$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: SRT5NVqJNm/vlKvJ8saKsFiFsJ7yxsKPLXcvcLeepoU= Subject key identifier: 09:1B:99:71:D1:08:CE:78:CD:84:D0:2E:42:B9:44:C1:5D:E4:4C:40 Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 34A2 Signing time: Mon 30 Jun 2025 15:20:56 +0000 Manifest this update: Mon 30 Jun 2025 15:20:56 +0000 Manifest next update: Mon 07 Jul 2025 15:20:56 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: KyDnbzYfbLouIEQy5RVWTCG7he12+sZVgCRpoPsI9fY=) 2: 2417A16240D111EEB97F9366C4F9AE02.roa (hash: 5HxbfCADS0YE8zgWBNeHaLAjeMofIFQYhkC/UJjBOds=) 3: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: qoJIoB5IZhCrFKoONH6w1qM5F//MbDhtykwiUAx2/AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Jun 30 15:20:56 2025 GMT Not After : Jul 7 15:20:56 2025 GMT Subject: CN=6862ab58-b9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:8a:49:85:6e:0d:25:69:a4:15:68:ea:2c: 96:57:57:e4:3c:01:ae:64:fe:86:19:de:85:94:4a: 64:74:40:ea:64:8f:17:9e:d3:e0:b1:7d:90:ea:42: 27:92:08:5c:8f:2e:41:b9:60:d4:20:87:f2:e4:34: 0b:82:3a:82:d2:b8:b3:05:ae:ee:46:4b:99:de:c9: e9:7a:3a:5c:84:c9:b0:7b:5c:c2:14:6f:d1:07:6d: 68:58:fc:7b:34:7b:3e:76:03:41:78:ed:7b:cb:e1: 66:34:b4:c3:d8:ca:e6:62:f4:ed:9e:9c:5c:cb:00: 03:b1:e7:59:4f:0b:c1:7c:f0:11:ef:ba:72:86:02: ed:2b:cf:bc:c6:e3:8c:b7:23:89:f2:e0:68:15:d9: 8d:b2:3a:f0:47:e3:29:44:23:68:63:d8:3b:01:19: 18:48:e4:25:90:fc:44:66:9b:32:67:03:7b:1f:82: 18:6b:f9:59:4b:b1:8a:a1:5d:76:f1:40:ef:1b:de: 27:a3:39:35:f3:93:1c:49:0c:0a:2e:f1:62:b4:b9: 3b:55:7d:aa:75:d1:e6:dd:d1:a4:31:5a:62:58:b3: b1:74:b0:fd:94:e9:be:71:77:05:de:08:aa:c3:b6: d4:c5:bf:ae:71:15:4f:8b:3a:24:fb:c4:b7:d8:07: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1B:99:71:D1:08:CE:78:CD:84:D0:2E:42:B9:44:C1:5D:E4:4C:40 X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7b:e6:6c:41:34:79:a8:8f:c8:17:3f:1d:ea:4f:9b:e5:5d: 91:de:46:cd:ef:77:2d:d3:6f:cc:42:4f:4d:f8:40:f9:aa:3a: 10:1c:24:c1:c1:9a:80:45:b3:c0:e5:7b:12:dd:17:c9:90:47: 73:76:9a:90:81:e2:29:09:23:04:7e:e9:a7:d3:74:c4:05:9b: 3f:87:7d:1e:45:5a:de:89:42:74:b4:73:1b:af:d9:da:88:8f: 0d:48:f1:27:7a:8e:1c:09:fe:5a:fa:61:e3:db:b7:d8:8c:8d: 53:7e:a3:36:33:ee:20:2e:23:b0:42:73:e8:b9:c4:cb:00:08: 1b:02:ef:b0:c6:9d:c4:92:0b:46:5f:6a:3b:45:0b:6a:9f:8f: de:e8:2c:90:50:1e:19:53:78:89:71:bc:24:f3:78:1b:ab:0e: 2c:fd:6e:93:4b:94:a8:4e:e4:52:de:e3:a0:56:7f:64:63:a2: c8:35:28:d3:ae:85:21:57:89:fc:57:51:15:04:f6:2a:ba:6b: 11:14:cd:8a:c5:eb:63:07:92:4b:67:95:a3:eb:68:5e:ae:7c: 75:f7:5d:1d:0a:70:de:91:01:cb:6f:3a:98:3e:a7:8a:89:ee: fb:e1:e8:b1:04:99:85:15:ed:98:9a:e0:73:17:6b:73:e4:c8: 13:19:6c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjUwNjMwMTUyMDU2WhcNMjUwNzA3MTUyMDU2WjAYMRYwFAYD VQQDEw02ODYyYWI1OC1iOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40qKSYVuDSVppBVo6iyWV1fkPAGuZP6GGd6FlEpkdEDqZI8XntPgsX2Q6kIn kghcjy5BuWDUIIfy5DQLgjqC0rizBa7uRkuZ3snpejpchMmwe1zCFG/RB21oWPx7 NHs+dgNBeO17y+FmNLTD2MrmYvTtnpxcywADsedZTwvBfPAR77pyhgLtK8+8xuOM tyOJ8uBoFdmNsjrwR+MpRCNoY9g7ARkYSOQlkPxEZpsyZwN7H4IYa/lZS7GKoV12 8UDvG94nozk185McSQwKLvFitLk7VX2qddHm3dGkMVpiWLOxdLD9lOm+cXcF3giq w7bUxb+ucRVPizok+8S32AfPeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkbmXHR CM54zYTQLkK5RMFd5ExAMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxe+ZsQTR5qI/IFz8d6k+b5V2R3kbN73ct02/MQk9N+ED5qjoQHCTB wZqARbPA5XsS3RfJkEdzdpqQgeIpCSMEfumn03TEBZs/h30eRVreiUJ0tHMbr9na iI8NSPEneo4cCf5a+mHj27fYjI1TfqM2M+4gLiOwQnPoucTLAAgbAu+wxp3EkgtG X2o7RQtqn4/e6CyQUB4ZU3iJcbwk83gbqw4s/W6TS5SoTuRS3uOgVn9kY6LINSjT roUhV4n8V1EVBPYqumsRFM2KxetjB5JLZ5Wj62hernx1910dCnDekQHLbzqYPqeK ie774eixBJmFFe2YmuBzF2tz5MgTGWyj -----END CERTIFICATE-----Generated at Wed Jul 2 12:25:57 2025 by rpki-client