$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json) Hash identifier: aQUmKLz8h8UNqBr0znrLUIwLJruU7sIPDfwTMk6W5Uw= Subject key identifier: B7:08:4F:1A:67:CB:3E:99:51:B9:E8:3F:DE:CA:40:72:DF:A5:7E:6B Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft Manifest number: 0201 Signing time: Thu 03 Jul 2025 02:32:36 +0000 Manifest this update: Thu 03 Jul 2025 02:32:36 +0000 Manifest next update: Thu 10 Jul 2025 02:32:36 +0000 Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: G4aJlTxSfrZY8hof5aAhLTINNObb0n2OkiAOIeNhb20=) 2: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: up6WHjnsfS0bIxQesxTATm4WYD2tutF7YiezZwJi2Bc=) 3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: NqrZmcVp/US1PncX6fEsquuB9U+PwjdNaQFtiMmKje0=) 4: D45117DEEBF311EEAECC405FC4F9AE02.roa (hash: L3m+NQNaRyXNu/ZiemkthKYLeI1gIGN4M/qfSkh3IEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Jul 3 02:32:36 2025 GMT Not After : Jul 10 02:32:36 2025 GMT Subject: CN=6865ebc4-a8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:35:60:79:38:db:e7:c9:15:f4:66:31:f4: c3:92:98:d8:b9:08:ab:db:14:74:f7:18:0a:42:27: 9b:52:dc:12:c6:43:29:62:e0:3f:f7:0c:4a:ca:d1: 3b:2a:b8:6d:d3:f7:c4:13:8c:00:82:21:54:b6:e4: 5c:23:c2:81:d2:d6:fc:01:93:f3:ba:27:3e:fa:da: 66:05:88:fa:78:df:09:c7:d2:91:7c:e1:c1:8d:8b: 89:2e:85:26:fd:e2:2f:2d:05:40:51:73:79:1f:65: 63:08:b8:ae:09:94:6b:e6:9e:f4:9a:01:55:1f:72: 45:1b:6e:63:ad:fd:6e:cd:5a:36:d7:cc:0f:34:c6: 96:72:21:76:9c:7b:74:59:0e:ad:01:b9:d1:56:2a: 5f:73:23:e3:5a:e2:3b:ed:92:38:3b:bb:7b:f1:01: cd:35:a9:0c:54:63:af:c2:3c:66:55:14:d8:ce:25: bd:e2:22:87:a9:2c:09:d7:83:dd:d9:83:12:91:34: 7d:56:be:40:cd:53:e3:ec:80:39:65:50:15:9e:de: 7d:ec:8b:7c:43:13:44:c0:22:47:98:48:30:c6:b9: df:ad:ef:9f:f1:46:e1:42:1c:8d:05:ae:9d:60:d2: 96:2c:9e:f1:25:ed:73:d0:12:a0:4d:a6:51:75:bb: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:08:4F:1A:67:CB:3E:99:51:B9:E8:3F:DE:CA:40:72:DF:A5:7E:6B X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ce:c6:e8:cb:0a:5c:2b:9f:f2:6b:ca:9e:54:61:f5:db:b4: 4c:14:bf:0d:f8:a9:07:28:5b:9e:09:d7:36:b2:2e:e7:bb:14: b7:9c:84:93:30:af:35:36:a3:c1:1c:ff:af:e7:4c:ba:be:62: 56:39:98:8d:e0:06:06:0b:54:f6:c4:59:30:67:58:2b:ec:ec: 4b:9c:3e:06:2a:ca:c0:84:ce:37:55:2c:0e:85:9a:ce:9d:ba: 50:78:f4:ed:a9:b2:13:b5:b3:ae:0a:2b:48:e5:15:6b:dd:4e: 43:09:e6:6e:a0:38:0b:fb:37:9a:e5:92:4d:ca:0e:7b:a2:b4: 20:10:d7:f6:16:f4:8b:70:0b:a1:ee:74:31:98:2a:35:1a:f0: 07:e0:7d:eb:c5:85:5f:81:6c:09:80:35:34:1c:c2:7f:6f:a8: fa:0c:d9:88:6c:d7:a1:a1:5c:86:f6:7e:42:4d:b5:8f:b9:60: ad:dc:16:ab:24:35:0c:8d:25:01:80:31:6d:22:a8:9d:8a:1a: 21:8a:47:e3:af:72:ea:e5:2a:95:9f:a1:78:3c:8c:4e:da:88: 67:ee:e4:80:83:63:0e:e8:b1:eb:57:92:d9:3f:74:90:61:d8: f8:74:62:e8:9c:0b:5f:f5:fe:6d:a7:98:0f:f4:d1:3b:d4:8b: bb:11:af:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUwNzAzMDIzMjM2WhcNMjUwNzEwMDIzMjM2WjAYMRYwFAYD VQQDEw02ODY1ZWJjNC1hOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EE1YHk42+fJFfRmMfTDkpjYuQir2xR09xgKQiebUtwSxkMpYuA/9wxKytE7 Krht0/fEE4wAgiFUtuRcI8KB0tb8AZPzuic++tpmBYj6eN8Jx9KRfOHBjYuJLoUm /eIvLQVAUXN5H2VjCLiuCZRr5p70mgFVH3JFG25jrf1uzVo218wPNMaWciF2nHt0 WQ6tAbnRVipfcyPjWuI77ZI4O7t78QHNNakMVGOvwjxmVRTYziW94iKHqSwJ14Pd 2YMSkTR9Vr5AzVPj7IA5ZVAVnt597It8QxNEwCJHmEgwxrnfre+f8UbhQhyNBa6d YNKWLJ7xJe1z0BKgTaZRdbuaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcITxpn yz6ZUbnoP97KQHLfpX5rMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf TTM5d1FORGozeEZCd1dGaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTzsboywpcK5/ya8qeVGH127RMFL8N+KkHKFueCdc2si7nuxS3nIST MK81NqPBHP+v50y6vmJWOZiN4AYGC1T2xFkwZ1gr7OxLnD4GKsrAhM43VSwOhZrO nbpQePTtqbITtbOuCitI5RVr3U5DCeZuoDgL+zea5ZJNyg57orQgENf2FvSLcAuh 7nQxmCo1GvAH4H3rxYVfgWwJgDU0HMJ/b6j6DNmIbNehoVyG9n5CTbWPuWCt3Bar JDUMjSUBgDFtIqidihohikfjr3Lq5SqVn6F4PIxO2ohn7uSAg2MO6LHrV5LZP3SQ Ydj4dGLonAtf9f5tp5gP9NE71Iu7Ea/z -----END CERTIFICATE-----Generated at Thu Jul 3 11:25:08 2025 by rpki-client