$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: ZMkvy2NjfARcI/KmxC7NoOcu2BY3s+NMgOD+ige8bAk= Subject key identifier: CF:A4:A3:D1:11:65:5D:C3:EF:D9:62:6E:37:60:93:2C:6B:8E:0A:5C Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 01D2 Signing time: Thu 03 Jul 2025 02:56:57 +0000 Manifest this update: Thu 03 Jul 2025 02:56:57 +0000 Manifest next update: Thu 10 Jul 2025 02:56:57 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: YRHJ8CbR3bcb1N5f9Ud5+jMtaaGBqkEJgLv91lTQJI0=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Jul 3 02:56:57 2025 GMT Not After : Jul 10 02:56:57 2025 GMT Subject: CN=6865f179-c299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:c7:ce:cf:ed:af:2e:01:df:ed:bd:15:ec: 60:08:05:0d:ec:b4:f9:02:a4:b4:82:31:5b:c2:18: 70:c7:90:4a:17:0a:52:49:62:27:e8:7f:30:e9:ef: f9:66:8b:66:2b:fb:a3:e5:21:71:42:75:15:71:4b: 8d:94:ad:3d:5f:c7:6b:e1:bb:59:f6:94:49:60:3a: 2e:07:29:73:69:66:93:07:61:cb:02:a2:83:78:e8: df:a9:83:4f:52:c7:25:67:c4:6b:8d:30:6e:29:59: d0:ca:14:b3:eb:6d:50:15:cf:a4:ee:2e:64:e8:1d: 7e:f1:99:e5:48:d1:30:ae:58:60:58:e3:af:f3:e0: 36:8b:24:0e:38:e7:11:44:a1:30:04:b8:67:3b:b0: f5:31:50:b4:d1:69:7b:61:14:02:cc:4a:db:10:ba: 7a:8f:1b:d7:17:6c:a6:96:13:fc:6e:91:ef:fd:2a: 66:bd:28:67:fe:4a:26:90:c0:b2:fa:3f:b1:6d:d5: ec:10:28:5a:ba:df:10:9c:cf:94:5c:ab:be:06:76: 53:34:0e:00:0e:1b:af:18:45:0b:b7:f0:e3:03:0e: 54:59:ca:d3:31:1a:12:40:a4:c5:fe:ae:bc:4b:40: f5:93:3c:21:1d:6e:46:fe:da:c7:f7:13:24:90:9f: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A4:A3:D1:11:65:5D:C3:EF:D9:62:6E:37:60:93:2C:6B:8E:0A:5C X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5c:a8:f7:d7:11:dc:8d:61:69:66:50:5b:fa:33:53:be:25: d1:2b:c3:a0:72:97:6f:00:f9:c1:ef:8d:8a:64:00:e7:dc:df: 77:2c:34:00:2b:e6:24:da:91:47:3b:ec:01:26:68:15:f1:2b: 5c:f3:0c:0f:ce:df:50:15:13:65:03:d8:96:17:1a:8d:5b:75: fb:f4:6e:2b:2f:96:6d:77:0c:df:ff:c0:49:93:9b:a0:2e:d1: 98:63:51:16:f7:e6:16:a6:25:36:54:eb:bc:b8:5a:97:b6:41: 94:70:90:cb:33:dd:2f:d1:cf:a7:33:fb:3f:f9:62:90:05:ab: b0:7a:d2:4d:12:8e:6c:90:61:62:76:15:60:2d:e0:1c:1c:67: 20:fa:f5:6a:b8:d3:1b:9b:98:26:cb:00:30:d3:e4:73:0d:18: 2c:1b:f4:12:46:93:13:35:c4:7c:88:cf:a2:ba:26:fd:8b:5f: 21:ed:ce:57:b2:79:dc:c8:85:81:16:c1:2e:8c:f1:c8:0c:e7: c8:72:c5:f1:22:80:a4:b5:dc:cc:6c:56:39:0b:f9:74:58:f5: 29:3d:ab:96:4b:00:44:79:3b:c8:b3:25:e0:69:d7:41:6f:2e: aa:a2:5a:e6:98:fc:8c:22:5f:43:60:a9:95:38:55:a0:9a:f2: 32:c0:47:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUwNzAzMDI1NjU3WhcNMjUwNzEwMDI1NjU3WjAYMRYwFAYD VQQDEw02ODY1ZjE3OS1jMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51rHzs/try4B3+29FexgCAUN7LT5AqS0gjFbwhhwx5BKFwpSSWIn6H8w6e/5 ZotmK/uj5SFxQnUVcUuNlK09X8dr4btZ9pRJYDouBylzaWaTB2HLAqKDeOjfqYNP UsclZ8RrjTBuKVnQyhSz621QFc+k7i5k6B1+8ZnlSNEwrlhgWOOv8+A2iyQOOOcR RKEwBLhnO7D1MVC00Wl7YRQCzErbELp6jxvXF2ymlhP8bpHv/SpmvShn/komkMCy +j+xbdXsEChaut8QnM+UXKu+BnZTNA4ADhuvGEULt/DjAw5UWcrTMRoSQKTF/q68 S0D1kzwhHW5G/trH9xMkkJ959QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+ko9ER ZV3D79libjdgkyxrjgpcMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsXKj31xHcjWFpZlBb+jNTviXRK8OgcpdvAPnB742KZADn3N93LDQA K+Yk2pFHO+wBJmgV8Stc8wwPzt9QFRNlA9iWFxqNW3X79G4rL5Ztdwzf/8BJk5ug LtGYY1EW9+YWpiU2VOu8uFqXtkGUcJDLM90v0c+nM/s/+WKQBauwetJNEo5skGFi dhVgLeAcHGcg+vVquNMbm5gmywAw0+RzDRgsG/QSRpMTNcR8iM+iuib9i18h7c5X snncyIWBFsEujPHIDOfIcsXxIoCktdzMbFY5C/l0WPUpPauWSwBEeTvIsyXgaddB by6qolrmmPyMIl9DYKmVOFWgmvIywEfj -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:17 2025 by rpki-client