$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: zDW1oCn12kdg+DI700AFdHXCRXsvjRiYox1ogi88vVY= Subject key identifier: B9:AC:C6:8F:24:9C:B2:26:11:49:BF:1D:A6:62:54:40:A5:68:D8:58 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 079C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 077C Signing time: Mon 30 Jun 2025 21:53:31 +0000 Manifest this update: Mon 30 Jun 2025 21:53:30 +0000 Manifest next update: Mon 07 Jul 2025 21:53:30 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: PBUkewJIbqD5icSKxmDhTLMXyUyMDsLRczcIL5tcNtM=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Jun 30 21:53:30 2025 GMT Not After : Jul 7 21:53:30 2025 GMT Subject: CN=6863075a-6cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:12:84:25:dc:05:f5:e7:4e:ca:50:0f:2d:47: 43:73:e2:f4:d7:1b:b4:c3:32:db:57:67:0d:5a:21: 5d:af:68:b2:33:8e:ec:00:c8:a4:c0:2c:73:f5:b4: cc:61:df:23:af:87:22:de:34:44:ce:c2:35:d1:b9: a4:17:0b:77:1d:97:d1:bd:68:a4:fb:f0:ad:38:7d: ac:d2:12:76:13:db:24:f6:a3:41:4a:11:c6:8e:37: 7d:03:82:4e:88:a9:fc:fb:e0:d4:c9:2f:8d:6d:c3: c3:31:5c:53:bf:ef:9d:70:a4:ab:37:2f:ee:57:e9: dc:e7:7f:65:7e:94:b6:36:d1:c6:f0:3b:83:f5:48: 6a:71:28:14:37:ae:7d:4c:9c:b1:0e:9f:98:a5:17: d9:0d:37:54:20:a0:f5:e8:0f:0a:96:23:8c:5b:f5: 11:f7:49:eb:85:1a:42:4c:f1:69:09:be:e3:14:fd: 91:e8:25:aa:e2:86:df:7d:21:f4:aa:ff:9d:53:ab: 16:17:dd:cc:57:7b:c0:ef:19:e1:9d:46:de:6b:69: a6:d3:de:30:ee:ce:21:d3:4a:ac:2d:da:49:b2:a9: 15:7d:af:33:1c:0a:a8:ea:b9:19:cf:ab:8a:32:e4: b8:ad:7c:a6:8d:fb:75:5e:96:39:5a:f6:2d:a4:d6: ad:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AC:C6:8F:24:9C:B2:26:11:49:BF:1D:A6:62:54:40:A5:68:D8:58 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e2:9e:ca:d3:f5:c8:9e:2a:39:a3:d0:5e:aa:50:50:a8:45: 22:53:18:f3:70:42:83:5b:05:2d:55:90:5e:3c:3f:4b:7b:d4: fe:ac:2d:b8:85:cf:c9:d1:01:07:06:b3:c0:db:c2:2e:be:e6: 46:81:fa:44:1b:24:61:2d:99:c9:93:3d:0f:04:89:79:d9:ee: be:29:9b:b4:a3:8f:13:7f:98:51:c8:24:d8:39:6e:b0:89:f8: 4f:91:1e:43:59:a7:5a:4a:ce:20:5d:66:49:78:67:b0:81:76: e7:b1:ec:b7:62:41:ec:f9:82:92:a2:15:ef:5f:20:31:e9:d2: 47:ad:27:e8:81:d8:3f:48:83:a9:73:60:a3:b3:ba:b6:bc:09: 68:2f:ca:21:23:2c:37:54:38:98:cb:d2:1f:af:f2:9a:51:ed: f5:ca:65:18:e9:57:97:98:ed:5c:0c:f5:f0:0d:e1:c6:58:e4: d4:fd:ae:bd:55:8f:b3:e6:a5:a6:ef:5f:a2:60:b5:4d:38:0e: 33:5d:e1:84:d9:d7:98:c9:bb:39:09:2b:b4:b5:91:1d:c6:db: 53:12:d6:0d:b8:7a:ce:4e:80:77:80:78:15:7a:43:69:07:99: 77:f9:a6:ea:5a:1c:9c:ab:d5:8a:7b:dc:4c:cb:f4:d8:e8:dc: 5d:7e:25:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUwNjMwMjE1MzMwWhcNMjUwNzA3MjE1MzMwWjAYMRYwFAYD VQQDEw02ODYzMDc1YS02Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7RKEJdwF9edOylAPLUdDc+L01xu0wzLbV2cNWiFdr2iyM47sAMikwCxz9bTM Yd8jr4ci3jREzsI10bmkFwt3HZfRvWik+/CtOH2s0hJ2E9sk9qNBShHGjjd9A4JO iKn8++DUyS+NbcPDMVxTv++dcKSrNy/uV+nc539lfpS2NtHG8DuD9UhqcSgUN659 TJyxDp+YpRfZDTdUIKD16A8KliOMW/UR90nrhRpCTPFpCb7jFP2R6CWq4obffSH0 qv+dU6sWF93MV3vA7xnhnUbea2mm094w7s4h00qsLdpJsqkVfa8zHAqo6rkZz6uK MuS4rXymjft1XpY5WvYtpNattwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmsxo8k nLImEUm/HaZiVEClaNhYMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS4p7K0/XInio5o9BeqlBQqEUiUxjzcEKDWwUtVZBePD9Le9T+rC24 hc/J0QEHBrPA28IuvuZGgfpEGyRhLZnJkz0PBIl52e6+KZu0o48Tf5hRyCTYOW6w ifhPkR5DWadaSs4gXWZJeGewgXbnsey3YkHs+YKSohXvXyAx6dJHrSfogdg/SIOp c2Cjs7q2vAloL8ohIyw3VDiYy9Ifr/KaUe31ymUY6VeXmO1cDPXwDeHGWOTU/a69 VY+z5qWm71+iYLVNOA4zXeGE2deYybs5CSu0tZEdxttTEtYNuHrOToB3gHgVekNp B5l3+abqWhycq9WKe9xMy/TY6NxdfiVp -----END CERTIFICATE-----Generated at Wed Jul 2 14:20:45 2025 by rpki-client