$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: jt+5K25KNspnZeiH5OFfDWDFIBDBy42tw//9/IBlveE= Subject key identifier: C1:CF:2F:E9:AF:17:D2:94:93:1C:E8:73:3C:78:5D:54:26:A0:71:7B Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 012C Signing time: Sat 19 Jul 2025 04:51:12 +0000 Manifest this update: Sat 19 Jul 2025 04:51:11 +0000 Manifest next update: Sat 26 Jul 2025 04:51:11 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: puQM9NG5HpNrQmrwyo7qGlylH29eBDlkOwkP1gL31xc=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Jul 19 04:51:11 2025 GMT Not After : Jul 26 04:51:11 2025 GMT Subject: CN=687b2440-a1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:00:e9:77:4a:b3:fa:54:3e:31:dd:a0:f9: 8a:f5:fa:4a:75:c2:f0:63:70:f8:6d:e0:c8:47:2e: 28:83:9e:1d:cf:bc:21:cf:d5:60:9c:96:65:ba:cf: 71:e3:0c:4e:45:7c:5c:4c:72:66:2e:61:77:e1:86: 48:71:b8:94:2d:64:a3:c8:cc:74:82:03:b4:69:8b: 94:7d:2e:f7:c4:b7:1f:74:ee:65:0d:f7:99:7c:fd: af:3c:c7:e4:87:4d:71:4e:ff:07:cc:52:35:5c:52: e3:9b:f8:90:d7:65:48:70:ed:9b:56:32:eb:22:c7: bd:04:2e:27:52:73:e4:46:28:22:a0:de:08:67:80: 6e:c9:7c:f6:1a:6a:86:8b:eb:db:7b:97:b1:97:5c: cc:f6:44:6c:2e:17:b9:95:45:47:74:77:b2:4c:c5: 1a:e8:ca:2a:df:d4:46:66:b2:c2:c7:71:ef:23:cf: d4:c1:2d:8a:88:ca:0a:51:2b:22:99:3e:c2:95:43: 73:20:a2:25:72:ab:d5:02:ca:38:54:5f:9b:f3:3d: e3:67:42:06:dc:9e:45:3b:c4:7f:7f:22:43:c2:8f: aa:8b:8b:56:2b:84:c9:0d:78:9b:d3:cd:9c:20:24: fb:93:e9:d4:05:ad:16:02:aa:44:40:fe:9d:b6:ac: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CF:2F:E9:AF:17:D2:94:93:1C:E8:73:3C:78:5D:54:26:A0:71:7B X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ab:ed:98:ff:21:91:c8:0c:86:54:48:f3:82:f3:da:dc:ec: d9:14:96:f4:a9:62:21:75:99:3a:af:16:17:cb:a4:c4:6f:94: 3d:4a:89:f6:99:c0:63:6a:fa:a6:79:f1:09:97:1d:d0:c2:1e: 97:90:73:7a:58:b7:0d:d8:b4:a3:d8:c0:44:b7:a3:b9:95:e2: b1:b5:c3:81:6a:05:14:24:43:92:a0:ff:6c:26:56:45:cc:4f: 73:01:28:b5:3f:27:57:d1:47:37:89:f0:17:f2:02:9a:56:24: b4:c1:d9:1c:57:6e:06:4c:36:c0:2d:b4:9c:95:2c:76:41:99: 75:9b:17:44:6a:ea:a8:2c:83:c5:07:51:a0:4d:1b:ea:23:32: 53:f2:3a:cb:a6:42:f9:62:ab:b2:54:6b:1f:cc:ad:17:b9:a6: fc:50:a7:4d:c3:03:4c:03:ee:c8:20:3f:87:bb:dd:6f:fd:cd: 41:6b:51:18:51:c2:49:2d:68:b8:d9:c8:d2:19:3f:ff:96:6d: 34:5b:76:21:e3:c9:9a:82:11:5a:37:50:eb:e1:e2:4b:5e:71: 8a:60:55:76:17:65:9b:35:78:e7:8f:28:31:20:03:a0:f7:75: a1:8d:12:07:5d:6c:0b:79:fc:f3:34:d3:6b:64:c6:ac:85:8e: 1e:45:19:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUwNzE5MDQ1MTExWhcNMjUwNzI2MDQ1MTExWjAYMRYwFAYD VQQDEw02ODdiMjQ0MC1hMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQIA6XdKs/pUPjHdoPmK9fpKdcLwY3D4beDIRy4og54dz7whz9VgnJZlus9x 4wxORXxcTHJmLmF34YZIcbiULWSjyMx0ggO0aYuUfS73xLcfdO5lDfeZfP2vPMfk h01xTv8HzFI1XFLjm/iQ12VIcO2bVjLrIse9BC4nUnPkRigioN4IZ4BuyXz2GmqG i+vbe5exl1zM9kRsLhe5lUVHdHeyTMUa6Moq39RGZrLCx3HvI8/UwS2KiMoKUSsi mT7ClUNzIKIlcqvVAso4VF+b8z3jZ0IG3J5FO8R/fyJDwo+qi4tWK4TJDXib082c ICT7k+nUBa0WAqpEQP6dtqwE0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHPL+mv F9KUkxzoczx4XVQmoHF7MB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjq+2Y/yGRyAyGVEjzgvPa3OzZFJb0qWIhdZk6rxYXy6TEb5Q9Son2 mcBjavqmefEJlx3Qwh6XkHN6WLcN2LSj2MBEt6O5leKxtcOBagUUJEOSoP9sJlZF zE9zASi1PydX0Uc3ifAX8gKaViS0wdkcV24GTDbALbSclSx2QZl1mxdEauqoLIPF B1GgTRvqIzJT8jrLpkL5YquyVGsfzK0Xuab8UKdNwwNMA+7IID+Hu91v/c1Ba1EY UcJJLWi42cjSGT//lm00W3Yh48maghFaN1Dr4eJLXnGKYFV2F2WbNXjnjygxIAOg 93WhjRIHXWwLefzzNNNrZMashY4eRRn+ -----END CERTIFICATE-----Generated at Sun Jul 20 10:00:21 2025 by rpki-client