$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft File: JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json) Hash identifier: m9Lm7hxc1eNIyw/S4aiJrMFWKxjo71M5kqF6+Dy7dAk= Subject key identifier: CF:4E:9B:A7:68:6B:B3:67:5E:88:24:67:FA:C5:06:3D:0B:24:BC:25 Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 Certificate issuer: /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft Manifest number: 0741 Signing time: Fri 18 Jul 2025 21:59:56 +0000 Manifest this update: Fri 18 Jul 2025 21:59:55 +0000 Manifest next update: Fri 25 Jul 2025 21:59:55 +0000 Files and hashes: 1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: dypGK86lsy9w+fqrEcu6SMOzeeZaLRxV7hrYpNMGffo=) 2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: FBuNSRl7XnXjjg9AlzEceanFZnpfOYLenTTWUna+f+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Validity Not Before: Jul 18 21:59:55 2025 GMT Not After : Jul 25 21:59:55 2025 GMT Subject: CN=687ac3db-077c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:47:bd:fe:99:61:77:53:4a:70:2a:05:4e: 33:a6:38:a8:48:45:bc:97:7b:15:83:db:84:c0:21: 27:eb:a6:1d:70:c8:5f:bf:75:b3:b2:dd:3c:e7:13: e2:61:f0:62:88:c7:83:4e:58:23:ea:e6:46:9e:cb: 79:53:c9:7d:74:53:b9:c4:52:42:a9:e4:4d:a3:1b: 68:18:05:ff:aa:97:be:5a:8d:dc:08:69:3d:0e:dd: 79:98:93:e0:b8:f1:8d:b1:fb:b1:ec:85:d6:89:20: aa:3c:cc:a3:e6:e6:ff:6a:8a:42:54:7e:fe:70:e0: 8b:54:a6:cb:08:bb:d7:9b:91:f1:5a:51:b0:77:70: 56:79:70:58:e8:e7:c5:1f:2f:e9:d2:69:c9:b9:d3: 24:8a:98:da:ac:50:b6:32:4b:04:65:0d:e9:84:53: 40:40:1c:b0:fa:47:65:78:cb:4a:91:63:4d:3f:3f: 47:69:e5:28:34:b1:de:a9:f6:8a:1f:35:d0:88:14: 79:67:02:ed:21:2a:f2:41:9e:77:14:24:e0:99:9f: 18:02:86:19:76:99:ca:2b:0c:af:ed:2a:6e:a9:b8: c0:5c:f6:6b:5b:9f:24:97:69:e1:31:22:d2:d6:e5: 02:51:6f:2e:de:ac:42:87:49:95:40:09:a7:16:ed: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4E:9B:A7:68:6B:B3:67:5E:88:24:67:FA:C5:06:3D:0B:24:BC:25 X509v3 Authority Key Identifier: keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:99:e1:17:86:af:a5:ab:e0:d5:38:6d:fc:14:8c:7b:a1:de: 3c:d3:72:da:09:27:68:b5:c6:10:a2:05:f7:61:95:dd:94:c6: 12:57:f6:41:fc:ac:c6:5e:1c:cb:74:62:07:1b:d7:29:15:51: 36:77:bc:3a:d7:6f:e5:ee:36:b7:22:4b:08:eb:98:e3:36:6e: 8b:76:a3:2c:c4:a3:75:7b:63:ea:bf:3b:c1:c6:c3:f5:0e:c3: 64:d8:d6:f4:cd:99:a5:d8:d5:bd:78:e0:b1:e6:4c:4e:e9:55: 86:45:38:4c:99:d0:6b:1c:7d:b3:cd:b6:79:c5:a0:de:da:72: 1b:08:1b:30:3e:35:c4:c2:cd:89:14:59:c0:e2:63:8b:75:77: c5:ba:22:bb:dd:77:dd:76:64:2c:94:e3:d1:90:1d:48:dd:40: 68:37:3d:aa:09:66:b0:5d:a0:e0:b3:77:1a:ec:81:c5:e7:22: 5a:9f:c9:f5:f5:c2:a4:37:e7:d4:e0:4c:6d:d7:ca:90:23:9a: d1:90:f2:5f:00:a8:0f:83:52:37:a7:71:f0:e3:fb:9b:bb:d9: 8d:9c:ac:50:05:34:75:cf:e3:c0:1a:61:9b:23:05:97:cd:50: a6:13:c1:c5:0c:50:a6:80:6c:24:9e:9c:6c:09:9c:84:6e:2b: 77:9e:2f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwMjIxMTAvBgNVBAUTKDI2RDUxQ0MxNEEyM0QwQTg4MjNCNUYxQ0EyMDBFNzA4 NkFDOUE5NjkwHhcNMjUwNzE4MjE1OTU1WhcNMjUwNzI1MjE1OTU1WjAYMRYwFAYD VQQDEw02ODdhYzNkYi0wNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYVHvf6ZYXdTSnAqBU4zpjioSEW8l3sVg9uEwCEn66YdcMhfv3Wzst085xPi YfBiiMeDTlgj6uZGnst5U8l9dFO5xFJCqeRNoxtoGAX/qpe+Wo3cCGk9Dt15mJPg uPGNsfux7IXWiSCqPMyj5ub/aopCVH7+cOCLVKbLCLvXm5HxWlGwd3BWeXBY6OfF Hy/p0mnJudMkipjarFC2MksEZQ3phFNAQByw+kdleMtKkWNNPz9HaeUoNLHeqfaK HzXQiBR5ZwLtISryQZ53FCTgmZ8YAoYZdpnKKwyv7SpuqbjAXPZrW58kl2nhMSLS 1uUCUW8u3qxCh0mVQAmnFu3MZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Om6do a7NnXogkZ/rFBj0LJLwlMB8GA1UdIwQYMBaAFCbVHMFKI9CogjtfHKIA5whqyalp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDAyMi85NEU3Q0FGODMz QUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBLaUNPMThjb2dEbkNHckpx V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0VWN3VW9qMEtpQ08xOGNvZ0RuQ0dySnFXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDAyMi85NEU3Q0FGODMzQUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBL aUNPMThjb2dEbkNHckpxV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRmeEXhq+lq+DVOG38FIx7od4803LaCSdotcYQogX3YZXdlMYSV/ZB /KzGXhzLdGIHG9cpFVE2d7w612/l7ja3IksI65jjNm6LdqMsxKN1e2PqvzvBxsP1 DsNk2Nb0zZml2NW9eOCx5kxO6VWGRThMmdBrHH2zzbZ5xaDe2nIbCBswPjXEws2J FFnA4mOLdXfFuiK73XfddmQslOPRkB1I3UBoNz2qCWawXaDgs3ca7IHF5yJan8n1 9cKkN+fU4Ext18qQI5rRkPJfAKgPg1I3p3Hw4/ubu9mNnKxQBTR1z+PAGmGbIwWX zVCmE8HFDFCmgGwknpxsCZyEbit3ni9v -----END CERTIFICATE-----Generated at Sun Jul 20 10:10:35 2025 by rpki-client