$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: M2ujxCYmG2NJHHsbUIePB+AwQju+ftHzA4zDODqn7Ls= Subject key identifier: 64:DB:B4:3C:47:74:B3:07:7D:2F:4D:16:8D:A5:F5:67:F4:E4:32:74 Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 019A Signing time: Sat 19 Jul 2025 03:34:52 +0000 Manifest this update: Sat 19 Jul 2025 03:34:51 +0000 Manifest next update: Sat 26 Jul 2025 03:34:51 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: 52KjX3J3GS70DU3UEdfsT1mJUwPr+bCm/UXAs/1r4pk=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: inMm5nvfP57Hl+fyHfmB7fCT1GborVKT6HpM1mM5xkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: Jul 19 03:34:51 2025 GMT Not After : Jul 26 03:34:51 2025 GMT Subject: CN=687b125b-c657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:a9:8f:8c:13:de:a2:d3:78:06:8f:cb:17: 8c:0d:83:67:45:aa:21:93:b4:c8:d8:21:0f:37:85: 31:3e:18:1a:09:5f:16:38:af:54:97:a8:c7:c2:5f: c1:b8:2b:29:ef:14:1b:be:d3:08:c8:c3:1d:e5:3f: fc:83:ce:3b:b5:e9:19:50:ff:37:79:0b:b4:17:a6: 22:64:4c:fa:c9:91:e9:0e:02:aa:37:d5:1c:b9:1e: b4:f6:58:16:a9:3d:82:4a:76:51:db:36:60:71:23: 18:fe:10:12:dd:81:b9:7f:c4:84:b0:9b:6a:46:a0: 6a:7b:03:bf:d2:03:eb:c1:04:04:a8:07:ff:79:af: 29:9f:b5:e1:a6:73:2e:d7:c6:39:11:fc:2c:2f:88: c0:a6:b2:96:da:21:9d:b0:b8:09:fc:70:0a:46:56: 43:e7:24:aa:73:f7:65:4a:af:00:4d:41:cf:49:f6: 59:27:1e:22:a5:b4:33:20:37:62:6d:36:c8:eb:ac: 34:d6:85:05:3a:f6:15:b8:82:24:9f:9b:e0:86:d7: 3b:d9:73:d2:78:95:32:60:ae:bd:c6:f6:90:e6:bc: 24:e2:69:ea:fa:cc:57:b5:b4:af:d4:98:76:3f:9c: 52:9e:19:e1:d7:79:0a:77:e5:f3:4f:12:82:b3:43: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DB:B4:3C:47:74:B3:07:7D:2F:4D:16:8D:A5:F5:67:F4:E4:32:74 X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:dc:e9:fb:89:a6:c7:fb:31:63:80:27:17:cf:83:24:6a:2f: bd:31:c8:49:de:ac:f3:59:85:1e:70:6c:dd:72:3d:5a:df:38: 28:5b:da:6f:64:0b:fd:d5:8e:8f:01:b3:1a:3b:b5:6a:1b:28: ea:a5:3a:a2:e6:16:14:57:8d:a2:47:c2:9d:cb:67:80:4d:69: 40:d7:22:b0:26:9c:b4:80:26:66:4a:1b:0a:a5:95:7a:a7:54: 07:3e:3a:76:c0:d9:7a:1b:70:af:c7:c7:87:21:02:7c:67:74: 09:fc:07:97:95:3c:19:44:2d:5b:4a:53:b2:f8:b7:e9:ac:7e: 87:4f:98:c2:f4:70:46:02:36:55:a2:72:bf:52:de:d7:bf:92: 69:7e:8e:6b:58:6a:74:d1:84:9c:8e:8c:67:7a:a9:fa:d8:fb: c9:94:34:e9:db:c9:fb:68:96:09:f7:34:64:35:bd:5f:40:f3: a6:86:85:89:15:10:0e:28:6e:af:ef:a4:4a:0a:41:cd:a2:5a: 02:16:00:f0:6a:5f:9e:83:60:8c:fd:40:14:a3:27:e5:81:ea: f2:98:9b:70:36:8a:33:1b:b9:7d:39:7c:79:8a:6a:b6:7c:60: a5:a2:38:ac:29:f0:50:97:c7:e8:04:37:84:10:08:f6:c2:aa: a9:1a:32:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjUwNzE5MDMzNDUxWhcNMjUwNzI2MDMzNDUxWjAYMRYwFAYD VQQDEw02ODdiMTI1Yi1jNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sOpj4wT3qLTeAaPyxeMDYNnRaohk7TI2CEPN4UxPhgaCV8WOK9Ul6jHwl/B uCsp7xQbvtMIyMMd5T/8g847tekZUP83eQu0F6YiZEz6yZHpDgKqN9UcuR609lgW qT2CSnZR2zZgcSMY/hAS3YG5f8SEsJtqRqBqewO/0gPrwQQEqAf/ea8pn7XhpnMu 18Y5EfwsL4jAprKW2iGdsLgJ/HAKRlZD5ySqc/dlSq8ATUHPSfZZJx4ipbQzIDdi bTbI66w01oUFOvYVuIIkn5vghtc72XPSeJUyYK69xvaQ5rwk4mnq+sxXtbSv1Jh2 P5xSnhnh13kKd+XzTxKCs0OgrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTbtDxH dLMHfS9NFo2l9Wf05DJ0MB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW3On7iabH+zFjgCcXz4Mkai+9MchJ3qzzWYUecGzdcj1a3zgoW9pv ZAv91Y6PAbMaO7VqGyjqpTqi5hYUV42iR8Kdy2eATWlA1yKwJpy0gCZmShsKpZV6 p1QHPjp2wNl6G3Cvx8eHIQJ8Z3QJ/AeXlTwZRC1bSlOy+LfprH6HT5jC9HBGAjZV onK/Ut7Xv5Jpfo5rWGp00YScjoxneqn62PvJlDTp28n7aJYJ9zRkNb1fQPOmhoWJ FRAOKG6v76RKCkHNoloCFgDwal+eg2CM/UAUoyflgerymJtwNoozG7l9OXx5imq2 fGClojisKfBQl8foBDeEEAj2wqqpGjKW -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:28 2025 by rpki-client