$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: fXPdhou35fboQsQZ1KK/X5AUyNHScE92p4/rf0jE5t0= Subject key identifier: C7:26:B2:13:9A:97:90:8C:FA:FA:00:CD:5C:7E:A1:1C:80:04:B1:66 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 0406 Signing time: Fri 25 Jul 2025 00:48:23 +0000 Manifest this update: Fri 25 Jul 2025 00:48:23 +0000 Manifest next update: Fri 01 Aug 2025 00:48:23 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: Cb5Eh6wlDplmHyBIRv0mmCU+wG7yPVkprtfqd0noQ/E=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 00:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Jul 25 00:48:23 2025 GMT Not After : Aug 1 00:48:23 2025 GMT Subject: CN=6882d457-9473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:95:11:81:c2:6a:e8:5f:4d:f5:f7:b2:d5: b8:c9:87:b8:15:c9:b0:f4:ec:1b:9d:59:28:d2:3c: 16:df:10:88:81:e0:43:8b:e1:3f:b4:6c:f9:0a:b6: 23:c7:ac:77:8f:ce:2a:0f:ae:4f:c0:ba:58:34:82: f7:2e:9b:bd:60:bb:d6:8b:6c:0c:ab:db:d8:c8:8e: 8c:1c:94:96:35:83:6e:92:6c:85:17:44:d9:70:f4: 7a:4a:d6:19:f1:f8:19:44:8a:01:5f:75:f5:62:c7: bf:2e:48:b6:d8:8b:6e:31:d6:34:b3:58:67:2b:62: e7:a8:3a:45:2e:ea:91:4c:dc:9f:6d:6c:ae:7f:c1: 3e:52:7a:a3:48:a9:59:2a:43:1c:23:ba:e1:ab:a9: b9:2d:e4:39:2e:a0:82:0e:b1:e3:7d:14:00:9a:45: ee:7f:ac:2a:03:ec:f1:47:f1:1c:84:f7:b3:28:c3: bf:4a:9b:b0:3c:28:8f:6b:fc:5f:60:ba:6c:57:11: 1f:d8:12:66:59:f7:d9:d6:f3:41:b3:1c:9b:a9:bd: 86:26:ed:bb:59:73:70:b4:a5:01:63:be:26:45:37: 6d:8f:ca:5f:8b:73:e8:d5:1e:e7:28:8b:fe:46:9a: c7:02:c0:92:a7:0d:93:be:6f:59:c9:64:35:c3:f4: 60:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:26:B2:13:9A:97:90:8C:FA:FA:00:CD:5C:7E:A1:1C:80:04:B1:66 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:0f:68:02:ac:2f:23:24:ca:08:bf:51:7d:13:12:c5:8e:e1: 42:01:f3:0f:29:45:b2:c4:bc:51:d2:c7:c2:f3:5f:64:6c:34: 65:bb:12:45:f7:cf:89:c5:5e:ea:42:be:b0:cf:17:88:c3:7b: c6:00:67:3f:d5:a3:5b:48:3c:26:01:8e:c6:5c:b2:1b:56:02: 72:b8:1c:ae:c5:05:c7:59:a7:af:89:03:6b:cb:c5:da:6e:b8: e9:e5:30:52:15:4b:57:3d:50:45:22:f4:6e:0c:40:6f:af:72: 9d:69:47:57:01:47:4e:ef:20:45:0d:65:73:35:c1:24:a7:9b: e2:8c:56:1e:dd:7a:b6:df:31:0c:66:52:e3:29:f0:ff:7d:45: f4:90:78:8a:a4:d5:cd:cc:19:d1:77:3d:cc:e9:61:4b:38:67: 21:e0:fc:76:8b:f7:b0:61:96:b3:98:05:5c:c6:16:c0:c2:7f: e6:e3:6c:7e:30:50:97:50:c5:88:f6:b4:37:c1:a1:ab:de:4b: d5:0b:b3:fe:83:29:ab:9d:d8:20:e8:57:67:1b:01:28:0a:60: 3d:93:8e:9d:c3:39:6a:d0:3b:b4:ca:f7:06:9e:18:fe:32:3c: cc:29:1a:44:b0:80:d8:f3:7f:c6:52:46:b7:72:08:9c:a0:47: b2:da:a3:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUwNzI1MDA0ODIzWhcNMjUwODAxMDA0ODIzWjAYMRYwFAYD VQQDEw02ODgyZDQ1Ny05NDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRaVEYHCauhfTfX3stW4yYe4Fcmw9OwbnVko0jwW3xCIgeBDi+E/tGz5CrYj x6x3j84qD65PwLpYNIL3Lpu9YLvWi2wMq9vYyI6MHJSWNYNukmyFF0TZcPR6StYZ 8fgZRIoBX3X1Yse/Lki22ItuMdY0s1hnK2LnqDpFLuqRTNyfbWyuf8E+UnqjSKlZ KkMcI7rhq6m5LeQ5LqCCDrHjfRQAmkXuf6wqA+zxR/EchPezKMO/SpuwPCiPa/xf YLpsVxEf2BJmWffZ1vNBsxybqb2GJu27WXNwtKUBY74mRTdtj8pfi3Po1R7nKIv+ RprHAsCSpw2Tvm9ZyWQ1w/RgMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcmshOa l5CM+voAzVx+oRyABLFmMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCED2gCrC8jJMoIv1F9ExLFjuFCAfMPKUWyxLxR0sfC819kbDRluxJF 98+JxV7qQr6wzxeIw3vGAGc/1aNbSDwmAY7GXLIbVgJyuByuxQXHWaeviQNry8Xa brjp5TBSFUtXPVBFIvRuDEBvr3KdaUdXAUdO7yBFDWVzNcEkp5vijFYe3Xq23zEM ZlLjKfD/fUX0kHiKpNXNzBnRdz3M6WFLOGch4Px2i/ewYZazmAVcxhbAwn/m42x+ MFCXUMWI9rQ3waGr3kvVC7P+gymrndgg6FdnGwEoCmA9k46dwzlq0Du0yvcGnhj+ MjzMKRpEsIDY83/GUka3cgicoEey2qPQ -----END CERTIFICATE-----Generated at Fri Jul 25 05:26:20 2025 by rpki-client