$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: vD8ma8GLvPgsldTi13bwkKxNxxIrmmfarSr4dTnfqp4= Subject key identifier: 94:7B:77:AA:DA:F8:32:2B:B1:C8:7A:9B:96:01:6C:9E:9B:FD:AF:02 Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 0240 Signing time: Tue 01 Jul 2025 03:03:58 +0000 Manifest this update: Tue 01 Jul 2025 03:03:57 +0000 Manifest next update: Tue 08 Jul 2025 03:03:57 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: 1BH45/L6YLBcMBixY7FlubHAbk+JB61b5/huM4LktDA=) 2: 105CF2182FEE11F0A3938C3BC4F9AE02.roa (hash: 59eyuT2URuKIljZ2Lh3Qk0mAQWOkmIViAcmW+OHdvw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Jul 1 03:03:57 2025 GMT Not After : Jul 8 03:03:57 2025 GMT Subject: CN=6863501e-10c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:35:55:c5:cb:95:72:56:54:62:0b:fa:a1: 4e:78:2e:72:07:b4:3c:a6:77:e3:ff:c1:84:2f:6a: 49:5e:a7:ba:d2:84:3e:c3:04:5e:fd:d5:99:25:dc: 0e:f0:d0:e8:1b:9a:03:ee:9d:79:46:e8:fa:5c:c7: 29:47:e9:71:86:e1:c2:1a:93:47:8e:2a:c4:f3:d7: 72:6e:1a:68:02:ff:48:c3:9c:6b:f7:ad:a8:1d:8f: fb:40:95:97:f3:e2:f5:fd:31:4e:df:eb:2d:ae:72: aa:3b:29:dd:63:c2:a8:53:f2:10:fc:07:dc:da:f2: ac:ba:ae:f7:b0:9e:ea:d7:c9:69:4a:eb:b9:0d:d6: ab:a4:82:f9:75:6c:b8:7a:4b:da:dc:24:61:6a:fa: f0:ea:35:c5:f4:15:36:be:ce:cb:a8:3f:47:07:6b: 0f:d5:3f:8f:5d:bc:64:96:7e:22:bb:7a:99:8e:e9: 3a:8e:5f:8e:14:30:49:0f:eb:9c:23:4f:6f:26:55: 53:d3:95:8b:e0:de:6c:e2:28:8f:b3:48:b3:dd:07: c3:2f:12:48:2e:82:37:ce:c7:db:e2:73:ef:c0:c0: c5:73:4b:cd:ca:0f:6c:17:64:63:c0:b5:f4:4a:bc: a4:fb:94:de:28:25:e9:e0:63:7b:a8:5b:88:28:4e: 60:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7B:77:AA:DA:F8:32:2B:B1:C8:7A:9B:96:01:6C:9E:9B:FD:AF:02 X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:31:66:b7:1a:4f:ef:5b:52:3f:6d:84:20:5e:12:b1:14:38: 25:cf:f7:13:a5:07:da:70:02:53:69:79:68:ea:37:5e:73:ca: 9b:2c:69:9b:e7:25:1d:f4:ef:47:25:45:2a:a0:86:d7:45:0a: 99:63:21:02:93:2f:5c:34:5c:a8:93:83:80:3c:39:0e:f2:68: 77:60:4b:eb:72:37:ef:e3:b2:e9:22:47:14:3b:35:5b:0d:e0: e8:dc:21:9b:d0:c6:03:19:12:fa:ea:3b:ee:be:39:8b:2a:4a: dd:88:ff:9d:f3:80:4d:22:48:69:e6:01:4f:24:3f:72:da:55: 13:60:0c:49:de:fc:f6:48:f8:bf:f2:5b:46:5c:d9:45:83:b0: 1e:e8:c4:21:f5:cb:31:1f:16:2a:e0:81:8b:b1:2f:ad:5c:9c: e0:e3:b3:01:b2:54:44:26:19:aa:c8:83:fd:3f:8d:bd:54:29: 6f:67:26:1a:f8:72:44:9f:05:a3:49:88:d3:33:6a:50:f4:da: d3:91:f4:d1:7e:13:3d:3f:d2:f8:f9:53:f5:01:e0:ae:f5:b1: 36:ae:72:27:c8:1a:e7:2f:ca:52:c3:32:41:45:75:4b:2a:4f: 94:ef:3b:40:cb:41:06:76:96:ea:21:9a:13:3e:3b:a6:7d:8f: 4b:a9:60:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUwNzAxMDMwMzU3WhcNMjUwNzA4MDMwMzU3WjAYMRYwFAYD VQQDEw02ODYzNTAxZS0xMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOM1VcXLlXJWVGIL+qFOeC5yB7Q8pnfj/8GEL2pJXqe60oQ+wwRe/dWZJdwO 8NDoG5oD7p15Ruj6XMcpR+lxhuHCGpNHjirE89dybhpoAv9Iw5xr962oHY/7QJWX 8+L1/TFO3+strnKqOyndY8KoU/IQ/Afc2vKsuq73sJ7q18lpSuu5DdarpIL5dWy4 ekva3CRhavrw6jXF9BU2vs7LqD9HB2sP1T+PXbxkln4iu3qZjuk6jl+OFDBJD+uc I09vJlVT05WL4N5s4iiPs0iz3QfDLxJILoI3zsfb4nPvwMDFc0vNyg9sF2RjwLX0 Sryk+5TeKCXp4GN7qFuIKE5gzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR7d6ra +DIrsch6m5YBbJ6b/a8CMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAMWa3Gk/vW1I/bYQgXhKxFDglz/cTpQfacAJTaXlo6jdec8qbLGmb 5yUd9O9HJUUqoIbXRQqZYyECky9cNFyok4OAPDkO8mh3YEvrcjfv47LpIkcUOzVb DeDo3CGb0MYDGRL66jvuvjmLKkrdiP+d84BNIkhp5gFPJD9y2lUTYAxJ3vz2SPi/ 8ltGXNlFg7Ae6MQh9csxHxYq4IGLsS+tXJzg47MBslREJhmqyIP9P429VClvZyYa +HJEnwWjSYjTM2pQ9NrTkfTRfhM9P9L4+VP1AeCu9bE2rnInyBrnL8pSwzJBRXVL Kk+U7ztAy0EGdpbqIZoTPjumfY9LqWCn -----END CERTIFICATE-----Generated at Tue Jul 1 13:11:29 2025 by rpki-client