$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: quAmC//uihH56n3n3rJvCUmVkGI2aWAKVoJQNmMgYVc= Subject key identifier: C1:E3:D5:B4:80:9F:46:F1:AC:B2:87:11:DA:7D:19:88:1C:E4:BC:BC Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: EC Signing time: Thu 03 Jul 2025 05:34:50 +0000 Manifest this update: Thu 03 Jul 2025 05:34:49 +0000 Manifest next update: Thu 10 Jul 2025 05:34:49 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: oSqrOm50eP6aeNwtKLTEwqDprBbhhyC4kfemyM7FWvs=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: TaB3OvJnz9ArxOptFYPHLTX84/AbjBqjhsX8r+So7FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Jul 3 05:34:49 2025 GMT Not After : Jul 10 05:34:49 2025 GMT Subject: CN=6866167a-3e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:89:ec:33:f4:15:fb:fc:af:93:9f:34:11:94: 75:20:5e:5e:48:31:2d:58:6e:1a:ec:7c:37:b9:b4: 60:55:ad:e6:bb:15:e0:f4:70:f3:ec:66:bd:95:ad: 7f:a1:b0:7e:a7:42:5a:74:ca:ad:69:51:a1:86:df: 21:0d:bf:99:3c:16:d6:80:37:87:48:ea:1f:53:d1: 84:a5:63:e7:bb:1f:f7:43:ce:4c:b5:f5:76:dc:b2: 6b:f7:98:7b:31:a7:b4:e4:4c:c4:b2:ce:b4:63:0c: 4b:6b:a7:e2:fb:71:05:6b:50:99:45:26:0a:76:79: 4a:2b:c9:d2:6a:b0:b4:1e:c3:58:b3:05:58:bc:c9: 6b:e5:77:0f:9b:2e:eb:22:09:f2:a3:80:d4:45:fd: cb:3d:52:c0:82:a2:9e:ce:c7:c0:ac:6f:60:d1:d5: f0:ca:a6:68:2f:13:1e:0c:6b:ea:5a:7d:d5:68:3b: d2:8b:83:b1:a4:fe:b6:d3:1d:df:c3:65:51:9f:2f: 17:9c:b4:be:5a:e2:9b:f9:f3:49:8c:5c:30:62:a3: 7b:74:64:41:8e:e3:db:4f:5a:c1:b7:6d:43:cc:8f: ea:3b:a9:4c:c0:4f:91:5f:d8:f6:97:51:34:8f:e9: 57:23:22:b6:49:be:7f:80:fa:f1:19:47:d7:5a:19: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:D5:B4:80:9F:46:F1:AC:B2:87:11:DA:7D:19:88:1C:E4:BC:BC X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:67:f9:a0:b3:33:1c:bb:d3:ba:fa:7b:c3:6b:10:00:14:13: 84:6c:60:d9:da:8f:a8:1f:45:5a:38:c5:a2:6f:07:22:c3:05: 74:97:c5:01:14:cb:3a:96:f5:06:7c:f1:98:e9:ff:80:c4:5c: 8a:e7:0b:b3:97:54:e2:7e:a3:85:e5:31:5c:ac:b9:5f:ba:ff: 87:0a:9b:07:c5:89:7f:51:69:93:1d:77:1f:8f:b7:55:3d:8f: 93:05:6c:3e:5c:e2:b4:1f:54:a7:7c:a8:82:20:c7:d9:19:86: ca:d8:6c:bb:ac:c0:ef:9c:03:9e:15:32:a8:10:cb:b6:de:6d: cf:c5:f1:57:4d:b5:4a:63:01:67:36:60:09:51:58:35:0a:6d: 36:98:b0:42:ec:f4:83:20:bf:f3:6e:ba:3f:3a:ee:af:95:14: 3d:33:92:26:05:b6:5c:57:c1:1e:25:b5:63:8d:1d:df:ca:06: cc:a4:b2:a5:ab:bd:b1:4a:fc:05:78:9f:96:9b:19:db:c8:1f: 19:d4:5a:cd:f3:85:37:35:42:4e:ec:ef:55:98:67:7f:a3:17: b0:0b:52:54:8b:af:93:45:b2:3d:de:73:45:4d:66:6a:36:19: 07:a6:b2:1c:a3:82:e5:56:73:39:ac:a0:1a:e7:f9:fe:56:31: e2:77:1e:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUwNzAzMDUzNDQ5WhcNMjUwNzEwMDUzNDQ5WjAYMRYwFAYD VQQDEw02ODY2MTY3YS0zZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YnsM/QV+/yvk580EZR1IF5eSDEtWG4a7Hw3ubRgVa3muxXg9HDz7Ga9la1/ obB+p0JadMqtaVGhht8hDb+ZPBbWgDeHSOofU9GEpWPnux/3Q85MtfV23LJr95h7 Mae05EzEss60YwxLa6fi+3EFa1CZRSYKdnlKK8nSarC0HsNYswVYvMlr5XcPmy7r Ignyo4DURf3LPVLAgqKezsfArG9g0dXwyqZoLxMeDGvqWn3VaDvSi4OxpP620x3f w2VRny8XnLS+WuKb+fNJjFwwYqN7dGRBjuPbT1rBt21DzI/qO6lMwE+RX9j2l1E0 j+lXIyK2Sb5/gPrxGUfXWhniCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHj1bSA n0bxrLKHEdp9GYgc5Ly8MB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATZ/mgszMcu9O6+nvDaxAAFBOEbGDZ2o+oH0VaOMWibwciwwV0l8UB FMs6lvUGfPGY6f+AxFyK5wuzl1TifqOF5TFcrLlfuv+HCpsHxYl/UWmTHXcfj7dV PY+TBWw+XOK0H1SnfKiCIMfZGYbK2Gy7rMDvnAOeFTKoEMu23m3PxfFXTbVKYwFn NmAJUVg1Cm02mLBC7PSDIL/zbro/Ou6vlRQ9M5ImBbZcV8EeJbVjjR3fygbMpLKl q72xSvwFeJ+WmxnbyB8Z1FrN84U3NUJO7O9VmGd/oxewC1JUi6+TRbI93nNFTWZq NhkHprIco4LlVnM5rKAa5/n+VjHidx7p -----END CERTIFICATE-----Generated at Sat Jul 5 01:22:58 2025 by rpki-client