$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: J8vJAuJXkZfrsxRdkI3jrkfoci+i6chvuLTYnXPA7r4= Subject key identifier: B9:4C:81:CE:45:22:53:94:74:F6:BA:17:5A:E3:41:D8:90:BB:4F:BA Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: 4A Signing time: Tue 01 Jul 2025 08:10:16 +0000 Manifest this update: Tue 01 Jul 2025 08:10:15 +0000 Manifest next update: Tue 08 Jul 2025 08:10:15 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: aDm9FmyleQjAjbBv6gimOjGbfcDCIkVMxyY8OpHjof0=) 2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: jOhNPwVgr8IgRDHfIrJJZGVjc3Pfqrjw7RoDj2c/Y0o=) 3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: spTkb5xEKtj6kOvbsLtYV5brzWGqrgveZXxT4s0PHa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: Jul 1 08:10:15 2025 GMT Not After : Jul 8 08:10:15 2025 GMT Subject: CN=686397e8-6bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:da:4b:6d:3b:87:46:54:62:53:7f:4a:92: 2d:7a:a6:a8:f3:01:9d:86:24:fa:d2:a4:20:4e:6e: 1b:8b:60:08:c8:c1:f0:5f:da:c8:1e:50:f7:07:75: 6b:ce:47:a6:3d:5d:e6:8f:89:9f:83:aa:48:9d:91: a0:3b:48:96:44:39:aa:fd:04:f4:89:d7:fa:8f:4d: f2:e5:d4:5e:68:ca:31:c3:04:b8:c3:b2:1d:91:7d: cf:fa:f9:5d:d1:d8:a4:4f:c6:0f:76:48:7e:f2:0b: cd:a7:31:25:d3:91:5f:ea:4d:ca:da:f4:b3:7b:30: e3:9d:2e:f2:18:3c:ea:b6:04:bc:a4:4f:3a:3a:04: b6:a4:1a:34:de:88:db:d1:89:1e:47:c1:7b:54:a6: 16:79:68:6f:02:06:d2:52:d9:1f:85:ca:99:e3:5d: 5f:c8:94:03:de:04:11:10:96:b3:25:b3:50:d2:c5: 98:c5:94:2d:7d:70:eb:d9:bd:e4:ad:0d:38:3c:4f: 42:f2:22:8c:7b:3a:02:59:22:a2:61:9d:8c:96:4a: 76:2f:37:82:3b:d6:6b:4d:be:b1:5a:79:2b:60:f2: df:c3:e8:d6:51:9f:a6:7f:0d:a1:4e:24:61:7c:c4: 46:04:e4:01:09:1d:11:78:cd:77:b4:43:60:91:14: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4C:81:CE:45:22:53:94:74:F6:BA:17:5A:E3:41:D8:90:BB:4F:BA X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9e:a1:4b:7c:b2:b1:0d:a3:36:92:61:7b:c0:4b:bc:15:9a: dc:76:98:f4:df:ca:ae:b8:ad:40:13:4b:6e:44:8b:09:14:0a: f0:b6:a4:14:c0:bf:3e:87:f4:ca:f7:aa:59:23:7b:45:10:19: d4:11:c8:71:41:87:18:dc:a3:10:7c:6d:8b:5f:4c:7a:c9:65: 79:b7:33:e6:bc:98:26:6b:9b:11:3c:49:80:4b:9a:43:bc:3a: 37:7c:d1:a5:da:7c:19:41:2f:25:bb:04:14:5f:0a:c3:24:bc: a7:1d:fc:7e:32:13:44:f8:39:41:b5:45:be:b3:20:a5:7a:22: 2c:f8:c9:16:a5:8c:da:69:63:65:59:d1:c5:91:4e:f8:b1:10: e6:39:be:de:aa:7f:c0:7b:92:af:a8:3d:90:d7:d9:53:33:85: aa:77:6f:0b:ac:3e:c5:37:ec:38:59:26:dc:c8:fa:8c:34:f6: ec:39:78:da:bf:b3:bd:32:c2:9d:e8:d0:57:43:93:d0:67:18: eb:cc:41:65:08:ed:e8:95:57:66:9c:a0:f6:59:32:a4:e8:d9: d1:bc:61:ff:e0:8a:dd:e8:4d:24:ce:b4:61:08:71:2a:32:9a: 83:ea:fd:b1:fd:2f:e6:d1:a9:e4:c9:ae:ae:0b:cd:89:af:29: cf:60:d1:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTk2RTExMC8GA1UEBRMoMjQyOUEzRUU1MDg4RjNENDUzNzJBOEUzQjM2ODM0Qzc1 RUFFNkQyOTAeFw0yNTA3MDEwODEwMTVaFw0yNTA3MDgwODEwMTVaMBgxFjAUBgNV BAMTDTY4NjM5N2U4LTZiZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEAdpLbTuHRlRiU39Kki16pqjzAZ2GJPrSpCBObhuLYAjIwfBf2sgeUPcHdWvO R6Y9XeaPiZ+DqkidkaA7SJZEOar9BPSJ1/qPTfLl1F5oyjHDBLjDsh2Rfc/6+V3R 2KRPxg92SH7yC82nMSXTkV/qTcra9LN7MOOdLvIYPOq2BLykTzo6BLakGjTeiNvR iR5HwXtUphZ5aG8CBtJS2R+FypnjXV/IlAPeBBEQlrMls1DSxZjFlC19cOvZveSt DTg8T0LyIox7OgJZIqJhnYyWSnYvN4I71mtNvrFaeStg8t/D6NZRn6Z/DaFOJGF8 xEYE5AEJHRF4zXe0Q2CRFCfhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuUyBzkUi U5R09roXWuNB2JC7T7owHwYDVR0jBBgwFoAUJCmj7lCI89RTcqjjs2g0x16ubSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTZFLzIzRDJGMTZFRUMy MTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkNtajdsQ0k4OVJUY3FqanMyZzB4MTZ1YlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTZFLzIzRDJGMTZFRUMyMTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlS VGNxampzMmcweDE2dWJTay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAByeoUt8srENozaSYXvAS7wVmtx2mPTfyq64rUATS25EiwkUCvC2pBTA vz6H9Mr3qlkje0UQGdQRyHFBhxjcoxB8bYtfTHrJZXm3M+a8mCZrmxE8SYBLmkO8 Ojd80aXafBlBLyW7BBRfCsMkvKcd/H4yE0T4OUG1Rb6zIKV6Iiz4yRaljNppY2VZ 0cWRTvixEOY5vt6qf8B7kq+oPZDX2VMzhap3bwusPsU37DhZJtzI+ow09uw5eNq/ s70ywp3o0FdDk9BnGOvMQWUI7eiVV2acoPZZMqTo2dG8Yf/git3oTSTOtGEIcSoy moPq/bH9L+bRqeTJrq4LzYmvKc9g0Xg= -----END CERTIFICATE-----Generated at Tue Jul 1 18:32:42 2025 by rpki-client