$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: HsglfDclPEP4eABj87sr0gTI0fOAp96IQXseNCkyK6c= Subject key identifier: FB:6E:2B:20:8A:C9:54:7C:38:33:0A:2E:01:25:5B:56:F5:25:32:4C Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 06C2 Signing time: Mon 30 Jun 2025 22:25:26 +0000 Manifest this update: Mon 30 Jun 2025 22:25:25 +0000 Manifest next update: Mon 07 Jul 2025 22:25:25 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: nXAs7m7LSgivDqUk0X7uZKHZBNB+OL3uUhfKfseCs2k=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Jun 30 22:25:25 2025 GMT Not After : Jul 7 22:25:25 2025 GMT Subject: CN=68630ed5-a866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:25:0a:09:a4:f4:b3:eb:3e:4d:a8:42:9f: de:b2:f9:57:77:3c:d3:a3:a5:e6:54:2a:72:e5:a3: 57:88:58:72:21:ee:ed:50:da:46:76:0a:43:5e:18: 66:42:79:51:f6:4d:ce:db:0f:3f:77:32:d7:c7:a7: fc:73:e4:6f:d9:e5:7e:ed:6d:6c:c4:70:17:68:8b: 73:e9:ea:06:9b:a3:a7:07:a8:4f:1f:08:03:77:c2: 6a:ed:6c:e1:e2:54:45:cb:56:73:dc:77:c9:a4:e3: 4b:aa:c3:e0:aa:73:6f:41:ad:fb:2a:29:5e:4e:50: ba:3a:ec:5e:eb:79:31:5c:f0:ed:66:d2:7f:e2:99: f5:e1:86:ae:f4:10:bf:eb:b5:5f:3c:bc:26:e4:ea: 3e:ca:01:f6:35:18:a0:d7:9a:4a:f5:a2:08:49:2e: 3e:33:5a:51:df:53:63:0d:50:e1:fa:6c:ab:55:df: ca:c0:66:10:07:b2:dc:d0:82:ed:66:6f:b7:62:59: 3f:db:80:d6:aa:43:04:0e:c8:89:4f:18:8c:6d:67: db:6a:65:e3:b8:6f:66:51:70:dc:ac:64:4f:88:a1: f6:57:b8:85:61:4d:58:af:9a:b0:79:c0:94:70:91: 9b:3c:6c:e7:a7:1a:2c:88:cd:69:f7:0b:bd:25:23: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6E:2B:20:8A:C9:54:7C:38:33:0A:2E:01:25:5B:56:F5:25:32:4C X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:fa:5a:65:38:37:4d:d7:ca:43:8b:fc:8e:be:4f:bf:69:16: 22:23:9a:4f:14:4a:07:82:a6:5c:34:6a:ac:42:59:2f:59:c4: 84:bb:dc:7a:51:05:7f:f1:82:5f:60:37:8f:f5:ea:27:10:d6: 31:71:03:c2:f2:a9:38:6c:2b:ec:f5:ed:e5:62:54:01:6a:32: 93:48:87:9f:72:53:16:6a:c4:99:a9:8b:f7:f6:50:a7:e1:4a: 42:94:e9:d4:a2:85:a3:27:67:96:a3:38:2a:2a:b4:6d:0d:f9: dd:82:55:71:c1:d8:d4:72:2a:31:f4:db:cb:8e:9b:b6:f1:85: 7f:96:17:08:12:02:a7:f0:f4:fd:8a:a7:0a:69:ef:9b:db:f8: e2:2d:6c:ca:2d:a1:6b:01:c1:a3:9f:25:9e:82:f7:d7:29:9f: 83:b1:e9:fc:9f:c2:e4:b7:38:0b:22:e6:a1:63:80:45:04:ad: 19:08:91:54:5d:4c:03:15:94:86:fa:bb:f3:c8:5b:08:4d:6b: 99:ce:13:98:75:f0:c4:4d:ee:47:be:05:51:12:4a:21:30:58: 99:1b:4c:41:60:b4:03:e2:ae:63:8f:f0:e1:d6:8b:7d:5a:81: 80:da:66:ca:ea:cb:ed:d8:d1:90:f4:74:5b:07:17:f3:58:e4: d1:22:25:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUwNjMwMjIyNTI1WhcNMjUwNzA3MjIyNTI1WjAYMRYwFAYD VQQDEw02ODYzMGVkNS1hODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxwlCgmk9LPrPk2oQp/esvlXdzzTo6XmVCpy5aNXiFhyIe7tUNpGdgpDXhhm QnlR9k3O2w8/dzLXx6f8c+Rv2eV+7W1sxHAXaItz6eoGm6OnB6hPHwgDd8Jq7Wzh 4lRFy1Zz3HfJpONLqsPgqnNvQa37KileTlC6Ouxe63kxXPDtZtJ/4pn14Yau9BC/ 67VfPLwm5Oo+ygH2NRig15pK9aIISS4+M1pR31NjDVDh+myrVd/KwGYQB7Lc0ILt Zm+3Ylk/24DWqkMEDsiJTxiMbWfbamXjuG9mUXDcrGRPiKH2V7iFYU1Yr5qwecCU cJGbPGznpxosiM1p9wu9JSN4LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtuKyCK yVR8ODMKLgElW1b1JTJMMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+lplODdN18pDi/yOvk+/aRYiI5pPFEoHgqZcNGqsQlkvWcSEu9x6 UQV/8YJfYDeP9eonENYxcQPC8qk4bCvs9e3lYlQBajKTSIefclMWasSZqYv39lCn 4UpClOnUooWjJ2eWozgqKrRtDfndglVxwdjUciox9NvLjpu28YV/lhcIEgKn8PT9 iqcKae+b2/jiLWzKLaFrAcGjnyWegvfXKZ+Dsen8n8LktzgLIuahY4BFBK0ZCJFU XUwDFZSG+rvzyFsITWuZzhOYdfDETe5HvgVREkohMFiZG0xBYLQD4q5jj/Dh1ot9 WoGA2mbK6svt2NGQ9HRbBxfzWOTRIiV6 -----END CERTIFICATE-----Generated at Wed Jul 2 04:28:11 2025 by rpki-client