$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft File: rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json) Hash identifier: ju1wIp49vL0MoY8SIcHhpz+JMHj9cJlPBYFBd120ygI= Subject key identifier: 5B:E8:60:AB:32:52:49:0F:4F:F1:72:B3:F8:FD:C5:60:F9:24:ED:AD Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 Certificate issuer: /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft Manifest number: EC Signing time: Mon 21 Jul 2025 05:32:12 +0000 Manifest this update: Mon 21 Jul 2025 05:32:11 +0000 Manifest next update: Mon 28 Jul 2025 05:32:11 +0000 Files and hashes: 1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: E/BnXr7bd60yb4XI7QD8txrCQIdyyCG4adZ1ZlmgASk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384DF, serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Validity Not Before: Jul 21 05:32:11 2025 GMT Not After : Jul 28 05:32:11 2025 GMT Subject: CN=687dd0dc-5d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:c9:f9:c7:30:3e:27:8b:76:60:85:0e:00: 0e:c9:39:81:e1:c7:5d:21:1a:89:1a:90:50:f4:65: 35:dd:84:3c:98:db:db:09:1b:a7:1b:95:74:30:a3: e4:aa:ac:30:cf:42:6a:f6:ca:1f:dc:f0:cf:95:e5: 99:6a:08:0a:c3:75:88:df:c4:b7:bd:a0:73:4d:bf: 3a:35:2c:f2:e9:2a:09:eb:30:33:44:1c:10:a9:c9: 1a:0d:85:aa:b9:be:84:ee:14:8f:5a:23:70:29:67: f6:b8:c5:a4:ae:23:88:dd:c4:90:b3:81:51:20:11: 3e:cd:e9:da:d9:54:9a:a1:5f:b9:29:39:08:a8:65: 3e:a1:74:ae:00:ec:55:6e:16:82:3e:68:dd:67:d6: 53:23:9f:a2:8a:e6:f0:83:d1:fe:33:0b:2f:37:40: 83:7e:a9:b4:a3:e7:db:e6:65:b0:2c:71:25:1b:5f: f2:45:db:e2:97:81:0d:ba:3c:94:f4:2d:85:70:0b: 50:30:e8:69:8a:eb:51:dd:d9:57:e9:6b:24:85:2c: d2:70:d4:89:e1:52:70:c0:a6:09:7a:53:bd:26:57: 4c:b7:53:19:b5:9e:eb:dd:30:f0:f9:29:d6:a9:28: d2:6a:2a:38:a2:d6:57:ae:86:e5:28:ca:12:09:ff: e4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:60:AB:32:52:49:0F:4F:F1:72:B3:F8:FD:C5:60:F9:24:ED:AD X509v3 Authority Key Identifier: keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:94:49:9b:d7:ec:36:14:a5:da:38:72:2a:e1:b8:18:e6:50: e3:ce:ab:b0:73:11:86:bb:59:7d:4b:e0:b5:f9:ba:f2:ef:0f: fc:3c:21:52:40:b5:f1:80:17:96:ed:77:f8:1e:5f:e5:8a:f1: dd:db:c1:aa:d0:a7:4c:4b:53:58:94:21:20:39:10:f6:e2:49: f6:fe:64:71:f8:5c:cb:bc:aa:bb:c2:89:f0:fe:5c:69:7e:1e: d0:2e:f5:dd:0d:df:a2:da:7f:7f:26:64:9b:84:9e:b3:a4:36: 07:75:a6:98:76:4d:06:22:d9:a1:ed:95:b8:1a:e6:bb:99:5d: 57:76:f6:34:b1:c0:0b:a1:4a:ed:23:07:4c:11:3e:6e:8c:b8: 17:c1:1e:19:38:e9:a9:ee:e4:b2:ed:43:77:9a:ec:e2:03:dd: e2:f7:df:7c:7b:7c:39:96:83:30:d3:5d:6b:27:57:65:28:b4: cc:fa:36:38:20:38:72:d1:9b:46:8a:a5:e7:9b:1d:14:90:a7: e0:02:89:df:5e:cb:13:8c:f3:26:a6:a8:20:37:6c:bb:52:eb: ef:1e:78:42:af:25:cb:37:d0:85:a5:5a:23:6d:d8:9a:2f:8b: 82:72:55:a5:19:41:e4:90:6b:90:26:23:68:12:71:85:ed:05: 3c:8d:5f:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0REYxMTAvBgNVBAUTKEFDOTc4OUYyOEFGMTY4QjI2QzUwOTY0NjE1REYwNkQ3 RUM3MjAyRTMwHhcNMjUwNzIxMDUzMjExWhcNMjUwNzI4MDUzMjExWjAYMRYwFAYD VQQDEw02ODdkZDBkYy01ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR7J+ccwPieLdmCFDgAOyTmB4cddIRqJGpBQ9GU13YQ8mNvbCRunG5V0MKPk qqwwz0Jq9sof3PDPleWZaggKw3WI38S3vaBzTb86NSzy6SoJ6zAzRBwQqckaDYWq ub6E7hSPWiNwKWf2uMWkriOI3cSQs4FRIBE+zena2VSaoV+5KTkIqGU+oXSuAOxV bhaCPmjdZ9ZTI5+iiubwg9H+MwsvN0CDfqm0o+fb5mWwLHElG1/yRdvil4ENujyU 9C2FcAtQMOhpiutR3dlX6WskhSzScNSJ4VJwwKYJelO9JldMt1MZtZ7r3TDw+SnW qSjSaio4otZXroblKMoSCf/kiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvoYKsy UkkPT/Fys/j9xWD5JO2tMB8GA1UdIwQYMBaAFKyXifKK8WiybFCWRhXfBtfscgLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRERi9BRTE2NEI2MjAz NzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFMSnNVSlpHRmQ4RzEteHlB dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKZUo4b3J4YUxKc1VKWkdGZDhHMS14eUF1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRERi9BRTE2NEI2MjAzNzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFM SnNVSlpHRmQ4RzEteHlBdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQlEmb1+w2FKXaOHIq4bgY5lDjzquwcxGGu1l9S+C1+bry7w/8PCFS QLXxgBeW7Xf4Hl/livHd28Gq0KdMS1NYlCEgORD24kn2/mRx+FzLvKq7wonw/lxp fh7QLvXdDd+i2n9/JmSbhJ6zpDYHdaaYdk0GItmh7ZW4Gua7mV1XdvY0scALoUrt IwdMET5ujLgXwR4ZOOmp7uSy7UN3muziA93i9998e3w5loMw011rJ1dlKLTM+jY4 IDhy0ZtGiqXnmx0UkKfgAonfXssTjPMmpqggN2y7UuvvHnhCryXLN9CFpVojbdia L4uCclWlGUHkkGuQJiNoEnGF7QU8jV+P -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:30 2025 by rpki-client