$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: D5uArggE3DKBWjLhsqmAowgscDqoLEX6h2rX4w0W+NA= Subject key identifier: C3:46:A2:61:B5:E5:2A:1B:C9:C3:E0:35:99:48:40:E8:24:0A:75:C6 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0B88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0B7C Signing time: Fri 18 Jul 2025 19:12:25 +0000 Manifest this update: Fri 18 Jul 2025 19:12:25 +0000 Manifest next update: Fri 25 Jul 2025 19:12:25 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: qdMwwQI3YxWPRBscDcM8Q08Zh8CifzOO/cF4ZlIdAOA=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2952 (0xb88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Jul 18 19:12:25 2025 GMT Not After : Jul 25 19:12:25 2025 GMT Subject: CN=687a9c99-d938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:b9:7a:0f:d1:3d:e9:7f:8f:9f:cf:9f:2b: 07:5b:a2:9f:26:be:e5:fd:95:22:68:33:90:09:56: 1e:56:5e:78:cc:2f:cb:b7:49:ed:89:d0:d0:a5:8e: c9:98:88:55:b9:e9:a5:29:e5:cc:d5:2b:01:5f:23: 46:93:ac:ec:9f:02:72:93:06:b7:bd:8f:8a:1f:32: 8a:9e:38:fa:b0:9c:9e:68:b8:73:bb:20:a9:90:07: 97:2a:38:1a:91:6c:6d:a0:38:b5:38:a5:05:e5:12: 4f:68:f2:66:de:7d:8a:bb:fb:25:0b:95:f4:a6:a8: 08:b6:19:5d:5a:fb:71:9c:c5:1d:e5:2a:a4:51:fe: 75:75:e2:bd:6c:e7:a8:ea:e5:d2:cc:27:e6:19:ab: bb:a3:09:26:a5:a8:5d:73:0a:fd:91:8a:99:40:1c: d6:37:99:1b:0d:65:fb:a3:b7:50:8a:e3:aa:86:d8: 89:79:c6:4f:a7:7f:4f:e5:97:53:e4:f5:85:34:5f: b3:12:a8:b5:d8:6e:f1:39:ca:a1:e7:56:32:f8:44: f9:1d:78:8c:b9:55:5f:d5:64:d3:39:a2:07:8f:6a: 05:af:41:de:cd:32:96:73:cb:0e:f8:38:f4:7c:91: 31:19:b9:0e:0e:2d:02:15:fc:de:0e:7e:d8:58:ca: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:46:A2:61:B5:E5:2A:1B:C9:C3:E0:35:99:48:40:E8:24:0A:75:C6 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3f:62:d7:77:c1:bd:33:dc:f1:09:a6:7d:a3:26:f8:c0:17: ff:c2:4e:b5:6e:d4:62:e4:20:7d:a5:cc:a7:16:53:f4:c4:f3: 68:f3:8a:04:b4:86:a0:a4:1c:5d:f3:62:77:cd:ac:4f:b7:c6: b6:3f:8e:dc:ce:0d:fe:8d:01:26:a6:ba:89:bc:39:7f:f0:76: 86:79:4a:d8:0c:35:3f:23:ad:bf:40:63:15:e8:99:26:5d:27: ea:a8:9c:76:11:1f:a3:3e:e8:de:4c:ad:97:ab:9f:be:d0:0d: eb:43:b1:1e:a2:ce:09:09:4c:78:d4:51:3d:58:4f:6b:e2:70: ae:a9:73:ff:03:eb:5e:20:32:6c:44:0b:92:e2:c7:a3:99:d9: df:de:53:ca:cc:67:74:7e:a6:48:9b:ea:11:09:e7:47:74:6b: 79:38:17:4f:4a:df:97:14:cb:c2:39:73:fd:bc:0b:3c:1f:76: 6a:28:e0:84:30:48:f2:59:33:58:26:8d:40:df:ad:4c:ca:60: f4:5c:06:6e:d5:de:a8:f6:21:7b:fb:b4:ec:d9:ad:09:7a:9d: 6b:3a:1e:05:b0:73:d4:d3:30:c5:a5:e3:7e:4c:57:13:a9:f4: cb:9b:e1:96:4d:6f:da:ae:92:8b:f9:d7:11:5e:83:8d:78:33: 76:78:b6:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjUwNzE4MTkxMjI1WhcNMjUwNzI1MTkxMjI1WjAYMRYwFAYD VQQDEw02ODdhOWM5OS1kOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvO5eg/RPel/j5/PnysHW6KfJr7l/ZUiaDOQCVYeVl54zC/Lt0ntidDQpY7J mIhVuemlKeXM1SsBXyNGk6zsnwJykwa3vY+KHzKKnjj6sJyeaLhzuyCpkAeXKjga kWxtoDi1OKUF5RJPaPJm3n2Ku/slC5X0pqgIthldWvtxnMUd5SqkUf51deK9bOeo 6uXSzCfmGau7owkmpahdcwr9kYqZQBzWN5kbDWX7o7dQiuOqhtiJecZPp39P5ZdT 5PWFNF+zEqi12G7xOcqh51Yy+ET5HXiMuVVf1WTTOaIHj2oFr0HezTKWc8sO+Dj0 fJExGbkODi0CFfzeDn7YWMrnAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNGomG1 5SobycPgNZlIQOgkCnXGMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsP2LXd8G9M9zxCaZ9oyb4wBf/wk61btRi5CB9pcynFlP0xPNo84oE tIagpBxd82J3zaxPt8a2P47czg3+jQEmprqJvDl/8HaGeUrYDDU/I62/QGMV6Jkm XSfqqJx2ER+jPujeTK2Xq5++0A3rQ7Eeos4JCUx41FE9WE9r4nCuqXP/A+teIDJs RAuS4sejmdnf3lPKzGd0fqZIm+oRCedHdGt5OBdPSt+XFMvCOXP9vAs8H3ZqKOCE MEjyWTNYJo1A361MymD0XAZu1d6o9iF7+7Ts2a0Jep1rOh4FsHPU0zDFpeN+TFcT qfTLm+GWTW/arpKL+dcRXoONeDN2eLa0 -----END CERTIFICATE-----Generated at Sun Jul 20 04:28:08 2025 by rpki-client