$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: ZfTqMEgqQHK+na4vpZ42EwstuB58Y1JX++Q8rg0ji6w= Subject key identifier: E5:51:75:EF:7F:6E:65:F1:67:56:F4:50:5B:4B:8D:BC:28:95:EB:8B Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 09ED Signing time: Wed 02 Jul 2025 20:07:11 +0000 Manifest this update: Wed 02 Jul 2025 20:07:11 +0000 Manifest next update: Wed 09 Jul 2025 20:07:11 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: qb5I9k1gYDHlofkzzFu6jAuA5uruVIWSv16BcGye9NM=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: unkzLsoSC8OhagJytTS2NwamPLpJq/uFvMRt2lZfV60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Jul 2 20:07:11 2025 GMT Not After : Jul 9 20:07:11 2025 GMT Subject: CN=6865916f-a65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:c6:a2:9e:a6:25:c3:a7:d1:68:88:97:a0: c1:31:51:51:56:ea:d8:ef:02:c8:ff:c4:6e:d9:f0: bd:84:60:e4:19:12:d5:dd:38:a1:83:45:09:d1:9a: db:9c:df:69:43:70:0f:85:d6:16:d8:73:fc:2e:3b: e3:69:66:eb:3e:b3:b7:56:bb:9b:f4:29:01:5b:e8: 90:89:94:af:07:df:24:34:bb:cc:1e:c8:da:0a:a9: 55:9d:fc:56:f9:04:a2:b2:6c:98:57:70:82:bf:8b: e0:56:1e:39:85:3e:5a:b2:30:69:49:64:4f:40:e2: 45:2c:54:4f:b5:2a:bc:ba:a3:7c:c3:31:6b:53:34: 91:f9:02:8c:25:41:91:73:04:0a:74:0b:ef:55:0c: 36:2c:f2:24:13:61:5b:ad:04:e0:f3:aa:23:de:e4: 5f:06:c4:4f:73:85:73:2b:16:2a:09:b2:72:40:c7: 06:50:35:40:38:89:fa:55:cf:49:e3:d9:62:73:d2: fe:4a:fb:d0:aa:3d:04:d3:37:04:aa:c0:69:6d:42: 0c:82:c7:1b:0a:14:ac:be:3e:f4:62:5a:3b:4c:c4: 62:a3:c1:b1:62:49:b2:7f:50:88:74:0c:88:2c:be: 15:48:04:80:41:f4:cc:1d:cc:25:40:5f:11:bd:3f: 58:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:51:75:EF:7F:6E:65:F1:67:56:F4:50:5B:4B:8D:BC:28:95:EB:8B X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a9:58:cd:6a:b8:06:3e:80:1f:44:b4:b9:a3:68:36:f8:07: 0d:02:39:c7:49:ec:1c:74:b1:40:0d:0d:aa:70:cc:a8:46:df: bc:24:d8:1e:fc:83:d3:5d:da:f1:49:ad:1f:27:72:b7:b2:b5: 24:5d:4e:e8:8e:07:0a:f4:36:e1:50:3a:e2:a1:88:6b:3c:2c: 66:79:22:19:07:58:6d:17:36:c9:c6:d4:07:a2:eb:03:57:7e: 16:21:26:79:15:65:ec:92:a7:34:02:94:83:de:7d:80:f2:16: 58:f9:9d:a6:3c:38:1d:20:c5:70:11:c3:16:bb:84:9d:7d:54: ac:ff:b6:73:77:98:ef:9b:6c:4f:45:1b:59:06:63:eb:68:6d: 9e:c6:1a:47:16:2c:d9:c9:b6:cb:f5:33:ee:7a:09:91:52:7b: 0e:24:fc:38:31:ee:cc:87:3c:76:ba:b0:71:2c:95:8f:a6:30: e8:f3:5a:8c:5f:26:7d:ce:f0:fa:ed:af:05:81:9d:aa:ad:8b: aa:3b:d1:a1:a0:8c:cb:94:64:ff:bf:21:95:2b:a0:31:99:88: 46:99:af:1e:58:62:00:5c:9b:90:1f:e8:c4:a6:5b:4f:53:1e: 3d:96:d6:64:29:89:84:b7:d9:09:91:bc:cc:a1:52:dd:a5:86: c7:a7:03:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUwNzAyMjAwNzExWhcNMjUwNzA5MjAwNzExWjAYMRYwFAYD VQQDEw02ODY1OTE2Zi1hNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMbGop6mJcOn0WiIl6DBMVFRVurY7wLI/8Ru2fC9hGDkGRLV3Tihg0UJ0Zrb nN9pQ3APhdYW2HP8LjvjaWbrPrO3Vrub9CkBW+iQiZSvB98kNLvMHsjaCqlVnfxW +QSismyYV3CCv4vgVh45hT5asjBpSWRPQOJFLFRPtSq8uqN8wzFrUzSR+QKMJUGR cwQKdAvvVQw2LPIkE2FbrQTg86oj3uRfBsRPc4VzKxYqCbJyQMcGUDVAOIn6Vc9J 49lic9L+SvvQqj0E0zcEqsBpbUIMgscbChSsvj70Ylo7TMRio8GxYkmyf1CIdAyI LL4VSASAQfTMHcwlQF8RvT9YLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVRde9/ bmXxZ1b0UFtLjbwoleuLMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaqVjNargGPoAfRLS5o2g2+AcNAjnHSewcdLFADQ2qcMyoRt+8JNge /IPTXdrxSa0fJ3K3srUkXU7ojgcK9DbhUDrioYhrPCxmeSIZB1htFzbJxtQHousD V34WISZ5FWXskqc0ApSD3n2A8hZY+Z2mPDgdIMVwEcMWu4SdfVSs/7Zzd5jvm2xP RRtZBmPraG2exhpHFizZybbL9TPuegmRUnsOJPw4Me7Mhzx2urBxLJWPpjDo81qM XyZ9zvD67a8FgZ2qrYuqO9GhoIzLlGT/vyGVK6AxmYhGma8eWGIAXJuQH+jEpltP Ux49ltZkKYmEt9kJkbzMoVLdpYbHpwNb -----END CERTIFICATE-----Generated at Wed Jul 2 23:29:08 2025 by rpki-client