$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: Rs0HSxdh+cmTFFo2IvVfhw2BMumEGZNEFx/j0tqFX3g= Subject key identifier: 4D:03:56:58:1D:AB:77:03:13:F2:5E:2E:BD:91:1F:BD:7B:38:B3:21 Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 05A5 Signing time: Fri 18 Jul 2025 23:30:27 +0000 Manifest this update: Fri 18 Jul 2025 23:30:27 +0000 Manifest next update: Fri 25 Jul 2025 23:30:26 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: ClSK7UzX7e3j7oDXn9JJhFPE09ZZaqdm/27glh5THaQ=) 2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Jul 18 23:30:27 2025 GMT Not After : Jul 25 23:30:26 2025 GMT Subject: CN=687ad913-2186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:01:29:e6:34:4b:d1:9f:25:2c:0b:7a:c5: 7c:d4:6f:89:c2:53:e1:79:24:77:dc:dc:9e:1a:95: a7:df:e8:be:c6:10:cf:dd:54:02:58:c3:da:f5:00: 24:78:24:b3:f6:9b:12:78:50:da:66:26:ea:21:89: f4:68:54:da:2e:46:c0:57:76:da:7f:33:32:71:ed: fe:50:97:8d:1b:d7:9d:c0:fa:ac:2d:4a:44:2e:a1: c6:1f:5e:ae:6d:9c:b9:27:36:db:0e:40:59:27:d5: 28:72:4f:57:85:bb:e8:79:7c:25:94:2f:a2:da:e3: 2e:e1:52:22:dd:11:2c:60:4c:48:e4:4f:0a:55:78: fd:39:7a:d3:78:56:5b:a3:ea:9e:cc:f1:cf:a2:52: 4b:d0:72:e2:61:ac:a7:e8:80:96:d4:21:d8:24:18: f2:ae:cb:de:14:48:0d:00:3f:9a:de:db:87:f1:02: db:7a:2d:77:58:1d:93:d8:f9:89:00:06:b0:1c:56: 82:11:d8:e3:c8:dc:a2:03:88:d6:55:f1:3f:4a:a6: 43:75:dd:ea:e7:6f:67:8f:e3:a5:da:de:85:c6:78: 6a:7f:59:1c:ca:79:55:1d:8a:ad:2a:ac:e2:b5:a5: fd:cf:d2:f3:85:f8:e2:b5:88:34:39:17:9f:f6:a4: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:03:56:58:1D:AB:77:03:13:F2:5E:2E:BD:91:1F:BD:7B:38:B3:21 X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:98:19:f2:84:8e:79:4a:6e:db:12:a5:dc:6d:27:f3:dd:a5: 9d:3f:90:3c:06:b0:0f:8c:ef:c2:79:fd:f5:ce:e8:39:a7:00: 5c:ff:73:9f:0c:28:06:6e:aa:24:c0:a2:ef:56:95:a7:16:92: 3d:c1:c9:fc:cd:29:98:4b:9e:9e:2f:a1:b8:27:36:b4:09:b5: 7a:a4:4f:81:3e:0f:58:4a:2a:34:8b:ad:ef:e0:f1:5b:b6:30: f1:4d:ca:a8:3c:a0:65:1e:92:12:c5:7a:1b:3b:55:5a:98:7d: 4f:bd:ac:03:76:dc:34:2c:d0:33:10:52:03:dc:26:b5:75:78: 46:c5:1b:18:89:9c:ad:3d:84:01:7e:4f:db:b6:35:b3:c9:12: 38:7d:cd:9e:20:32:2e:65:ee:24:74:58:95:f7:29:14:e7:81: ba:2c:e3:53:49:55:59:a9:f3:f4:a3:ee:db:e3:bb:bd:3b:f9: 19:46:64:ab:12:3e:f2:ab:74:9e:58:eb:47:e0:19:4f:7f:2a: 65:2f:b5:9f:e9:4a:f8:e0:4d:a4:3d:d8:db:3a:0c:34:b1:7a: e9:85:76:3b:57:8f:9e:a9:c8:56:66:8f:d3:0d:2a:97:a9:df: 7d:dc:f9:54:60:26:cd:d0:2d:9c:bf:b8:3b:da:80:12:04:8a: 34:f2:ae:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjUwNzE4MjMzMDI3WhcNMjUwNzI1MjMzMDI2WjAYMRYwFAYD VQQDEw02ODdhZDkxMy0yMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqgBKeY0S9GfJSwLesV81G+JwlPheSR33NyeGpWn3+i+xhDP3VQCWMPa9QAk eCSz9psSeFDaZibqIYn0aFTaLkbAV3bafzMyce3+UJeNG9edwPqsLUpELqHGH16u bZy5JzbbDkBZJ9Uock9XhbvoeXwllC+i2uMu4VIi3REsYExI5E8KVXj9OXrTeFZb o+qezPHPolJL0HLiYayn6ICW1CHYJBjyrsveFEgNAD+a3tuH8QLbei13WB2T2PmJ AAawHFaCEdjjyNyiA4jWVfE/SqZDdd3q529nj+Ol2t6Fxnhqf1kcynlVHYqtKqzi taX9z9LzhfjitYg0ORef9qSkPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0DVlgd q3cDE/JeLr2RH717OLMhMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUmBnyhI55Sm7bEqXcbSfz3aWdP5A8BrAPjO/Cef31zug5pwBc/3Of DCgGbqokwKLvVpWnFpI9wcn8zSmYS56eL6G4Jza0CbV6pE+BPg9YSio0i63v4PFb tjDxTcqoPKBlHpISxXobO1VamH1PvawDdtw0LNAzEFID3Ca1dXhGxRsYiZytPYQB fk/btjWzyRI4fc2eIDIuZe4kdFiV9ykU54G6LONTSVVZqfP0o+7b47u9O/kZRmSr Ej7yq3SeWOtH4BlPfyplL7Wf6Ur44E2kPdjbOgw0sXrphXY7V4+eqchWZo/TDSqX qd993PlUYCbN0C2cv7g72oASBIo08q5K -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:03 2025 by rpki-client