$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft File: je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json) Hash identifier: 7+ED9nvDirEysqinvs2gCzx8K2dQs2z/RglfTwJqb/w= Subject key identifier: C7:BC:08:45:5E:A8:C3:8D:5F:81:32:AB:75:95:27:01:41:EE:0F:ED Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft Manifest number: 062D Signing time: Thu 24 Jul 2025 23:04:06 +0000 Manifest this update: Thu 24 Jul 2025 23:04:05 +0000 Manifest next update: Thu 31 Jul 2025 23:04:05 +0000 Files and hashes: 1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: Hj7/aMNhewI443QBZrEgqLizcvGlDvCmUO2uuUKBNHo=) 2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: o6IdzF2JW4pdJz3buu3YPOk5TMt4Nbg8S9u/EOJTdU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Validity Not Before: Jul 24 23:04:05 2025 GMT Not After : Jul 31 23:04:05 2025 GMT Subject: CN=6882bbe5-fa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:68:d5:ab:32:44:a4:26:b7:a5:a5:5e:99: d2:c6:89:d3:83:37:a3:fe:92:16:ef:5c:e1:d4:4e: 16:92:78:89:e0:96:dc:da:f9:5b:51:02:03:4f:9a: d3:9d:d9:dc:68:1f:c5:69:44:fd:80:1a:90:b9:eb: 64:7f:e0:4f:5b:9e:01:e7:03:da:5a:5d:b8:15:54: b6:71:06:69:69:64:30:c5:9e:2b:77:7d:a2:c9:30: 15:0b:8c:7a:20:4a:3b:3b:a3:6b:fa:08:7e:f0:e3: 93:9e:d9:8e:b9:99:0b:34:d0:31:99:4e:11:fe:43: 99:be:e2:00:69:75:65:bd:18:c7:f4:e6:d9:bb:21: 17:94:c3:bb:9a:fe:fb:65:2e:c7:70:87:f4:73:2e: d3:af:11:bf:ad:e5:76:ea:d0:71:9b:75:2e:f4:e1: 8c:46:42:96:a3:57:f0:dc:6b:d9:64:ad:f1:34:80: 44:27:ff:33:1a:69:e0:1c:98:11:5e:16:b0:bf:00: b5:70:9f:39:fc:a1:26:7d:f8:67:9d:04:38:11:27: 41:38:78:a9:fe:b3:16:a7:e3:b7:9b:29:2a:89:69: 68:c0:4d:db:c7:92:4a:e2:af:42:d3:1b:a5:0e:b2: 1b:ab:16:fc:83:ac:84:73:ea:6a:fd:1f:4c:e7:24: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BC:08:45:5E:A8:C3:8D:5F:81:32:AB:75:95:27:01:41:EE:0F:ED X509v3 Authority Key Identifier: keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:20:5a:8b:41:39:99:b0:01:40:71:22:87:fb:cd:d2:d8:72: e9:5c:3d:2a:99:5a:b1:9b:19:39:17:82:78:01:15:1b:e1:8b: 34:a8:71:a6:f2:dd:fe:20:31:40:ec:b7:5c:58:00:44:81:4a: d7:27:ca:87:dd:44:aa:ba:67:c0:fb:4a:3a:05:a9:fc:91:00: e8:8a:80:51:67:5f:ad:ce:63:60:32:ce:ad:0e:8f:0e:2b:26: ab:9f:e9:de:8a:29:e7:b6:34:0a:41:37:f5:a1:a5:d8:26:e2: c6:30:e7:f1:b9:b5:45:55:13:0d:8c:74:ac:c8:ae:96:af:e9: 0c:d4:ed:e9:11:bc:14:ff:b1:a9:ea:fa:8c:23:66:e0:b7:81: 94:f6:d3:fc:eb:40:21:f5:7e:71:6f:27:4c:65:9d:da:33:78: 67:85:2e:70:77:9f:47:36:dc:94:47:15:1a:85:07:b3:c6:02: c5:13:43:81:69:a4:fc:1c:c1:a7:78:ec:ca:40:e1:3d:bf:3e: ad:8b:e7:d0:da:c9:d9:5c:d1:4a:16:73:6c:7d:1b:d2:f9:9a: b0:bb:54:56:ed:e9:dd:a5:28:47:5c:ef:cb:19:62:f8:2d:77: 7c:c5:05:89:be:cc:d4:f8:d2:d9:ba:c5:8f:70:dd:9d:cf:db: 86:88:11:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB NDVBNTdBNDQwHhcNMjUwNzI0MjMwNDA1WhcNMjUwNzMxMjMwNDA1WjAYMRYwFAYD VQQDEw02ODgyYmJlNS1mYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI5o1asyRKQmt6WlXpnSxonTgzej/pIW71zh1E4WkniJ4Jbc2vlbUQIDT5rT ndncaB/FaUT9gBqQuetkf+BPW54B5wPaWl24FVS2cQZpaWQwxZ4rd32iyTAVC4x6 IEo7O6Nr+gh+8OOTntmOuZkLNNAxmU4R/kOZvuIAaXVlvRjH9ObZuyEXlMO7mv77 ZS7HcIf0cy7TrxG/reV26tBxm3Uu9OGMRkKWo1fw3GvZZK3xNIBEJ/8zGmngHJgR XhawvwC1cJ85/KEmffhnnQQ4ESdBOHip/rMWp+O3mykqiWlowE3bx5JK4q9C0xul DrIbqxb8g6yEc+pq/R9M5yS6kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMe8CEVe qMONX4Eyq3WVJwFB7g/tMB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzlEMS8wODhDMUI0OEEyN0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4 NnM0UkxBb2VxWHVrV2xla1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRIFqLQTmZsAFAcSKH+83S2HLpXD0qmVqxmxk5F4J4ARUb4Ys0qHGm 8t3+IDFA7LdcWABEgUrXJ8qH3USqumfA+0o6Ban8kQDoioBRZ1+tzmNgMs6tDo8O Kyarn+neiinntjQKQTf1oaXYJuLGMOfxubVFVRMNjHSsyK6Wr+kM1O3pEbwU/7Gp 6vqMI2bgt4GU9tP860Ah9X5xbydMZZ3aM3hnhS5wd59HNtyURxUahQezxgLFE0OB aaT8HMGneOzKQOE9vz6ti+fQ2snZXNFKFnNsfRvS+Zqwu1RW7endpShHXO/LGWL4 LXd8xQWJvszU+NLZusWPcN2dz9uGiBEF -----END CERTIFICATE-----Generated at Fri Jul 25 07:10:29 2025 by rpki-client