$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: Ekcv8Jcx8nDBvbMafto1Nu5RF9lTAcaHGsYlFmpkV/U= Subject key identifier: 72:A9:CE:9C:CC:BE:C4:E4:09:78:84:D6:29:2A:FD:D2:BB:91:F6:96 Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 04D1 Signing time: Sat 19 Jul 2025 00:10:23 +0000 Manifest this update: Sat 19 Jul 2025 00:10:23 +0000 Manifest next update: Sat 26 Jul 2025 00:10:23 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: RL5Un7TXWh5ZmuGX/+CrV7ih765F7D1JZcOqspE+rOo=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: Jul 19 00:10:23 2025 GMT Not After : Jul 26 00:10:23 2025 GMT Subject: CN=687ae26f-1c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:ab:6e:8f:c9:96:24:8c:ec:8e:b8:81:8e: 7b:20:79:8b:e7:22:9a:bd:55:0f:99:9a:6c:d7:d6: 5d:93:3f:97:2d:17:86:cf:2e:6a:92:1a:04:e5:e2: 10:da:e0:d4:c7:b7:3f:01:3c:bf:b2:ac:63:9d:91: 3b:4d:7b:fe:c3:e4:22:18:42:17:4d:bb:aa:f8:50: 67:7e:f0:0f:14:e5:58:6d:9f:e8:8c:e1:0f:0b:55: 9a:60:df:c0:fc:ef:79:da:ca:94:40:d0:65:95:e2: b5:00:1c:3d:e4:f6:6c:e2:08:ca:5b:05:e9:5a:df: b3:4c:07:04:9c:21:75:27:ca:30:55:d5:85:8b:c0: 4a:e8:bf:c4:48:28:a2:f0:9a:0c:b2:01:03:36:63: 39:33:b9:d9:5c:18:0a:14:6a:8a:c3:2a:08:1c:66: b1:f2:f4:c7:f6:95:2f:13:51:d3:24:83:64:14:72: 5c:95:e2:c5:6e:1a:1f:52:c8:eb:54:6b:32:67:b5: 4c:22:81:25:b6:85:f6:6f:40:ca:e0:e0:cd:b3:a9: e5:9c:b2:ee:2b:a7:87:42:48:3e:b6:eb:73:3a:35: 04:5c:b5:7d:a1:c3:cc:ef:a0:a6:3b:ff:76:f9:8e: c6:77:9c:cf:5f:0b:dd:cd:59:45:9f:0e:8b:9c:90: 97:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:CE:9C:CC:BE:C4:E4:09:78:84:D6:29:2A:FD:D2:BB:91:F6:96 X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8f:b2:ef:96:97:7e:02:27:30:c3:ba:ea:8a:1d:ca:be:96: 7c:4d:ec:a9:f7:c2:80:5d:c2:fa:85:dc:fc:1b:0c:0c:c7:a2: 3d:f1:6c:9e:fa:b0:41:f9:80:dc:32:0f:dd:02:7b:a1:41:6b: 6b:2b:55:93:d3:25:e3:72:c0:64:95:87:4b:18:a8:21:68:08: ab:05:4f:c7:b9:d6:98:65:4f:4c:2f:70:d8:b1:23:1d:65:19: 76:d9:50:6e:70:9e:ab:a2:f8:c1:7d:aa:05:21:05:b4:87:ce: 08:3e:fa:1e:36:39:b9:e2:cb:71:2d:df:34:8c:b5:78:76:02: e1:1c:2e:6b:7b:a0:2d:f1:25:40:fb:d8:eb:68:2b:b2:82:6c: 81:59:1a:30:e4:56:56:98:ac:08:47:35:dd:88:7d:86:c4:9d: 74:a0:d5:66:f8:04:36:a5:cf:dd:bf:80:e0:4c:5e:96:84:ee: 86:9c:98:23:41:14:07:28:30:f9:19:e0:e3:a8:f3:9f:9b:42: de:ca:98:ea:43:e4:e8:05:eb:f3:6b:76:4d:a9:4e:38:42:81: bb:93:86:02:12:71:af:06:0a:12:c0:ea:6d:e0:8d:c2:77:c5: 23:d8:d8:ec:79:01:d3:d0:13:e9:4c:71:08:3d:fb:3d:16:63: bb:0e:d0:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUwNzE5MDAxMDIzWhcNMjUwNzI2MDAxMDIzWjAYMRYwFAYD VQQDEw02ODdhZTI2Zi0xYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc6rbo/JliSM7I64gY57IHmL5yKavVUPmZps19Zdkz+XLReGzy5qkhoE5eIQ 2uDUx7c/ATy/sqxjnZE7TXv+w+QiGEIXTbuq+FBnfvAPFOVYbZ/ojOEPC1WaYN/A /O952sqUQNBlleK1ABw95PZs4gjKWwXpWt+zTAcEnCF1J8owVdWFi8BK6L/ESCii 8JoMsgEDNmM5M7nZXBgKFGqKwyoIHGax8vTH9pUvE1HTJINkFHJcleLFbhofUsjr VGsyZ7VMIoEltoX2b0DK4ODNs6nlnLLuK6eHQkg+tutzOjUEXLV9ocPM76CmO/92 +Y7Gd5zPXwvdzVlFnw6LnJCX2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKpzpzM vsTkCXiE1ikq/dK7kfaWMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsj7Lvlpd+Aicww7rqih3KvpZ8Teyp98KAXcL6hdz8GwwMx6I98Wye +rBB+YDcMg/dAnuhQWtrK1WT0yXjcsBklYdLGKghaAirBU/HudaYZU9ML3DYsSMd ZRl22VBucJ6rovjBfaoFIQW0h84IPvoeNjm54stxLd80jLV4dgLhHC5re6At8SVA +9jraCuygmyBWRow5FZWmKwIRzXdiH2GxJ10oNVm+AQ2pc/dv4DgTF6WhO6GnJgj QRQHKDD5GeDjqPOfm0LeypjqQ+ToBevza3ZNqU44QoG7k4YCEnGvBgoSwOpt4I3C d8Uj2NjseQHT0BPpTHEIPfs9FmO7DtDo -----END CERTIFICATE-----Generated at Sun Jul 20 02:07:02 2025 by rpki-client