$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json) Hash identifier: ELIY3equ/L2qFWm06kU2NelyrEUdjf9xjNG1OYuCfVA= Subject key identifier: D2:20:CB:CD:D9:0D:1A:2C:7F:99:EA:9E:AA:93:6B:5C:8F:00:09:26 Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Certificate serial: 2F30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft Manifest number: 2F1D Signing time: Wed 02 Jul 2025 15:35:21 +0000 Manifest this update: Wed 02 Jul 2025 15:35:21 +0000 Manifest next update: Wed 09 Jul 2025 15:35:21 +0000 Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: lS2Gdut20QsDFMuyMdzSz1gyOSshFkF3zW99DOj+u8Q=) 2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: rIMMBkLsJhvHP3s43Vw8ftneFBn/jmHGzW7joo2aCks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12080 (0x2f30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Validity Not Before: Jul 2 15:35:21 2025 GMT Not After : Jul 9 15:35:21 2025 GMT Subject: CN=686551b9-bd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:c4:0a:23:88:17:2c:40:e6:e4:b3:5e:40: c5:f6:86:84:d3:bc:81:54:c7:be:81:15:1e:a3:21: 68:f0:51:eb:11:c1:c3:5b:e7:03:80:65:43:a2:cb: 1a:8a:c3:07:51:e0:df:f0:09:ff:9c:7b:05:90:fe: f7:60:8d:e8:79:b2:6c:55:41:02:92:66:a4:f7:14: fb:54:76:6e:82:91:bd:3f:da:5c:19:c2:4b:32:d0: cf:6a:d2:15:41:5c:a1:cb:ec:a7:d5:a2:56:18:fc: 37:70:50:e7:dc:cf:03:9e:f8:ca:15:70:e3:4a:ac: f1:32:fd:74:8d:26:5b:93:de:ec:00:09:99:8b:94: a4:48:9b:2c:42:07:f2:f2:7b:57:10:8e:6a:30:a3: fa:ee:6f:5e:38:ab:b3:7d:88:81:a0:a8:e0:5a:06: 75:01:8b:d4:07:fb:2c:7e:7b:1f:b4:69:cb:77:ec: 2b:39:51:ee:25:df:70:c0:4c:b5:0f:bc:7b:59:e0: 9d:83:55:46:52:b5:6b:df:6d:00:3c:02:1a:5a:0e: 1b:fc:7c:b6:a7:51:83:a7:5e:fc:b6:56:1c:3e:ae: b1:5e:a6:df:c0:07:ae:40:bf:7a:11:66:4b:28:76: 9f:67:ea:57:31:19:70:dc:28:ef:5e:60:55:61:60: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:20:CB:CD:D9:0D:1A:2C:7F:99:EA:9E:AA:93:6B:5C:8F:00:09:26 X509v3 Authority Key Identifier: keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:94:07:0d:33:a8:f4:09:12:00:ae:bc:6a:a6:2d:1a:29:c3: e7:bd:85:df:74:d7:4f:2d:19:71:3c:0e:31:50:f6:3a:7e:ef: 4c:a4:18:17:db:f2:f3:bc:c2:f5:51:5e:9d:92:c5:aa:b4:b5: ff:2f:f5:4e:a1:68:70:b9:03:eb:14:70:65:45:96:a8:8b:29: 6b:ae:c9:71:06:6b:0b:25:76:4c:58:c0:13:14:81:42:1c:19: dc:2b:23:e5:37:e4:40:69:9b:cb:b0:66:9b:f1:24:f2:28:5c: 43:43:43:a0:81:e0:94:32:26:4a:5c:b4:86:a1:62:b2:e5:d7: 91:1c:25:09:f2:06:0a:10:0a:93:10:cc:6a:15:92:06:ea:87: 49:27:10:6d:e3:0b:10:04:59:01:19:d0:df:f2:2c:a6:b7:d5: 7f:d8:67:e1:d6:86:df:1c:44:fc:1b:8b:82:ee:64:a8:ac:a8: 5b:fb:87:0f:d0:88:ad:73:2b:d8:c1:06:df:dd:75:eb:5b:06: 10:fd:69:7f:7e:d0:07:ad:a0:e3:6e:3e:8c:11:7f:1a:be:17: ba:a7:5b:ee:97:89:c8:3c:6c:8e:22:95:2b:0c:82:a4:71:b1: c0:ca:80:ad:5c:dc:10:6e:0c:2a:14:04:57:99:19:32:97:66: d0:a9:e0:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC MjBGNjIzRTkwHhcNMjUwNzAyMTUzNTIxWhcNMjUwNzA5MTUzNTIxWjAYMRYwFAYD VQQDEw02ODY1NTFiOS1iZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVnECiOIFyxA5uSzXkDF9oaE07yBVMe+gRUeoyFo8FHrEcHDW+cDgGVDossa isMHUeDf8An/nHsFkP73YI3oebJsVUECkmak9xT7VHZugpG9P9pcGcJLMtDPatIV QVyhy+yn1aJWGPw3cFDn3M8DnvjKFXDjSqzxMv10jSZbk97sAAmZi5SkSJssQgfy 8ntXEI5qMKP67m9eOKuzfYiBoKjgWgZ1AYvUB/ssfnsftGnLd+wrOVHuJd9wwEy1 D7x7WeCdg1VGUrVr320APAIaWg4b/Hy2p1GDp178tlYcPq6xXqbfwAeuQL96EWZL KHafZ+pXMRlw3CjvXmBVYWCJlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIgy83Z DRosf5nqnqqTa1yPAAkmMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0 ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBlAcNM6j0CRIArrxqpi0aKcPnvYXfdNdPLRlxPA4xUPY6fu9MpBgX 2/LzvML1UV6dksWqtLX/L/VOoWhwuQPrFHBlRZaoiylrrslxBmsLJXZMWMATFIFC HBncKyPlN+RAaZvLsGab8STyKFxDQ0OggeCUMiZKXLSGoWKy5deRHCUJ8gYKEAqT EMxqFZIG6odJJxBt4wsQBFkBGdDf8iymt9V/2Gfh1obfHET8G4uC7mSorKhb+4cP 0IitcyvYwQbf3XXrWwYQ/Wl/ftAHraDjbj6MEX8avhe6p1vul4nIPGyOIpUrDIKk cbHAyoCtXNwQbgwqFARXmRkyl2bQqeAN -----END CERTIFICATE-----Generated at Thu Jul 3 06:21:24 2025 by rpki-client