$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: Jodn0Brzegj0PDMQ3v2DbrjTzsRibRbTZu2xIXrhNhI= Subject key identifier: 24:D4:EE:54:87:A9:03:DF:54:42:1B:49:97:B3:85:B9:34:BB:FD:44 Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: 1C Signing time: Sat 19 Jul 2025 08:12:25 +0000 Manifest this update: Sat 19 Jul 2025 08:12:24 +0000 Manifest next update: Sat 26 Jul 2025 08:12:24 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: D4MxmpSPPusGXj2HF7WKeY00J15xN6Me/wU0cRxg2HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Jul 19 08:12:24 2025 GMT Not After : Jul 26 08:12:24 2025 GMT Subject: CN=687b5368-749d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:de:50:ca:86:97:b7:88:2c:60:5d:ac:17: aa:60:26:c7:a9:c8:4b:7a:58:94:0e:6a:79:91:86: 2a:d1:a5:31:06:9b:b2:ab:f1:e4:1e:69:37:4b:8c: 6b:78:7f:a9:62:70:4b:13:58:f6:65:2c:bf:84:47: 54:2c:f1:32:89:1a:bf:8c:1b:8e:f1:fc:1b:5b:67: 81:a3:7f:0c:e3:fe:11:2c:6b:ca:70:30:27:7d:18: de:c2:10:39:f8:ef:10:a8:cc:f8:16:38:33:53:6c: 35:d3:7b:4e:51:25:01:40:f2:3f:34:1d:be:33:a3: 45:a5:92:e2:61:b2:6b:e5:3b:83:15:eb:ca:75:7b: e9:cb:cf:1f:b5:e9:e7:e3:9a:42:79:2a:8b:a3:1f: 93:12:32:39:8d:8a:2f:ea:9f:b7:16:cb:cb:99:1e: d1:6a:9f:90:1a:8c:fd:be:f1:2f:c8:ec:30:15:11: eb:6f:fb:a7:12:ff:03:1f:79:9d:09:00:a7:4c:44: 2a:07:ee:ce:b3:46:17:e2:d9:08:27:f5:d3:93:72: 4d:34:47:df:44:14:49:24:41:33:c3:10:b8:00:52: 3e:55:b6:2b:3e:a6:1e:d5:17:69:81:82:53:73:ec: 2b:a9:e0:3f:60:92:56:ce:46:95:17:59:24:4c:4a: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D4:EE:54:87:A9:03:DF:54:42:1B:49:97:B3:85:B9:34:BB:FD:44 X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:fd:95:64:17:6f:78:4e:70:fc:ee:00:f0:17:52:e2:8e:7b: 4e:fc:e8:33:7a:2a:84:ff:7e:9c:de:30:47:57:84:85:bc:7b: 43:a6:99:1f:da:ba:0f:ef:d6:ef:f8:43:f0:69:c7:17:2d:31: 54:a4:f5:d5:3d:78:91:0d:40:1f:2f:32:30:2d:04:74:30:44: a8:9e:ea:66:db:40:e3:4c:a3:6a:8f:34:82:f5:e7:bb:5a:1e: ff:42:1c:8e:09:7f:8b:c6:c6:39:05:9b:e8:50:e7:f2:34:19: 4a:3c:f0:1c:15:4b:c7:6a:7f:45:89:2e:0c:7e:b2:2c:21:45: 8c:f9:77:43:34:ed:53:4a:8b:71:ee:f4:84:28:21:3f:d8:e0: 5a:6c:df:df:85:e3:0e:1a:f2:33:98:1a:0f:b2:fe:5a:08:cc: a3:9b:dc:a1:da:7d:ff:98:fd:0f:82:0a:38:80:93:42:d1:69: aa:e0:fc:73:c0:73:29:79:3b:ff:16:18:11:14:62:43:65:66: 6e:cd:2d:9f:52:59:77:29:d2:78:34:cb:95:18:2b:00:b0:9d: f3:d6:f2:32:eb:5c:75:b6:92:64:5b:4f:be:ee:10:f4:df:22: 6f:6a:ce:a8:f2:8c:dc:ad:13:05:1d:15:7e:0b:e8:64:b7:10: b5:53:62:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoOERFOUQwNzRGRjNDOEQ1MTU0MTVFQkYwRjBFNTZBQzAz RUVBREQzQTAeFw0yNTA3MTkwODEyMjRaFw0yNTA3MjYwODEyMjRaMBgxFjAUBgNV BAMTDTY4N2I1MzY4LTc0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCbt5QyoaXt4gsYF2sF6pgJsepyEt6WJQOanmRhirRpTEGm7Kr8eQeaTdLjGt4 f6licEsTWPZlLL+ER1Qs8TKJGr+MG47x/BtbZ4Gjfwzj/hEsa8pwMCd9GN7CEDn4 7xCozPgWODNTbDXTe05RJQFA8j80Hb4zo0WlkuJhsmvlO4MV68p1e+nLzx+16efj mkJ5KoujH5MSMjmNii/qn7cWy8uZHtFqn5AajP2+8S/I7DAVEetv+6cS/wMfeZ0J AKdMRCoH7s6zRhfi2Qgn9dOTck00R99EFEkkQTPDELgAUj5Vtis+ph7VF2mBglNz 7Cup4D9gklbORpUXWSRMSr2vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJNTuVIep A99UQhtJl7OFuTS7/UQwHwYDVR0jBBgwFoAUjenQdP88jVFUFevw8OVqwD7q3Tow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzNEOEFDNTQ2M0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamVuUWRQODhqVkZVRmV2dzhPVnF3RDdxM1RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzNEOEFDNTQ2M0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZG VUZldnc4T1Zxd0Q3cTNUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL79lWQXb3hOcPzuAPAXUuKOe0786DN6KoT/fpzeMEdXhIW8e0OmmR/a ug/v1u/4Q/BpxxctMVSk9dU9eJENQB8vMjAtBHQwRKie6mbbQONMo2qPNIL157ta Hv9CHI4Jf4vGxjkFm+hQ5/I0GUo88BwVS8dqf0WJLgx+siwhRYz5d0M07VNKi3Hu 9IQoIT/Y4Fps39+F4w4a8jOYGg+y/loIzKOb3KHaff+Y/Q+CCjiAk0LRaarg/HPA cyl5O/8WGBEUYkNlZm7NLZ9SWXcp0ng0y5UYKwCwnfPW8jLrXHW2kmRbT77uEPTf Im9qzqjyjNytEwUdFX4L6GS3ELVTYik= -----END CERTIFICATE-----Generated at Sun Jul 20 11:26:41 2025 by rpki-client