$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: I8lqUv4DjOmRVBVe7e17b56DIiYRGeerZfwMite96uk= Subject key identifier: CA:8B:41:2B:1C:90:26:BA:48:97:A7:BD:29:D2:83:27:6E:A2:C5:C7 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 02A3 Signing time: Wed 23 Jul 2025 02:01:19 +0000 Manifest this update: Wed 23 Jul 2025 02:01:19 +0000 Manifest next update: Wed 30 Jul 2025 02:01:19 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: N9dgtdJKwBv/+3/U3SiKVEjwY74vqC7qjsC7glkt7yE=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Jul 23 02:01:19 2025 GMT Not After : Jul 30 02:01:19 2025 GMT Subject: CN=6880426f-1584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:b9:97:c4:a6:f9:c6:65:57:00:c5:b0:9c: 76:f5:0a:77:e9:9a:76:ff:bd:71:21:cd:c9:25:07: 75:94:6e:67:73:5a:cd:8a:58:b9:73:36:16:5d:e7: 4b:11:c0:5c:9f:1e:1d:db:dc:bc:cb:03:21:8a:e5: 3a:e3:9e:d2:10:5f:5e:fc:bd:80:cd:36:22:47:d7: c4:32:27:ad:57:f5:d7:70:87:64:c6:a6:ee:cc:d5: b1:34:ce:23:2d:e8:95:75:aa:da:f2:1e:46:a8:97: 1e:26:59:0c:ce:aa:7e:67:c6:fb:99:e9:f3:de:89: 85:20:1f:37:ef:ef:9d:33:27:34:89:c2:fd:00:8a: 81:e3:02:97:f0:62:8e:43:19:87:a7:23:27:d6:ed: 7e:54:cf:0e:12:fb:c8:3c:c5:10:8b:6b:5e:e0:f2: 65:9a:76:59:1a:55:29:a6:9b:2b:1b:bb:50:5a:99: 08:4f:df:4b:86:6a:53:fc:e4:9e:2d:ae:4d:49:7e: 40:fe:d7:35:79:11:d7:a9:63:4a:bb:21:c1:80:f8: e9:37:61:c3:3d:43:7a:c6:f9:d1:73:7c:0a:d4:a4: 2b:36:ed:1f:30:3e:d8:0e:5e:88:e7:e0:85:4d:1c: ce:d2:f9:fd:f3:04:fa:25:11:a5:46:1c:ea:5a:0f: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:41:2B:1C:90:26:BA:48:97:A7:BD:29:D2:83:27:6E:A2:C5:C7 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption fc:70:ea:c0:ca:d5:01:c8:ce:b9:6f:73:31:ad:26:f7:0b:2d: a3:42:88:9d:99:fe:6c:68:95:f3:47:a0:18:01:66:b2:d6:91: 9c:2f:68:e6:33:9d:66:81:76:fb:e6:1f:c9:dc:6d:17:ea:aa: 86:76:ec:9b:cf:ed:c0:68:5a:81:b0:66:0d:24:23:79:1e:a2: aa:4b:60:3a:df:a7:b9:64:09:1c:88:1a:7f:bc:c2:12:ea:11: bd:ac:5c:e0:92:ba:4f:9b:dd:bc:82:1f:4c:7f:a8:88:31:49: 05:d4:10:c5:23:41:de:88:15:68:90:0a:17:61:3f:05:92:0b: 85:2a:ad:b4:d8:68:28:8c:b8:70:73:be:8e:3a:2d:8d:eb:1f: 4a:ab:fd:27:90:5c:cb:91:8d:75:4e:3d:ea:d0:00:85:e9:dc: 01:3e:0e:24:dd:f4:c5:a2:32:95:b2:09:2a:8b:ba:05:94:1f: 31:a5:7e:e6:8b:73:af:31:c3:85:ed:17:8d:ea:46:07:92:30: 73:ac:0c:fc:3c:23:c9:2f:55:71:ba:47:b8:7c:00:2b:3d:ee: 99:4a:91:fb:07:fd:ad:f9:c3:21:f8:46:f1:37:1f:e2:07:be: eb:37:4b:7c:35:85:72:e6:18:7f:85:07:68:0a:4d:7b:89:12: f9:03:7a:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUwNzIzMDIwMTE5WhcNMjUwNzMwMDIwMTE5WjAYMRYwFAYD VQQDEw02ODgwNDI2Zi0xNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweO5l8Sm+cZlVwDFsJx29Qp36Zp2/71xIc3JJQd1lG5nc1rNili5czYWXedL EcBcnx4d29y8ywMhiuU6457SEF9e/L2AzTYiR9fEMietV/XXcIdkxqbuzNWxNM4j LeiVdara8h5GqJceJlkMzqp+Z8b7menz3omFIB837++dMyc0icL9AIqB4wKX8GKO QxmHpyMn1u1+VM8OEvvIPMUQi2te4PJlmnZZGlUpppsrG7tQWpkIT99LhmpT/OSe La5NSX5A/tc1eRHXqWNKuyHBgPjpN2HDPUN6xvnRc3wK1KQrNu0fMD7YDl6I5+CF TRzO0vn98wT6JRGlRhzqWg8JPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqLQSsc kCa6SJenvSnSgyduosXHMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD8cOrAytUByM65b3MxrSb3Cy2jQoidmf5saJXzR6AYAWay1pGcL2jm M51mgXb75h/J3G0X6qqGduybz+3AaFqBsGYNJCN5HqKqS2A636e5ZAkciBp/vMIS 6hG9rFzgkrpPm928gh9Mf6iIMUkF1BDFI0HeiBVokAoXYT8FkguFKq202GgojLhw c76OOi2N6x9Kq/0nkFzLkY11Tj3q0ACF6dwBPg4k3fTFojKVsgkqi7oFlB8xpX7m i3OvMcOF7ReN6kYHkjBzrAz8PCPJL1Vxuke4fAArPe6ZSpH7B/2t+cMh+EbxNx/i B77rN0t8NYVy5hh/hQdoCk17iRL5A3om -----END CERTIFICATE-----Generated at Wed Jul 23 05:35:17 2025 by rpki-client