$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: glRAi8B1AbCcEa0q3vXbZmnWHTv0G62z2E4aBITm3Z4= Subject key identifier: 24:DC:28:F0:F2:12:CA:7D:B8:C0:99:95:A7:ED:47:BE:96:94:15:7A Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1CBD Signing time: Fri 18 Jul 2025 16:16:58 +0000 Manifest this update: Fri 18 Jul 2025 16:16:57 +0000 Manifest next update: Fri 25 Jul 2025 16:16:57 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: mOHRL8e1Aot8QqXkw3MyxERexL992PB4pAiLMi8GRjI=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7389 (0x1cdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Jul 18 16:16:57 2025 GMT Not After : Jul 25 16:16:57 2025 GMT Subject: CN=687a7379-0a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:db:3c:84:2b:15:b8:f4:2a:95:65:31:a5: d1:e4:dc:8f:84:df:d3:b4:9e:5b:df:a4:9c:89:cd: 21:d2:7b:e0:ff:48:b3:49:e2:ea:94:94:9d:09:9b: d0:02:54:f0:3f:2b:ee:43:42:d0:93:d6:d1:4d:17: 72:b2:3a:4c:57:6e:93:64:b2:7c:10:c7:2a:79:de: 9b:6d:c2:1b:22:5e:86:c4:94:61:cd:d7:05:18:3f: cb:de:90:b7:64:57:28:97:f6:5e:8b:ca:65:a7:a2: 9d:7d:5e:35:ea:bb:b4:fe:48:de:f4:0a:d2:1d:cb: aa:5f:9f:b5:ad:2e:97:c8:cf:35:c8:80:08:29:ed: 38:b8:00:de:52:2f:04:0d:72:52:f6:76:03:c8:94: df:ff:1a:3d:b1:76:5b:15:ad:8e:43:af:38:25:36: d2:46:bd:52:b2:ac:04:e8:25:72:f0:c6:c2:f2:a2: 39:4e:ed:50:46:73:d1:86:83:50:57:4e:50:4f:2b: ed:dd:a5:d2:34:aa:b2:e0:db:5c:0f:c1:96:94:fe: 1a:2d:f2:25:be:82:e9:e3:31:3f:60:6c:c0:c3:b2: 52:17:d8:b8:91:7a:37:d8:1b:59:10:6e:e6:26:ef: cb:6e:cd:95:df:1b:9c:17:ce:06:32:f8:05:2d:a7: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:28:F0:F2:12:CA:7D:B8:C0:99:95:A7:ED:47:BE:96:94:15:7A X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:43:20:8c:cf:cc:5d:22:bc:b8:1d:90:0b:39:6d:ca:79:fd: 07:5e:4e:c4:39:75:9c:e9:58:6e:bf:19:c8:e7:08:b6:42:12: 4c:58:db:a8:b9:bd:ad:11:b4:18:ba:6b:89:87:22:0d:85:47: 0a:80:ea:ac:f4:c1:7b:b7:3f:d7:9a:5c:c8:d9:18:22:2c:c4: 6e:17:01:11:f8:b2:e1:5d:13:f8:cf:18:98:ae:b5:05:50:02: cc:22:7c:0d:fb:e2:7e:ea:77:2a:b9:be:d3:75:f6:d0:9a:02: 91:52:7c:61:f8:ad:a6:be:ce:77:f0:c3:cd:11:04:27:55:f0: d7:7a:fe:25:66:49:3e:34:ff:5d:7e:76:0f:8b:7a:7a:7e:e4: e3:81:62:89:af:97:e6:3e:6f:6e:fe:ec:a2:59:34:57:d2:5c: 9f:ec:aa:2f:6c:11:c2:58:e0:92:83:c6:a3:f2:1b:96:b7:de: 83:da:4c:6f:fc:1e:45:4b:06:56:37:63:ab:4d:d8:32:52:ad: b7:f0:c6:78:c4:e6:eb:8f:8f:2e:98:05:02:60:22:87:8e:31: 68:49:63:ad:4a:c9:88:55:da:b0:53:1a:31:23:c8:f4:a4:50: f9:af:f5:dd:63:d1:07:44:19:39:12:c8:ee:9f:17:98:2f:b9: 1c:8b:75:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwNzE4MTYxNjU3WhcNMjUwNzI1MTYxNjU3WjAYMRYwFAYD VQQDEw02ODdhNzM3OS0wYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMDbPIQrFbj0KpVlMaXR5NyPhN/TtJ5b36Scic0h0nvg/0izSeLqlJSdCZvQ AlTwPyvuQ0LQk9bRTRdysjpMV26TZLJ8EMcqed6bbcIbIl6GxJRhzdcFGD/L3pC3 ZFcol/Zei8plp6KdfV416ru0/kje9ArSHcuqX5+1rS6XyM81yIAIKe04uADeUi8E DXJS9nYDyJTf/xo9sXZbFa2OQ684JTbSRr1SsqwE6CVy8MbC8qI5Tu1QRnPRhoNQ V05QTyvt3aXSNKqy4NtcD8GWlP4aLfIlvoLp4zE/YGzAw7JSF9i4kXo32BtZEG7m Ju/Lbs2V3xucF84GMvgFLad6VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTcKPDy Esp9uMCZlaftR76WlBV6MB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWQyCMz8xdIry4HZALOW3Kef0HXk7EOXWc6VhuvxnI5wi2QhJMWNuo ub2tEbQYumuJhyINhUcKgOqs9MF7tz/XmlzI2RgiLMRuFwER+LLhXRP4zxiYrrUF UALMInwN++J+6ncqub7TdfbQmgKRUnxh+K2mvs538MPNEQQnVfDXev4lZkk+NP9d fnYPi3p6fuTjgWKJr5fmPm9u/uyiWTRX0lyf7KovbBHCWOCSg8aj8huWt96D2kxv /B5FSwZWN2OrTdgyUq238MZ4xObrj48umAUCYCKHjjFoSWOtSsmIVdqwUxoxI8j0 pFD5r/XdY9EHRBk5EsjunxeYL7kci3UP -----END CERTIFICATE-----Generated at Sun Jul 20 06:45:36 2025 by rpki-client