$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: 06Mv4pH/IRk71/BOwQIbXJ9ZWvd7mm1SnjwVknnLXRc= Subject key identifier: 2A:BA:BE:D8:11:AD:3E:24:EB:D9:07:B3:24:77:ED:D5:18:CE:3C:21 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 0283 Signing time: Thu 03 Jul 2025 02:04:37 +0000 Manifest this update: Thu 03 Jul 2025 02:04:37 +0000 Manifest next update: Thu 10 Jul 2025 02:04:37 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: ewG5zti2u8MM5PcNrz0IkWQKUkboQ8M/fxe2pi5bEIM=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Jul 3 02:04:37 2025 GMT Not After : Jul 10 02:04:37 2025 GMT Subject: CN=6865e535-70c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:c3:e7:db:1f:af:78:58:f2:87:30:ad:cb: 88:93:bc:b2:c3:e3:9b:5a:bb:e5:dc:3c:c5:23:40: 8c:d4:9d:f5:fd:6d:0e:92:fd:17:a6:71:a9:93:7f: e7:78:7f:68:da:4c:75:3e:94:fa:7f:4e:08:47:09: 08:3a:41:a5:2a:1b:90:92:0a:36:b9:38:05:3c:0f: 73:16:2f:b8:0c:e3:42:f9:b1:83:30:56:9b:1c:1c: 06:a9:83:1b:0b:f0:ce:a8:da:c3:75:50:6c:ec:e3: d8:e7:b5:4a:ab:85:3c:92:b0:d9:c8:cd:ba:48:53: 3c:a7:2b:fa:c6:57:da:15:b2:64:0f:9f:33:9b:2c: fb:6c:f0:1d:f1:70:6c:a3:bb:f9:79:f7:fb:bf:0e: 4c:91:70:35:b2:f1:ec:8c:8d:59:b5:2e:ee:57:1b: 2e:ea:62:14:5d:d2:1c:73:a2:cf:40:26:03:9c:6d: 00:8d:ef:89:dd:09:9d:1d:aa:eb:99:18:93:d5:b2: c3:e3:70:c1:9c:26:a1:c0:8c:d3:f5:6d:48:af:c1: 9f:21:84:2a:43:46:bc:de:b2:1d:78:19:6b:f4:ea: 3e:59:a3:bb:2c:93:bc:68:5f:97:73:8d:84:d7:e1: 30:a1:30:bf:c4:3a:eb:5b:8c:1a:56:9f:0e:5f:0b: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BA:BE:D8:11:AD:3E:24:EB:D9:07:B3:24:77:ED:D5:18:CE:3C:21 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b1:1d:40:6a:96:aa:c2:7b:6f:2a:3a:79:f0:02:0b:d5:7d: 78:21:39:35:f2:10:27:66:7a:7d:90:fe:01:f8:0c:72:33:8d: f3:a7:e5:9f:d3:ae:f1:d0:03:13:43:77:14:b6:82:b7:16:71: eb:bf:6a:9c:4d:20:43:7b:8a:22:47:89:fb:66:0e:18:a9:8d: 89:d9:49:45:33:bc:91:54:1d:94:f3:fc:59:d9:69:9a:2f:a4: c5:b4:bc:b4:15:f7:a0:f5:d3:46:41:1f:c4:9e:f8:d1:c3:d4: 43:1b:6d:a9:88:e7:b1:71:2b:9b:d6:d9:17:32:41:a2:36:0b: e0:13:c1:9d:e0:76:74:fc:09:44:54:b6:aa:1b:92:56:7b:34: 27:41:ac:1e:74:21:73:0e:83:15:b7:82:a7:9f:e6:2a:1b:a0: 9d:ec:99:41:ff:77:36:7d:d0:76:3f:76:1b:0f:98:25:74:4e: 6f:ca:fe:63:00:86:c6:14:17:2c:fc:fd:ec:03:9a:1d:b0:a4: c2:28:ac:ae:12:cb:8a:22:7f:77:33:07:bc:34:dc:5d:4d:67: 91:d8:09:79:0c:fd:b6:b9:4c:04:59:08:7b:ed:4e:0b:0b:50: 08:84:a6:f9:a1:48:7d:e0:07:61:e3:28:84:06:1e:1d:1f:ea: 82:d4:4b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwNzAzMDIwNDM3WhcNMjUwNzEwMDIwNDM3WjAYMRYwFAYD VQQDEw02ODY1ZTUzNS03MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLXD59sfr3hY8ocwrcuIk7yyw+ObWrvl3DzFI0CM1J31/W0Okv0XpnGpk3/n eH9o2kx1PpT6f04IRwkIOkGlKhuQkgo2uTgFPA9zFi+4DONC+bGDMFabHBwGqYMb C/DOqNrDdVBs7OPY57VKq4U8krDZyM26SFM8pyv6xlfaFbJkD58zmyz7bPAd8XBs o7v5eff7vw5MkXA1svHsjI1ZtS7uVxsu6mIUXdIcc6LPQCYDnG0Aje+J3QmdHarr mRiT1bLD43DBnCahwIzT9W1Ir8GfIYQqQ0a83rIdeBlr9Oo+WaO7LJO8aF+Xc42E 1+EwoTC/xDrrW4waVp8OXwse2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq6vtgR rT4k69kHsyR37dUYzjwhMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEsR1AapaqwntvKjp58AIL1X14ITk18hAnZnp9kP4B+AxyM43zp+Wf 067x0AMTQ3cUtoK3FnHrv2qcTSBDe4oiR4n7Zg4YqY2J2UlFM7yRVB2U8/xZ2Wma L6TFtLy0Ffeg9dNGQR/EnvjRw9RDG22piOexcSub1tkXMkGiNgvgE8Gd4HZ0/AlE VLaqG5JWezQnQawedCFzDoMVt4Knn+YqG6Cd7JlB/3c2fdB2P3YbD5gldE5vyv5j AIbGFBcs/P3sA5odsKTCKKyuEsuKIn93Mwe8NNxdTWeR2Al5DP22uUwEWQh77U4L C1AIhKb5oUh94Adh4yiEBh4dH+qC1Eti -----END CERTIFICATE-----Generated at Fri Jul 4 00:59:05 2025 by rpki-client