$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: MZuujNHv8P24tZK3nG8BJR6Qk6S4//8QPx6voI2l6Rk= Subject key identifier: 10:E0:4B:C7:4F:CC:96:DA:CF:73:84:BD:0D:BF:82:10:FB:9F:CC:C4 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 028A Signing time: Tue 01 Jul 2025 02:21:22 +0000 Manifest this update: Tue 01 Jul 2025 02:21:21 +0000 Manifest next update: Tue 08 Jul 2025 02:21:21 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: PBtjrClHWhQLrs0GoPf+gNd+fk0sorW5yYBIb0ALICg=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Jul 1 02:21:21 2025 GMT Not After : Jul 8 02:21:21 2025 GMT Subject: CN=68634621-f6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:33:9d:cb:88:79:84:80:cb:6b:51:63:71: 84:b9:94:05:31:af:a9:52:5d:7c:22:ef:0b:83:40: 10:12:8e:3e:19:71:5b:93:eb:e9:b3:10:d3:bf:b2: df:93:77:9f:df:60:69:ae:ab:86:cc:d9:4a:5a:59: e8:bf:f3:6d:d8:a9:a3:b9:d0:f2:44:e5:de:c9:f5: 6e:c6:2a:3c:cd:65:8f:76:87:ee:dd:4e:63:c1:28: 54:46:47:0e:ca:a9:12:6a:c6:81:34:39:e3:65:76: cc:a9:cc:af:52:17:ca:2b:5e:8c:fe:9c:8e:2a:42: d7:bb:51:73:5e:e1:dc:21:1f:1f:85:fa:12:d3:6d: 9c:f8:af:5e:c3:a8:a0:dc:17:25:7e:e0:3c:45:8f: d0:67:e6:93:40:f1:21:2c:2e:9c:7b:80:de:cd:da: 41:b7:50:6f:ac:18:9a:b5:30:ec:d1:a6:bd:a7:63: 7b:29:3c:1e:73:e3:5d:b9:e1:1c:63:6c:57:68:9b: 6a:51:be:2a:5a:15:c4:33:75:96:8f:52:46:0c:73: ae:67:38:15:2f:6b:09:7e:42:18:aa:b6:d4:51:e0: c6:c8:0e:71:b1:23:d9:09:42:7e:9a:3b:e6:64:87: 16:7f:e4:b3:29:c6:ff:7d:03:1c:33:b8:0e:4f:05: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E0:4B:C7:4F:CC:96:DA:CF:73:84:BD:0D:BF:82:10:FB:9F:CC:C4 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:0f:9e:1f:d5:d9:8a:3d:1c:5b:f4:ac:0e:9d:7e:a9:54:59: d3:66:f0:a0:d1:06:c1:30:c9:3e:b4:cb:cd:36:28:5f:e8:2a: a6:59:36:9a:86:83:6e:31:73:d6:38:47:d4:70:9d:84:db:98: d8:4a:8c:0b:7e:32:af:be:92:47:0b:8a:70:d9:cb:67:d3:d4: 44:ba:f7:94:3a:32:26:8e:84:02:1a:ef:5d:8d:29:51:a3:97: 48:72:13:67:c4:e7:1f:5c:98:a5:55:aa:bb:e1:cb:b2:5c:a2: 10:50:79:ff:f1:e0:f9:b1:2a:0b:dc:1b:76:27:b6:5a:18:17: 9b:e7:b3:2a:ce:99:8d:f9:58:cf:f6:44:44:db:6a:73:08:b5: 21:9b:40:45:c1:75:e4:83:d0:15:0f:e1:2a:23:eb:ce:7e:6c: 44:2c:6c:c8:32:4e:cd:ce:dd:01:f7:91:df:45:95:7e:70:67: 83:c8:1d:fc:e8:d0:b9:e1:77:ec:d6:05:b2:0f:fb:d8:8a:bd: c4:7a:8d:0f:a2:ad:f0:9a:96:e5:67:c0:24:00:30:4b:e8:7d: 68:35:f6:82:02:cd:a7:85:dd:f8:d6:98:e0:22:e8:ce:77:67: f3:f2:8c:0b:31:a4:ba:46:fa:24:67:d8:fc:a8:64:a6:81:07: a0:e7:f5:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUwNzAxMDIyMTIxWhcNMjUwNzA4MDIyMTIxWjAYMRYwFAYD VQQDEw02ODYzNDYyMS1mNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHszncuIeYSAy2tRY3GEuZQFMa+pUl18Iu8Lg0AQEo4+GXFbk+vpsxDTv7Lf k3ef32BprquGzNlKWlnov/Nt2KmjudDyROXeyfVuxio8zWWPdofu3U5jwShURkcO yqkSasaBNDnjZXbMqcyvUhfKK16M/pyOKkLXu1FzXuHcIR8fhfoS022c+K9ew6ig 3BclfuA8RY/QZ+aTQPEhLC6ce4DezdpBt1BvrBiatTDs0aa9p2N7KTwec+NdueEc Y2xXaJtqUb4qWhXEM3WWj1JGDHOuZzgVL2sJfkIYqrbUUeDGyA5xsSPZCUJ+mjvm ZIcWf+SzKcb/fQMcM7gOTwUE8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDgS8dP zJbaz3OEvQ2/ghD7n8zEMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWD54f1dmKPRxb9KwOnX6pVFnTZvCg0QbBMMk+tMvNNihf6CqmWTaa hoNuMXPWOEfUcJ2E25jYSowLfjKvvpJHC4pw2ctn09REuveUOjImjoQCGu9djSlR o5dIchNnxOcfXJilVaq74cuyXKIQUHn/8eD5sSoL3Bt2J7ZaGBeb57MqzpmN+VjP 9kRE22pzCLUhm0BFwXXkg9AVD+EqI+vOfmxELGzIMk7Nzt0B95HfRZV+cGeDyB38 6NC54Xfs1gWyD/vYir3Eeo0Poq3wmpblZ8AkADBL6H1oNfaCAs2nhd341pjgIujO d2fz8owLMaS6RvokZ9j8qGSmgQeg5/X4 -----END CERTIFICATE-----Generated at Wed Jul 2 22:43:53 2025 by rpki-client