$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: YtwypuXxGe5cIhNwy4MuyC/PNIgRQmVrZrutGJUQqEY= Subject key identifier: 54:3E:75:F1:D1:3A:04:A7:40:5F:30:7A:38:D2:C4:8A:FD:A1:38:F6 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 0412 Signing time: Tue 01 Jul 2025 00:57:29 +0000 Manifest this update: Tue 01 Jul 2025 00:57:28 +0000 Manifest next update: Tue 08 Jul 2025 00:57:28 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: r7lKdcx+Df2AVjYzu1fdJE/Z6k53axXEy1zuYLZiWp0=) 2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: Jq+BJa5bIC2ga/tgIn6ID1FhPZxllAOIKx3OxJo/dLg=) 3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: h3fylE+2YBgfkc7GqGmNPtjnF3D2D39dQ6blUneghIY=) 4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: Q81s5XKL5iVaVaoWayTQR37y4XfCEhNVP+1tJwtC+bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: Jul 1 00:57:28 2025 GMT Not After : Jul 8 00:57:28 2025 GMT Subject: CN=68633279-f90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:c0:56:63:a5:54:6e:03:c6:d6:13:96:39: 0b:58:f8:9c:ca:4d:38:dd:ad:89:a1:db:ae:00:04: a7:cd:6f:83:4c:85:e5:33:ef:30:bf:fc:08:d8:7a: 35:a9:77:9a:bf:cf:51:b2:6d:da:9d:ba:8e:7a:da: 43:45:4c:0e:e9:a2:65:91:b2:d3:f6:f7:06:56:6f: f5:52:c0:cf:47:11:8d:33:7e:8c:de:60:8a:33:df: ce:13:9c:97:0e:43:a9:96:f5:2d:13:fc:26:ed:e2: 25:f1:e9:79:ac:c3:ff:56:1f:28:cc:ee:cf:b2:a0: 33:35:65:e3:41:95:b5:a9:ae:c1:d9:2f:0a:0f:12: 27:f5:86:6f:87:55:8c:6b:83:d5:8a:57:36:13:56: 09:17:7e:25:0c:7e:25:26:2d:7f:67:70:e2:32:f9: a4:bc:e5:40:b1:03:15:e8:be:b5:08:04:aa:17:13: 14:ad:6c:58:3c:53:13:c3:81:72:7a:e9:86:bc:b2: e2:92:bd:e5:52:7d:aa:14:e9:44:eb:6e:cb:5f:be: 7b:f5:aa:eb:a9:19:b6:a0:f9:36:7a:8b:5d:2f:1e: 8b:21:c8:f3:8f:d9:b3:a4:a2:65:06:fd:83:d4:e2: 5d:dc:67:fd:54:2b:41:4b:9a:dc:45:2e:d9:5b:e4: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3E:75:F1:D1:3A:04:A7:40:5F:30:7A:38:D2:C4:8A:FD:A1:38:F6 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:23:9f:db:68:55:55:8d:e9:91:fe:af:cd:4d:54:d2:d5:13: f4:c6:2f:0b:52:e4:e7:42:6c:7e:2a:56:b9:dd:be:28:f0:9d: 86:b3:57:82:b8:88:fc:77:8c:32:85:16:c1:f7:6c:25:b3:1b: 3e:b5:71:29:8e:4c:75:f4:a2:bf:25:b8:77:01:7d:ff:24:4c: 9d:c7:6c:b3:04:95:01:41:b2:71:18:34:38:95:4f:26:47:fd: a2:f5:94:75:8b:b7:84:4e:7e:ab:1a:8e:e0:47:a4:bf:2e:83: 42:07:6a:b0:27:fa:93:1a:c3:b9:ad:af:3f:75:9b:31:4b:7c: 9e:c2:09:57:44:4d:02:7d:1d:d9:9a:68:19:29:37:70:7a:d8: 39:fd:44:a7:6f:2c:d2:f4:14:4a:bb:b3:98:bb:f2:89:d8:52: db:e6:a8:73:f1:ad:e6:4b:e7:af:e6:9f:e8:a2:0d:b6:11:3e: 49:8d:86:40:63:a4:9a:db:96:a9:f3:62:2b:76:85:6c:e8:7f: 5a:62:3e:24:0a:2b:d9:cb:a9:a6:b3:dd:ac:4a:51:86:63:84: 08:72:c8:fc:22:dd:33:39:3c:e5:4e:3c:34:a1:90:9d:83:b0: e3:0e:af:c9:b8:f9:08:58:fe:2c:66:5e:5b:6f:54:72:f5:42: 75:3f:45:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjUwNzAxMDA1NzI4WhcNMjUwNzA4MDA1NzI4WjAYMRYwFAYD VQQDEw02ODYzMzI3OS1mOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSDAVmOlVG4DxtYTljkLWPicyk043a2JoduuAASnzW+DTIXlM+8wv/wI2Ho1 qXeav89Rsm3anbqOetpDRUwO6aJlkbLT9vcGVm/1UsDPRxGNM36M3mCKM9/OE5yX DkOplvUtE/wm7eIl8el5rMP/Vh8ozO7PsqAzNWXjQZW1qa7B2S8KDxIn9YZvh1WM a4PVilc2E1YJF34lDH4lJi1/Z3DiMvmkvOVAsQMV6L61CASqFxMUrWxYPFMTw4Fy eumGvLLikr3lUn2qFOlE627LX7579arrqRm2oPk2eotdLx6LIcjzj9mzpKJlBv2D 1OJd3Gf9VCtBS5rcRS7ZW+R4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ+dfHR OgSnQF8wejjSxIr9oTj2MB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARI5/baFVVjemR/q/NTVTS1RP0xi8LUuTnQmx+Kla53b4o8J2Gs1eC uIj8d4wyhRbB92wlsxs+tXEpjkx19KK/Jbh3AX3/JEydx2yzBJUBQbJxGDQ4lU8m R/2i9ZR1i7eETn6rGo7gR6S/LoNCB2qwJ/qTGsO5ra8/dZsxS3yewglXRE0CfR3Z mmgZKTdwetg5/USnbyzS9BRKu7OYu/KJ2FLb5qhz8a3mS+ev5p/oog22ET5JjYZA Y6Sa25ap82IrdoVs6H9aYj4kCivZy6mms92sSlGGY4QIcsj8It0zOTzlTjw0oZCd g7DjDq/JuPkIWP4sZl5bb1Ry9UJ1P0Vp -----END CERTIFICATE-----Generated at Wed Jul 2 20:03:04 2025 by rpki-client