$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: YRMdsu/LHiqgraNJgVMrTpD7mYo9ORLXJX5y3wccazg= Subject key identifier: 7C:E9:69:DF:82:76:DE:0D:95:3D:86:43:36:D6:AA:CD:2E:B1:2A:D7 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 7C Signing time: Tue 01 Jul 2025 07:28:49 +0000 Manifest this update: Tue 01 Jul 2025 07:28:48 +0000 Manifest next update: Tue 08 Jul 2025 07:28:48 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: yfKTf/inxjoAydpjxhGKkfsjNLKXOqWrpUB6/lC6LFk=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Jul 1 07:28:48 2025 GMT Not After : Jul 8 07:28:48 2025 GMT Subject: CN=68638e31-cafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:58:b1:db:7a:c5:52:b6:74:43:ef:6f:9a: 62:6c:b5:d4:fc:f0:15:01:55:4b:b5:fd:c3:5a:dd: c5:1c:27:f0:e7:55:f7:4a:8c:fc:e5:f6:ef:aa:b0: 6b:eb:65:53:02:a0:bf:5f:b6:4b:85:91:05:d1:14: 55:96:65:a2:a0:21:4a:59:04:44:ed:91:14:91:82: 1a:2c:10:3a:69:9a:58:a1:68:f0:3e:7d:97:ec:d8: e4:26:a1:e3:08:d0:80:37:c5:ad:e5:fa:32:b0:a4: b2:a4:d6:f2:0e:6b:46:ae:f1:44:fc:da:eb:97:c4: ab:f8:93:16:89:42:cf:d3:4f:75:7b:e6:37:94:5c: ae:c5:4a:76:e4:6f:11:16:d2:f4:10:1f:de:96:04: ac:e4:6a:ee:10:7f:c4:2d:bd:8e:97:0d:58:e4:25: 09:27:1f:e3:1d:aa:35:c8:a4:14:77:6f:dc:2b:e6: 78:ef:e1:30:0f:7c:0a:07:df:88:71:24:05:ff:c2: 48:0e:a5:bc:73:8b:42:0a:ae:77:ec:74:a5:36:a6: 7f:82:5f:c0:f9:02:fe:a7:d5:7c:77:6e:ab:59:8c: 1a:cc:ff:cb:ef:c2:e6:82:08:dc:bd:1f:3d:dd:f5: f0:39:2b:4c:1a:53:1d:32:05:05:97:45:06:8c:b8: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E9:69:DF:82:76:DE:0D:95:3D:86:43:36:D6:AA:CD:2E:B1:2A:D7 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:57:fc:b6:e7:f3:19:1b:a3:ff:36:19:1e:9a:aa:62:5e:87: a5:c0:85:fd:ea:48:c6:02:6f:3e:88:60:63:7c:92:57:f9:e1: 04:09:70:75:e5:e0:7a:35:11:93:a4:45:42:01:76:03:05:bb: 5d:00:2d:4b:34:46:ca:a7:3e:c4:28:4e:b5:93:c4:98:cb:d5: 4d:f8:7d:42:47:04:a6:e8:86:35:0a:54:a6:ab:94:03:c3:d8: 67:7c:fc:eb:c3:de:ae:2d:44:2b:3c:3b:d5:73:af:cb:f0:28: 47:cb:20:e4:c9:1e:ba:e9:7b:b4:6e:5d:c3:80:4d:c5:94:08: c4:f9:b1:90:e7:fd:16:37:f0:85:2d:df:78:f5:0e:e0:c3:38: cb:0a:f9:01:90:9d:9f:3e:2e:75:6a:c2:a4:9f:c7:ec:9a:1f: 07:4c:04:b9:6e:22:96:c1:5b:09:c6:2c:78:24:08:3f:a2:ae: ea:91:94:ab:56:6b:49:b4:1a:26:74:e8:1d:3d:8e:36:84:d4: 67:1f:1a:a8:3a:0c:ee:c4:60:c9:1f:d3:d8:62:8f:1c:0e:dc: 62:f2:35:ef:fd:8e:6b:c3:65:66:13:a7:de:ea:c1:23:dc:04: 75:fb:19:d7:11:19:b5:4a:a9:a0:ee:49:42:e4:3a:87:75:b3: ab:d8:92:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUM2QTExMC8GA1UEBRMoNDQ5RDA3REE5MjBEQTAyNjM0MkJGNkUyNjg5Q0M3RTBG MEEzQ0FGQzAeFw0yNTA3MDEwNzI4NDhaFw0yNTA3MDgwNzI4NDhaMBgxFjAUBgNV BAMTDTY4NjM4ZTMxLWNhZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkCFix23rFUrZ0Q+9vmmJstdT88BUBVUu1/cNa3cUcJ/DnVfdKjPzl9u+qsGvr ZVMCoL9ftkuFkQXRFFWWZaKgIUpZBETtkRSRghosEDppmlihaPA+fZfs2OQmoeMI 0IA3xa3l+jKwpLKk1vIOa0au8UT82uuXxKv4kxaJQs/TT3V75jeUXK7FSnbkbxEW 0vQQH96WBKzkau4Qf8QtvY6XDVjkJQknH+MdqjXIpBR3b9wr5njv4TAPfAoH34hx JAX/wkgOpbxzi0IKrnfsdKU2pn+CX8D5Av6n1Xx3bqtZjBrM/8vvwuaCCNy9Hz3d 9fA5K0waUx0yBQWXRQaMuEcZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfOlp34J2 3g2VPYZDNtaqzS6xKtcwHwYDVR0jBBgwFoAURJ0H2pINoCY0K/biaJzH4PCjyvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQzZBLzkwNjYyRUI2OUMw QTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkowSDJwSU5vQ1kwS19iaWFKekg0UENqeXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QzZBLzkwNjYyRUI2OUMwQTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZ MEtfYmlhSnpINFBDanl2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9X/Lbn8xkbo/82GR6aqmJeh6XAhf3qSMYCbz6IYGN8klf54QQJcHXl 4Ho1EZOkRUIBdgMFu10ALUs0RsqnPsQoTrWTxJjL1U34fUJHBKbohjUKVKarlAPD 2Gd8/OvD3q4tRCs8O9Vzr8vwKEfLIOTJHrrpe7RuXcOATcWUCMT5sZDn/RY38IUt 33j1DuDDOMsK+QGQnZ8+LnVqwqSfx+yaHwdMBLluIpbBWwnGLHgkCD+iruqRlKtW a0m0GiZ06B09jjaE1GcfGqg6DO7EYMkf09hijxwO3GLyNe/9jmvDZWYTp97qwSPc BHX7GdcRGbVKqaDuSULkOod1s6vYko0= -----END CERTIFICATE-----Generated at Thu Jul 3 03:59:53 2025 by rpki-client