$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: NJSl/V9FUhftrBLbZn1Q4y3THcklyNA9KXg3uh/6BeM= Subject key identifier: BD:E2:5A:16:C6:3F:B8:88:E3:51:35:DC:75:21:52:D3:E0:78:C0:55 Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 01CA Signing time: Thu 03 Jul 2025 03:00:26 +0000 Manifest this update: Thu 03 Jul 2025 03:00:25 +0000 Manifest next update: Thu 10 Jul 2025 03:00:25 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: GvHm373rFRk9Ok68a6+Cvx7umhVwug1J65ZY45sOzhI=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Jul 3 03:00:25 2025 GMT Not After : Jul 10 03:00:25 2025 GMT Subject: CN=6865f249-a8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:7c:64:67:25:aa:92:fd:5f:8b:0c:3f:27: 8b:2e:51:46:a5:0e:38:ad:c3:5b:22:0c:ed:85:c4: a3:52:50:36:13:a9:52:da:36:bd:d7:1a:c5:3d:6f: 76:11:60:c5:9e:29:3a:a2:99:f1:e2:54:e4:ff:c1: f2:16:dd:b6:42:81:1c:65:f9:ea:2e:7a:fc:92:07: 0f:79:a4:27:5f:35:db:40:e3:b2:af:f0:36:a3:8d: 5c:c7:22:91:b1:68:6e:e1:8c:5b:72:d0:8a:d4:07: f9:9e:c2:02:84:ee:6e:71:1b:96:d9:8f:68:6a:3a: ea:6a:fe:31:41:99:1b:e0:61:a5:15:15:95:59:80: 06:30:b0:e5:3a:2f:a9:60:67:1c:4d:1c:f0:61:4e: 58:72:3b:d1:6a:60:e5:23:b6:83:fc:a7:42:94:4c: 69:ec:39:5e:b7:a3:e0:75:17:43:c5:d9:a9:a8:8d: 97:3d:4b:e9:1b:5e:65:16:4f:fe:89:93:90:3f:63: b5:16:bf:c3:78:bd:19:a0:ff:fe:ac:bd:49:b7:3e: 42:52:3b:04:72:12:a8:c0:88:5f:82:ba:21:82:e9: 6b:4e:be:ca:b3:8e:e6:e8:ed:bd:82:47:f6:45:29: 49:ea:60:da:66:74:7f:39:28:47:73:e4:70:57:d9: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:5A:16:C6:3F:B8:88:E3:51:35:DC:75:21:52:D3:E0:78:C0:55 X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:1b:19:ab:cd:36:c9:a2:38:a9:68:28:09:91:cf:5f:fd:54: a0:9a:0f:95:fc:78:ae:e5:f6:46:21:fe:ad:bf:db:d1:ec:50: 9f:70:19:8b:c9:1a:89:b0:19:9f:36:30:d1:b4:54:7b:30:1d: a6:72:e4:e1:e9:5d:81:90:06:f9:64:ab:46:30:d7:85:f4:98: 0e:43:93:af:7b:63:ff:87:9f:28:3c:5c:7e:32:11:5c:23:cd: 5f:3e:be:ca:04:d4:c3:50:9b:5a:f3:e4:cf:f8:08:f8:99:82: d3:42:77:14:fe:d5:d2:af:20:7b:76:d8:ae:02:76:c0:ec:dc: 14:b2:d3:a3:49:a5:84:2b:3e:6b:47:9c:fa:26:ba:cc:f2:f6: f3:f1:3f:ac:0e:66:02:30:fc:a0:78:33:99:c2:e8:7e:00:24: 98:b1:92:32:77:f9:25:3a:5e:80:f7:5a:d1:b1:fe:b9:67:34: 1a:05:aa:0b:ae:86:8d:dd:d5:41:ac:d6:2a:9f:35:e8:41:b2: 7f:7f:c8:93:20:bf:44:91:f9:83:98:5c:96:e4:21:9b:db:e1: ed:27:4e:c3:de:3a:45:e2:79:9f:7e:65:37:84:77:b4:52:b9: f2:ca:fd:66:84:91:11:0b:aa:cd:a6:c5:d7:6a:b7:54:3f:93: 99:d1:a9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUwNzAzMDMwMDI1WhcNMjUwNzEwMDMwMDI1WjAYMRYwFAYD VQQDEw02ODY1ZjI0OS1hOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPJ8ZGclqpL9X4sMPyeLLlFGpQ44rcNbIgzthcSjUlA2E6lS2ja91xrFPW92 EWDFnik6opnx4lTk/8HyFt22QoEcZfnqLnr8kgcPeaQnXzXbQOOyr/A2o41cxyKR sWhu4YxbctCK1Af5nsIChO5ucRuW2Y9oajrqav4xQZkb4GGlFRWVWYAGMLDlOi+p YGccTRzwYU5YcjvRamDlI7aD/KdClExp7Dlet6PgdRdDxdmpqI2XPUvpG15lFk/+ iZOQP2O1Fr/DeL0ZoP/+rL1Jtz5CUjsEchKowIhfgrohgulrTr7Ks47m6O29gkf2 RSlJ6mDaZnR/OShHc+RwV9lhzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3iWhbG P7iI41E13HUhUtPgeMBVMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnGxmrzTbJojipaCgJkc9f/VSgmg+V/Hiu5fZGIf6tv9vR7FCfcBmL yRqJsBmfNjDRtFR7MB2mcuTh6V2BkAb5ZKtGMNeF9JgOQ5Ove2P/h58oPFx+MhFc I81fPr7KBNTDUJta8+TP+Aj4mYLTQncU/tXSryB7dtiuAnbA7NwUstOjSaWEKz5r R5z6JrrM8vbz8T+sDmYCMPygeDOZwuh+ACSYsZIyd/klOl6A91rRsf65ZzQaBaoL roaN3dVBrNYqnzXoQbJ/f8iTIL9EkfmDmFyW5CGb2+HtJ07D3jpF4nmffmU3hHe0 Urnyyv1mhJERC6rNpsXXardUP5OZ0alU -----END CERTIFICATE-----Generated at Fri Jul 4 16:24:04 2025 by rpki-client