$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: QGJTU0zxZVbHwa+AV+GzPUyjSfsAphgemNX95c7QdfQ= Subject key identifier: 24:0A:EE:13:A8:D2:F9:3C:9E:2E:AD:85:A2:CD:12:B9:05:15:35:A0 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0E95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0E86 Signing time: Sun 20 Jul 2025 17:43:30 +0000 Manifest this update: Sun 20 Jul 2025 17:43:29 +0000 Manifest next update: Sun 27 Jul 2025 17:43:29 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: JHxzpmpOmbVDp0aOYXJnBDMxdBbCdqgrG+HAc+c0UNg=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 8/+2CfJXmYqPi0mhCMFrcurlLwZm0SOUBFUC6aCqVwY=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: 1G+5ZDyz2QsGf1HTn6iCWFVSURJLuJWTrhUJ5NvAbhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3733 (0xe95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Jul 20 17:43:29 2025 GMT Not After : Jul 27 17:43:29 2025 GMT Subject: CN=687d2ac2-d789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:62:70:87:6f:d3:58:42:dd:83:da:61:d6: 28:04:37:27:6b:cf:2f:f1:b5:b9:e0:94:77:83:63: 0f:09:44:ce:76:f7:64:22:90:59:b2:23:d6:1b:c9: 16:28:c3:86:b8:b6:39:b6:56:40:cb:c5:5c:2b:19: 2a:4e:50:07:b7:92:2e:ab:9e:10:98:97:f1:1b:da: ed:c2:fc:87:72:aa:47:33:55:ef:63:ed:73:cf:cc: ca:d3:96:ec:da:56:f4:d6:f4:ba:76:7d:7b:70:1c: 40:b5:2a:9c:ba:5e:ff:6c:6b:f0:81:23:d2:5a:5a: 5d:65:8d:c5:34:eb:81:a6:f9:bb:3d:f9:6d:dc:12: 0b:69:73:66:7a:b5:17:ba:26:d4:42:cf:78:76:78: 54:64:cf:98:5b:3f:40:c2:cf:6c:d0:7e:ae:6f:da: e0:f1:c7:e7:dd:7f:c4:6d:9b:7d:92:08:99:e2:dd: 01:f7:57:de:db:02:a8:a0:1b:fa:c8:4b:9e:d1:f9: e8:84:0a:f4:47:f9:c3:2e:e7:94:a8:b9:2a:f6:47: 82:77:1d:83:da:47:7a:e2:f0:fc:ae:07:14:a2:30: af:2a:0c:90:45:4d:8a:3a:d3:5d:d1:4d:e3:c8:53: 60:dc:b8:fa:f6:d6:51:6c:a6:17:0d:1f:39:14:ef: 95:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0A:EE:13:A8:D2:F9:3C:9E:2E:AD:85:A2:CD:12:B9:05:15:35:A0 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:3d:66:b5:67:e7:bb:86:ea:15:d6:8f:83:9d:f5:0a:ea:c8: 86:cf:34:ff:04:cb:d2:ee:3a:46:5d:8b:8d:b4:46:70:fe:11: b4:78:34:b7:f9:7a:d7:f5:e1:f0:3d:60:7f:ed:4a:75:20:57: 4d:e4:e9:b1:10:fc:33:24:85:9c:78:2d:0d:7c:a9:30:1d:cf: fc:65:4b:f4:8e:f0:ae:93:41:8e:fb:dc:bd:9b:ca:b2:ba:7f: cd:81:20:6f:67:70:97:88:23:b9:f7:7d:1a:c5:c3:c8:c2:27: 48:94:1a:56:76:11:75:46:ba:de:b6:92:17:d3:a8:f1:5c:5c: e1:68:a4:3c:2e:40:9f:46:78:16:42:02:d2:fc:c6:66:fc:c0: 12:46:2a:50:08:05:ad:2c:1b:c3:42:40:97:a1:35:e2:fe:2f: 50:06:8b:cc:23:f3:2f:fe:1c:5b:99:73:a5:64:e9:5b:75:95: 51:4b:d8:aa:bc:ba:09:69:7e:c6:fd:1d:ed:39:5b:20:ba:f5: c2:a8:b4:7a:fc:e0:ac:78:cc:5b:a0:61:72:8a:a5:37:ae:45: 9e:d1:2c:18:c6:5c:59:dc:0b:f7:3b:47:67:19:38:c4:eb:2a: 3d:b6:13:b1:e8:58:d4:b8:cb:db:6c:17:35:84:8d:1b:fb:eb: 6b:99:5d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjUwNzIwMTc0MzI5WhcNMjUwNzI3MTc0MzI5WjAYMRYwFAYD VQQDEw02ODdkMmFjMi1kNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/licIdv01hC3YPaYdYoBDcna88v8bW54JR3g2MPCUTOdvdkIpBZsiPWG8kW KMOGuLY5tlZAy8VcKxkqTlAHt5Iuq54QmJfxG9rtwvyHcqpHM1XvY+1zz8zK05bs 2lb01vS6dn17cBxAtSqcul7/bGvwgSPSWlpdZY3FNOuBpvm7Pflt3BILaXNmerUX uibUQs94dnhUZM+YWz9Aws9s0H6ub9rg8cfn3X/EbZt9kgiZ4t0B91fe2wKooBv6 yEue0fnohAr0R/nDLueUqLkq9keCdx2D2kd64vD8rgcUojCvKgyQRU2KOtNd0U3j yFNg3Lj69tZRbKYXDR85FO+V9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQK7hOo 0vk8ni6thaLNErkFFTWgMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1PWa1Z+e7huoV1o+DnfUK6siGzzT/BMvS7jpGXYuNtEZw/hG0eDS3 +XrX9eHwPWB/7Up1IFdN5OmxEPwzJIWceC0NfKkwHc/8ZUv0jvCuk0GO+9y9m8qy un/NgSBvZ3CXiCO5930axcPIwidIlBpWdhF1RrretpIX06jxXFzhaKQ8LkCfRngW QgLS/MZm/MASRipQCAWtLBvDQkCXoTXi/i9QBovMI/Mv/hxbmXOlZOlbdZVRS9iq vLoJaX7G/R3tOVsguvXCqLR6/OCseMxboGFyiqU3rkWe0SwYxlxZ3Av3O0dnGTjE 6yo9thOx6FjUuMvbbBc1hI0b++trmV1w -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:07 2025 by rpki-client