$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: mT+XLc2YMFTdOK0r1ZJ/x0vMGxY+GC2gsgbPGtPnuaw= Subject key identifier: E6:28:9C:76:C1:1F:E7:C7:81:C3:9B:22:EC:5A:7F:0E:0D:86:52:90 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 34AE Signing time: Fri 04 Jul 2025 15:24:42 +0000 Manifest this update: Fri 04 Jul 2025 15:24:41 +0000 Manifest next update: Fri 11 Jul 2025 15:24:41 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: 47vRz2/znfAi7IHqPiSsbuDNnRrhgx0wf0TpcqNqf8Q=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Jul 4 15:24:41 2025 GMT Not After : Jul 11 15:24:41 2025 GMT Subject: CN=6867f239-0b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:6c:26:a6:5e:67:33:69:bc:b3:78:c1:7c: ad:46:d8:5f:6f:14:74:e1:8c:e5:4e:5e:97:82:7d: 41:d3:16:b0:f4:51:1d:de:c8:6c:9c:8e:1a:dc:78: 17:1b:37:f4:39:d0:55:fb:b7:c6:12:ec:aa:04:12: e8:ba:bd:f2:b0:3e:77:f6:97:c3:f4:f6:49:54:8e: 58:ce:39:fb:b1:08:ff:9a:15:4f:50:90:50:5d:c4: 3b:c6:0c:04:92:93:c5:1b:72:81:39:89:16:d7:01: 60:f4:c7:3f:bd:25:e2:28:53:38:99:da:59:49:83: 30:3e:e2:33:b8:b1:68:6b:a4:ab:e8:13:dd:3b:7b: fe:e4:39:bf:de:aa:53:45:17:f4:ff:d0:e4:66:df: 74:c4:a2:74:72:da:f7:0c:89:1c:c1:99:72:0e:76: 05:be:44:fa:0f:a3:7c:47:58:f8:e7:bb:6e:16:2d: b5:15:ba:9c:74:87:85:26:b4:ba:77:60:67:89:30: 8f:ad:69:c1:f5:10:c4:f0:46:87:9b:39:24:f0:7a: 9c:0e:71:af:3a:f8:83:a0:56:b4:64:f7:81:53:ac: b0:ef:92:ba:e7:76:17:01:65:7f:f7:63:e3:fc:e0: 6c:4f:4b:0b:2e:e4:84:b1:e5:78:57:58:98:3e:59: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:28:9C:76:C1:1F:E7:C7:81:C3:9B:22:EC:5A:7F:0E:0D:86:52:90 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7a:94:f8:59:9f:a5:b8:54:98:59:5a:1c:df:a7:d1:f2:d3: 8a:bd:dc:ab:0c:8d:83:71:48:f3:fe:ab:83:30:82:63:f1:d8: a4:f9:97:6e:81:ba:fe:40:dc:75:c7:6f:41:17:f2:03:99:4e: 63:7c:8c:ac:31:2e:ad:e3:fa:9e:12:cf:12:c4:1e:1a:dc:61: 06:c5:00:9d:4f:06:d6:9d:ce:3d:ba:38:32:a8:bc:91:56:72: 99:82:17:e5:59:62:90:74:96:6d:64:74:2f:1e:5b:f1:a2:0b: 67:6e:10:cc:cf:01:c8:a1:af:22:bc:8c:14:0c:2c:85:d9:4e: 6f:1a:d7:a3:67:7c:63:27:0a:38:73:10:e9:c5:f6:41:bb:e5: 84:13:78:5c:4b:c8:8f:f3:2c:a0:95:8d:90:ca:37:2b:03:ef: 5b:a0:7b:fc:0e:e6:76:5d:ad:c4:ff:cf:a3:4b:9b:0d:1d:01: de:7c:73:67:05:45:1e:d4:f1:4b:b7:97:e2:99:28:e5:5e:90: 80:64:ae:09:8b:db:6f:ce:44:60:f1:93:67:18:f7:8c:27:b1: 54:27:61:90:8f:92:bc:cf:61:73:37:76:80:1f:aa:85:91:b9: a6:79:a3:4e:10:35:7d:2e:b4:f2:95:2e:33:56:4a:48:74:ed: d7:c7:49:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwNzA0MTUyNDQxWhcNMjUwNzExMTUyNDQxWjAYMRYwFAYD VQQDEw02ODY3ZjIzOS0wYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtVsJqZeZzNpvLN4wXytRthfbxR04YzlTl6Xgn1B0xaw9FEd3shsnI4a3HgX Gzf0OdBV+7fGEuyqBBLour3ysD539pfD9PZJVI5Yzjn7sQj/mhVPUJBQXcQ7xgwE kpPFG3KBOYkW1wFg9Mc/vSXiKFM4mdpZSYMwPuIzuLFoa6Sr6BPdO3v+5Dm/3qpT RRf0/9DkZt90xKJ0ctr3DIkcwZlyDnYFvkT6D6N8R1j457tuFi21FbqcdIeFJrS6 d2BniTCPrWnB9RDE8EaHmzkk8HqcDnGvOviDoFa0ZPeBU6yw75K653YXAWV/92Pj /OBsT0sLLuSEseV4V1iYPlkLrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYonHbB H+fHgcObIuxafw4NhlKQMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGepT4WZ+luFSYWVoc36fR8tOKvdyrDI2DcUjz/quDMIJj8dik+Zdu gbr+QNx1x29BF/IDmU5jfIysMS6t4/qeEs8SxB4a3GEGxQCdTwbWnc49ujgyqLyR VnKZghflWWKQdJZtZHQvHlvxogtnbhDMzwHIoa8ivIwUDCyF2U5vGtejZ3xjJwo4 cxDpxfZBu+WEE3hcS8iP8yyglY2QyjcrA+9boHv8DuZ2Xa3E/8+jS5sNHQHefHNn BUUe1PFLt5fimSjlXpCAZK4Ji9tvzkRg8ZNnGPeMJ7FUJ2GQj5K8z2FzN3aAH6qF kbmmeaNOEDV9LrTylS4zVkpIdO3Xx0k6 -----END CERTIFICATE-----Generated at Fri Jul 4 22:14:54 2025 by rpki-client