$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: yzh2m2HGjDTIveY7kQICyTFE9lLbsV7lgsuP391qzCY= Subject key identifier: FE:4B:F8:88:C7:C3:52:48:A8:E3:6C:90:DD:C0:9E:2A:78:01:95:E1 Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0AB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0AA8 Signing time: Mon 30 Jun 2025 19:40:45 +0000 Manifest this update: Mon 30 Jun 2025 19:40:44 +0000 Manifest next update: Mon 07 Jul 2025 19:40:44 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: Pl2SR7rDXM2amWia0kF08nXQstwVpmC2MBE1uLxJCfQ=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Jun 30 19:40:44 2025 GMT Not After : Jul 7 19:40:44 2025 GMT Subject: CN=6862e83c-1613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:82:da:61:db:8d:7f:e8:e9:5b:e1:f2:2f: 27:a7:82:18:e4:f1:a2:2b:aa:72:b7:8d:af:49:44: 0f:55:b9:39:33:ee:31:13:e2:13:9d:6e:07:b5:28: 94:27:2a:d3:30:dd:b1:52:38:f2:ee:de:2d:1a:c0: ba:0a:ff:99:4f:60:28:9c:d9:3d:5c:70:c0:61:3c: 41:72:18:54:ba:63:24:17:71:a9:56:c6:cd:dc:0d: 0a:99:7d:b4:c6:5b:dc:34:a3:ff:bf:fe:ce:67:2e: 85:62:07:dd:6b:94:11:73:3e:cb:24:3e:23:18:74: 56:f6:60:c1:ac:36:8d:16:98:bd:a9:2e:09:2b:bb: aa:4d:d6:6f:7d:86:77:a4:4a:97:21:c7:ae:62:7b: 39:e1:1e:4f:da:25:53:00:25:b5:8f:a1:cd:ef:35: 4d:0c:53:49:d4:64:05:26:60:7d:d9:8a:9f:1a:92: ae:45:44:b0:56:fe:c9:43:87:86:31:82:86:30:5c: fc:23:ba:46:2f:5f:e6:6a:a8:c2:50:4b:d1:17:43: 5a:83:ad:73:61:b8:3e:3f:5a:be:a1:5b:00:0a:6c: f4:58:c7:e7:bb:c5:f8:6b:d0:06:b7:d0:25:70:ba: 3d:c6:66:72:46:33:ff:7c:fd:82:7a:c1:50:85:01: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:F8:88:C7:C3:52:48:A8:E3:6C:90:DD:C0:9E:2A:78:01:95:E1 X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7d:b8:77:36:8c:b1:33:78:c8:4c:ee:ab:d8:96:e2:a1:43: e3:fc:a7:35:3f:87:59:d7:1a:5d:2f:23:32:fb:dc:8d:79:5a: c8:77:3d:c1:a6:8d:0c:96:fc:0a:56:bf:57:16:07:33:30:84: 83:f9:67:6b:c9:ef:4a:f1:c5:d4:86:2a:29:60:1e:7c:a2:8e: 26:60:38:34:80:18:fa:c4:2c:24:18:80:7d:c8:bc:b4:27:9b: 20:97:ed:ae:c0:27:93:dc:c1:e4:8b:b3:ea:b0:52:55:25:77: 87:29:59:de:d3:a9:ff:36:ab:f3:a1:b5:67:01:28:a5:6c:c5: b2:b2:f7:36:7d:bd:9c:71:9a:3e:68:1e:ce:71:3c:c3:38:86: 92:ce:e0:bf:8a:ee:44:3d:95:d6:ed:2e:0a:9d:9d:cc:25:5b: a2:4f:a8:fa:f3:9b:d2:7c:a3:a6:16:18:77:58:f8:e1:03:79: f5:7f:75:91:04:be:e5:72:03:94:07:e9:55:49:6e:3f:8e:18: 6a:21:cd:cb:4d:c6:01:ec:51:a3:89:64:df:e3:42:f0:d7:37: 02:b8:b6:8a:32:49:26:7a:9b:67:3d:cd:26:45:8c:65:92:f5: a7:bc:53:2e:74:2e:7c:41:85:e2:6a:74:68:dc:8c:1d:e0:29: 3e:22:b5:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUwNjMwMTk0MDQ0WhcNMjUwNzA3MTk0MDQ0WjAYMRYwFAYD VQQDEw02ODYyZTgzYy0xNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZOC2mHbjX/o6Vvh8i8np4IY5PGiK6pyt42vSUQPVbk5M+4xE+ITnW4HtSiU JyrTMN2xUjjy7t4tGsC6Cv+ZT2AonNk9XHDAYTxBchhUumMkF3GpVsbN3A0KmX20 xlvcNKP/v/7OZy6FYgfda5QRcz7LJD4jGHRW9mDBrDaNFpi9qS4JK7uqTdZvfYZ3 pEqXIceuYns54R5P2iVTACW1j6HN7zVNDFNJ1GQFJmB92YqfGpKuRUSwVv7JQ4eG MYKGMFz8I7pGL1/maqjCUEvRF0Nag61zYbg+P1q+oVsACmz0WMfnu8X4a9AGt9Al cLo9xmZyRjP/fP2CesFQhQF1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5L+IjH w1JIqONskN3Anip4AZXhMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgfbh3NoyxM3jITO6r2JbioUPj/Kc1P4dZ1xpdLyMy+9yNeVrIdz3B po0MlvwKVr9XFgczMISD+Wdrye9K8cXUhiopYB58oo4mYDg0gBj6xCwkGIB9yLy0 J5sgl+2uwCeT3MHki7PqsFJVJXeHKVne06n/NqvzobVnASilbMWysvc2fb2ccZo+ aB7OcTzDOIaSzuC/iu5EPZXW7S4KnZ3MJVuiT6j685vSfKOmFhh3WPjhA3n1f3WR BL7lcgOUB+lVSW4/jhhqIc3LTcYB7FGjiWTf40Lw1zcCuLaKMkkmeptnPc0mRYxl kvWnvFMudC58QYXianRo3Iwd4Ck+IrUn -----END CERTIFICATE-----Generated at Tue Jul 1 18:05:25 2025 by rpki-client