$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json) Hash identifier: XPB5s+JKJ2p9JN0dWfmVnbuGNFuNcxNZfOosTo0XCi0= Subject key identifier: ED:87:8F:95:F2:63:EA:18:2E:DC:1A:B2:11:26:52:2F:6E:E0:66:60 Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft Manifest number: 0D11 Signing time: Fri 18 Jul 2025 18:13:44 +0000 Manifest this update: Fri 18 Jul 2025 18:13:44 +0000 Manifest next update: Fri 25 Jul 2025 18:13:44 +0000 Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: 4wLzWlO9wp/A8eAuytpmzPQFoTTwIKa3lwXPpLneEmU=) 2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: mKEvuFivV/Rx5B93IYGv/jXl23LxYS0A2kDJi7kjILY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Jul 18 18:13:44 2025 GMT Not After : Jul 25 18:13:44 2025 GMT Subject: CN=687a8ed8-651e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:7f:f7:82:eb:1e:31:f5:e0:f5:5e:a9:ca: 55:28:62:46:57:c7:e8:6d:12:28:f3:f9:de:d3:97: 9f:d4:fa:b8:33:a7:58:2c:93:6e:6c:72:c0:89:5c: 8a:d2:b4:95:9b:1e:b7:dc:0f:bc:e4:d7:af:18:3f: 6c:79:0b:e3:d3:08:67:71:b6:98:49:db:30:43:09: 2f:89:24:e7:79:99:60:df:56:04:3e:82:7f:d8:35: 80:b0:0e:ce:69:d9:45:2e:ea:02:ae:18:2b:2d:ea: 07:f0:af:f0:77:01:61:db:af:07:53:ba:97:5e:52: af:03:7b:e7:b3:5f:0e:1d:fb:75:87:aa:05:ee:b9: 61:63:c2:07:e6:25:08:8a:4b:92:cd:91:2f:8b:68: 14:fe:50:d6:be:76:6b:de:c8:23:da:71:62:3d:01: 48:c3:b5:7f:d8:dc:3b:40:85:87:f0:85:24:ee:98: c1:13:72:1a:1a:af:a4:01:9b:97:2e:26:a8:b4:de: db:69:b5:e4:35:55:48:d7:95:d2:90:9f:6d:44:60: 24:8c:e4:65:cf:df:59:1d:7b:49:f7:12:59:38:bb: 07:f8:9c:7a:5c:80:4c:38:89:18:ac:b7:88:53:17: cc:ec:13:6b:5a:61:9d:83:ac:36:c7:63:bb:24:81: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:87:8F:95:F2:63:EA:18:2E:DC:1A:B2:11:26:52:2F:6E:E0:66:60 X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f6:8a:d7:0d:0a:d7:25:65:19:21:d4:1a:e6:19:eb:fb:27: 7b:a5:c5:f9:67:5b:02:d7:9c:4a:68:27:dc:6c:7c:f0:c7:b3: ca:56:97:82:72:14:ce:b7:50:48:47:e2:76:d7:21:c5:0b:7a: 9e:d7:ff:39:55:b4:06:cd:67:4f:b6:b6:f1:fd:ae:df:1c:92: 0a:24:2c:77:b7:6c:5f:53:b5:8a:df:c9:b3:6d:f1:ad:31:16: 0e:6d:3c:55:6b:89:4f:34:a9:f1:6c:68:72:94:c7:bf:ab:a1: 8b:3f:64:01:1b:34:95:a0:b6:60:ad:ac:87:a3:05:31:ef:3e: c3:ee:ba:ed:8a:24:0f:6a:dc:0c:9c:b3:34:c0:20:48:05:a7: 7c:eb:d8:ac:52:91:30:33:1d:d4:65:3f:37:b3:e1:98:e5:30: 2b:97:95:51:84:17:1e:19:04:24:a8:71:22:21:01:b6:ee:cd: c8:af:1d:dc:65:ee:06:55:60:26:de:bf:37:5e:e4:d5:30:7c: 7c:69:3e:43:c1:da:00:71:4c:c9:fa:39:4a:9d:a1:6c:4a:ff: c8:78:99:98:00:83:0b:c2:18:10:7d:d7:e8:f6:9c:73:83:af: 22:4b:22:d1:10:34:e2:e1:1e:10:1e:c7:2c:4e:41:4c:a4:1b: 71:81:d7:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjUwNzE4MTgxMzQ0WhcNMjUwNzI1MTgxMzQ0WjAYMRYwFAYD VQQDEw02ODdhOGVkOC02NTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKp/94LrHjH14PVeqcpVKGJGV8fobRIo8/ne05ef1Pq4M6dYLJNubHLAiVyK 0rSVmx633A+85NevGD9seQvj0whncbaYSdswQwkviSTneZlg31YEPoJ/2DWAsA7O adlFLuoCrhgrLeoH8K/wdwFh268HU7qXXlKvA3vns18OHft1h6oF7rlhY8IH5iUI ikuSzZEvi2gU/lDWvnZr3sgj2nFiPQFIw7V/2Nw7QIWH8IUk7pjBE3IaGq+kAZuX LiaotN7babXkNVVI15XSkJ9tRGAkjORlz99ZHXtJ9xJZOLsH+Jx6XIBMOIkYrLeI UxfM7BNrWmGdg6w2x2O7JIFvCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2Hj5Xy Y+oYLtwashEmUi9u4GZgMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODFFMC83NjFBN0VBQ0UyQTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21B dURrQS0zajYybWNONHVDbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi9orXDQrXJWUZIdQa5hnr+yd7pcX5Z1sC15xKaCfcbHzwx7PKVpeC chTOt1BIR+J21yHFC3qe1/85VbQGzWdPtrbx/a7fHJIKJCx3t2xfU7WK38mzbfGt MRYObTxVa4lPNKnxbGhylMe/q6GLP2QBGzSVoLZgrayHowUx7z7D7rrtiiQPatwM nLM0wCBIBad869isUpEwMx3UZT83s+GY5TArl5VRhBceGQQkqHEiIQG27s3Irx3c Ze4GVWAm3r83XuTVMHx8aT5DwdoAcUzJ+jlKnaFsSv/IeJmYAIMLwhgQfdfo9pxz g68iSyLREDTi4R4QHscsTkFMpBtxgdc0 -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:52 2025 by rpki-client