$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft File: JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json) Hash identifier: Nyjbf6lWuBp1GXQc/k9pz2vWJToIJFuVDPwXRRiDcv0= Subject key identifier: EF:A2:E5:55:77:C0:71:DE:55:D5:DB:D3:C6:5F:E3:B3:55:14:03:72 Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft Manifest number: 014B Signing time: Sat 19 Jul 2025 04:32:36 +0000 Manifest this update: Sat 19 Jul 2025 04:32:35 +0000 Manifest next update: Sat 26 Jul 2025 04:32:35 +0000 Files and hashes: 1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: GxgL3dcerSi2LmIR9qaDxdw9c+ze1FGoWYNEA6yS2Ik=) 2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: XlNDLwL1s4PNyju0F9J/L57gx4vJtRRqq2V9lyDq2Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Validity Not Before: Jul 19 04:32:35 2025 GMT Not After : Jul 26 04:32:35 2025 GMT Subject: CN=687b1fe4-1994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:93:68:b7:45:f3:fb:7e:c8:17:b7:fc:ac: 3e:68:38:54:3d:77:ea:61:f0:51:2c:66:1c:7e:dd: 55:34:02:be:72:70:40:78:44:6d:d1:0a:54:ca:19: 99:5d:5e:8a:2d:72:85:1e:38:7e:48:cb:0a:f1:35: 50:d5:94:b9:53:e9:ca:47:0c:f2:eb:15:ab:2b:7b: 54:b2:7a:6b:ff:cf:8a:6f:f0:17:13:00:88:e0:de: 61:e3:f8:a4:69:08:dc:88:92:7a:63:44:41:74:a2: d2:2e:00:b9:a0:0b:28:e8:34:d5:e5:7d:f4:bf:d4: 5f:f2:cd:0d:aa:d1:6f:1b:92:4e:3f:2f:96:3c:6a: 28:23:96:64:fe:36:2b:08:7c:26:0d:b4:71:9d:ed: c5:aa:28:cd:18:e2:69:75:36:17:3a:4d:d0:1d:53: b4:ef:a2:45:06:ca:7f:e5:9f:39:78:f5:ee:cc:1c: 04:98:64:17:e2:b8:e5:ba:8a:14:fe:ad:53:29:da: c5:00:1e:fc:a1:7e:c0:32:48:98:9f:52:7d:a8:b2: 7d:c4:9c:59:e6:36:0e:a0:ac:ce:dc:b7:af:c4:18: a8:70:9b:25:80:c4:2b:1a:1c:6c:2a:4e:e9:77:49: 1f:8d:0e:ee:b0:d7:b5:2b:8e:65:8d:cb:7f:bc:74: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A2:E5:55:77:C0:71:DE:55:D5:DB:D3:C6:5F:E3:B3:55:14:03:72 X509v3 Authority Key Identifier: keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e4:29:d3:75:af:ab:be:1b:34:4c:ce:6d:ca:04:6c:2a:1b: 1a:96:f9:e6:a4:cd:d2:62:60:fa:ff:1f:ff:bd:f4:0c:46:ce: 44:f1:56:03:c4:24:61:4f:c7:2b:6c:f7:63:12:c2:c1:94:4c: a2:d7:77:ee:3d:b6:ec:e1:b4:e4:21:00:43:ad:57:81:8f:51: be:8b:6e:06:3c:62:43:47:fc:2c:a0:87:5e:71:d7:91:d2:84: b7:f0:3f:be:ff:b0:91:9c:8e:65:3e:a2:23:a5:e0:04:71:c9: 7e:6b:a5:6a:f1:5b:f1:96:f3:dc:a8:e3:b3:d5:5a:5b:2e:6c: 79:e2:b4:db:80:a6:e1:2a:1a:55:1b:f6:13:21:5a:6f:6e:1d: 9e:11:a4:6f:68:5f:89:cd:2b:00:cb:a3:29:6b:47:4d:55:fc: 08:0b:5a:47:bc:20:2f:97:76:c6:47:f0:de:c5:03:06:54:7e: aa:de:15:88:b9:11:8d:8f:fe:84:77:1b:b4:63:00:cb:4f:5b: b7:13:44:9c:15:dc:c7:f3:4d:e6:ab:7f:7f:ee:84:b4:3a:e0: 75:fa:4a:7b:25:2e:48:10:10:68:24:15:73:e4:43:b0:99:44: cc:3c:02:ef:70:c3:88:e6:3e:80:60:2c:f2:86:1e:44:28:a9: 1b:20:e9:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNDgxMTAvBgNVBAUTKDI2MTU5NkI1NTZFOTJDMTJEMkVCQzhERDhCMjVDRkI4 NzU4RTA3OEMwHhcNMjUwNzE5MDQzMjM1WhcNMjUwNzI2MDQzMjM1WjAYMRYwFAYD VQQDEw02ODdiMWZlNC0xOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGGTaLdF8/t+yBe3/Kw+aDhUPXfqYfBRLGYcft1VNAK+cnBAeERt0QpUyhmZ XV6KLXKFHjh+SMsK8TVQ1ZS5U+nKRwzy6xWrK3tUsnpr/8+Kb/AXEwCI4N5h4/ik aQjciJJ6Y0RBdKLSLgC5oAso6DTV5X30v9Rf8s0NqtFvG5JOPy+WPGooI5Zk/jYr CHwmDbRxne3FqijNGOJpdTYXOk3QHVO076JFBsp/5Z85ePXuzBwEmGQX4rjluooU /q1TKdrFAB78oX7AMkiYn1J9qLJ9xJxZ5jYOoKzO3LevxBiocJslgMQrGhxsKk7p d0kfjQ7usNe1K45ljct/vHQbxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+i5VV3 wHHeVdXb08Zf47NVFANyMB8GA1UdIwQYMBaAFCYVlrVW6SwS0uvI3Yslz7h1jgeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0OC9EQkJEODFGRTc1 M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExCTFM2OGpkaXlYUHVIV09C NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poV1d0VmJwTEJMUzY4amRpeVhQdUhXT0I0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0OC9EQkJEODFGRTc1M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExC TFM2OGpkaXlYUHVIV09CNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF5CnTda+rvhs0TM5tygRsKhsalvnmpM3SYmD6/x//vfQMRs5E8VYD xCRhT8crbPdjEsLBlEyi13fuPbbs4bTkIQBDrVeBj1G+i24GPGJDR/wsoIdecdeR 0oS38D++/7CRnI5lPqIjpeAEccl+a6Vq8VvxlvPcqOOz1VpbLmx54rTbgKbhKhpV G/YTIVpvbh2eEaRvaF+JzSsAy6Mpa0dNVfwIC1pHvCAvl3bGR/DexQMGVH6q3hWI uRGNj/6Edxu0YwDLT1u3E0ScFdzH803mq39/7oS0OuB1+kp7JS5IEBBoJBVz5EOw mUTMPALvcMOI5j6AYCzyhh5EKKkbIOl3 -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:44 2025 by rpki-client