:6C:44:6F:9D Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 06FE Signing time: Wed 02 Jul 2025 22:13:22 +0000 Manifest this update: Wed 02 Jul 2025 22:13:21 +0000 Manifest next update: Wed 09 Jul 2025 22:13:21 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: tSFcEip2E9Eccy0fmb3f6EIGzC6T9r5HVYN0lgHWQwU=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: Jul 2 22:13:21 2025 GMT Not After : Jul 9 22:13:21 2025 GMT Subject: CN=6865af01-2c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:88:d0:34:29:b1:6d:8d:da:b8:b1:62:ef: 8f:8e:77:44:b0:18:a3:33:63:09:83:4b:90:ed:55: 77:82:33:94:97:ab:43:d8:eb:f1:0b:b5:45:42:0c: ba:13:7f:06:17:f8:ee:f9:5f:9f:75:7c:9c:d8:aa: c9:57:92:12:43:5d:37:5a:95:db:8c:93:96:8b:b2: 64:95:69:9b:4d:fd:56:cb:cf:cb:eb:e8:e9:50:2c: 33:15:c4:3c:13:25:3c:31:18:3a:d2:52:b5:62:1a: a3:88:98:93:63:5a:5f:3a:ab:c7:b9:e5:40:01:5a: 3f:92:f2:63:45:d6:5c:33:5c:2c:60:02:e3:0c:56: fb:b4:71:9e:8f:31:d2:6d:41:2b:38:d6:0d:d5:51: 4f:0f:d5:ea:bb:ef:21:ae:0a:ae:21:07:4a:40:c5: e1:78:7f:ae:f7:de:82:31:a5:20:ed:68:9e:8d:bf: a4:45:38:ab:9b:37:7f:a8:09:6c:c0:3c:cb:43:fa: dd:ca:15:2e:87:15:d4:ad:99:b1:70:4b:9e:81:34: ac:6f:f9:a3:b7:c4:ad:64:75:bf:58:35:ee:44:73: 33:12:71:ca:e9:96:ce:8d:55:dd:bd:56:5c:09:10: ea:a3:a0:ce:db:7a:13:84:8e:8a:2c:d6:bc:7e:be: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3D:1B:01:78:84:DF:06:2E:A5:A4:E6:54:F1:D6:A0:6C:44:6F:9D X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:cd:bd:6f:e7:ab:18:ed:d4:1b:d9:b8:16:92:90:cf:e6:1e: a9:ce:f9:06:89:54:b8:26:40:83:0c:9f:79:88:79:67:a5:01: dd:a5:80:c9:34:85:f2:8c:b3:9f:a7:28:b1:9b:2d:6a:0f:06: 9d:89:d1:10:1f:d0:46:9e:6d:63:9b:71:99:27:b0:6e:b7:29: 62:4d:d4:db:90:de:8c:33:53:bd:20:46:d3:55:88:c0:f3:98: 3d:92:c7:45:39:3c:e7:9e:2a:23:f9:25:03:4f:a0:91:5e:dc: 82:81:5d:3f:57:b1:c9:1c:50:93:b1:be:c1:9c:a2:7e:5a:af: 0f:83:f9:5f:00:ac:e6:ff:51:06:e1:27:7f:d2:36:af:6b:98: 4b:fd:3f:e3:66:fd:39:35:5c:ca:03:33:cf:0a:7d:c3:5a:3d: d8:d9:75:ee:80:b5:04:78:a1:29:1d:3f:78:65:a5:04:b3:5e: b4:f7:a1:67:0d:1b:3a:d5:4f:7e:70:cb:36:b7:b0:d2:5a:38: b0:21:9a:7a:0c:19:17:53:1a:5a:8c:20:13:2a:67:1d:e3:97: 42:c9:ea:3b:07:1e:9b:5c:cd:3e:a5:c3:1b:f0:f3:3f:ff:c0: 90:a5:be:b5:e9:53:21:b1:a8:58:30:32:0a:d1:da:49:1d:eb: e6:27:e0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUwNzAyMjIxMzIxWhcNMjUwNzA5MjIxMzIxWjAYMRYwFAYD VQQDEw02ODY1YWYwMS0yYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEKI0DQpsW2N2rixYu+PjndEsBijM2MJg0uQ7VV3gjOUl6tD2OvxC7VFQgy6 E38GF/ju+V+fdXyc2KrJV5ISQ103WpXbjJOWi7JklWmbTf1Wy8/L6+jpUCwzFcQ8 EyU8MRg60lK1YhqjiJiTY1pfOqvHueVAAVo/kvJjRdZcM1wsYALjDFb7tHGejzHS bUErONYN1VFPD9Xqu+8hrgquIQdKQMXheH+u996CMaUg7Wiejb+kRTirmzd/qAls wDzLQ/rdyhUuhxXUrZmxcEuegTSsb/mjt8StZHW/WDXuRHMzEnHK6ZbOjVXdvVZc CRDqo6DO23oThI6KLNa8fr4SlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA9GwF4 hN8GLqWk5lTx1qBsRG+dMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjzb1v56sY7dQb2bgWkpDP5h6pzvkGiVS4JkCDDJ95iHlnpQHdpYDJ NIXyjLOfpyixmy1qDwadidEQH9BGnm1jm3GZJ7ButyliTdTbkN6MM1O9IEbTVYjA 85g9ksdFOTznnioj+SUDT6CRXtyCgV0/V7HJHFCTsb7BnKJ+Wq8Pg/lfAKzm/1EG 4Sd/0java5hL/T/jZv05NVzKAzPPCn3DWj3Y2XXugLUEeKEpHT94ZaUEs16096Fn DRs61U9+cMs2t7DSWjiwIZp6DBkXUxpajCATKmcd45dCyeo7Bx6bXM0+pcMb8PM/ /8CQpb616VMhsahYMDIK0dpJHevmJ+AP -----END CERTIFICATE-----Generated at Fri Jul 4 10:59:32 2025 by rpki-client