$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: sJi8P6lc7d4sOOZ8bcNL0f/Od906EEvIzJpJgw4iwsI= Subject key identifier: 1B:CC:D2:EE:92:22:72:29:DA:E7:13:01:9D:68:21:EA:E8:24:BB:C8 Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 0707 Signing time: Sun 20 Jul 2025 22:02:23 +0000 Manifest this update: Sun 20 Jul 2025 22:02:22 +0000 Manifest next update: Sun 27 Jul 2025 22:02:22 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: dD/oOQ219/ogcanke8U13gYWjBn4aV6FueMI9+ZsupI=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: Jul 20 22:02:22 2025 GMT Not After : Jul 27 22:02:22 2025 GMT Subject: CN=687d676e-2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:13:b7:99:b8:cb:f2:36:be:5e:d0:da:88: 93:76:28:fb:3e:b4:f1:a1:a0:c4:0a:32:f5:02:6d: 1d:e7:25:9a:74:99:27:fb:c2:f6:6f:1f:36:30:cb: 41:6b:33:44:0e:c5:69:3e:ee:7f:6a:0c:df:2b:fb: 45:b1:b8:a6:15:4c:60:01:e5:2d:3c:07:dc:1f:d5: 59:ad:43:63:5e:12:18:2e:79:96:f2:c2:59:34:31: d0:83:c7:e3:26:91:5b:60:75:64:72:00:ce:bb:6f: f1:b4:03:8e:b0:26:59:07:55:7f:14:e7:bc:f9:1a: 48:b3:1a:71:d6:1f:0d:08:d2:ea:99:c6:4b:fc:bd: e1:f8:40:d4:1f:1c:d4:34:40:28:7d:8f:2b:6d:48: 0b:98:61:05:5e:5f:ef:d6:65:a2:30:b4:6a:22:7c: e4:64:38:01:3e:49:46:17:da:67:b1:52:5b:77:a7: 3a:13:86:40:44:62:4e:e7:cf:4d:fa:72:40:30:99: ac:8a:ea:7e:52:ca:de:ba:34:ce:95:94:14:f3:b5: b9:a6:a3:35:5a:90:fd:45:33:77:6c:53:93:5b:31: 8a:76:66:f7:2a:fa:25:78:77:b2:c7:c3:50:43:a0: 04:41:61:76:ff:bc:11:b4:53:1d:55:17:81:3b:59: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:D2:EE:92:22:72:29:DA:E7:13:01:9D:68:21:EA:E8:24:BB:C8 X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:21:d0:1a:f1:ff:18:3b:e6:54:c2:08:3f:10:04:df:ad:8f: 82:4e:9b:3e:f4:08:ed:cd:ae:65:0a:47:c3:2f:1d:88:12:2c: d0:f2:7e:ab:3b:1d:07:74:0b:f8:a9:87:78:a9:ff:3a:f4:0c: 46:d3:11:29:5b:84:b6:64:49:ff:3e:49:7c:1a:f5:38:1a:eb: 5c:fa:f8:3b:68:b7:03:be:f8:f9:fc:4a:aa:c3:d2:57:7a:e5: d1:e0:5f:fa:43:0e:9a:ba:12:6e:3b:fe:35:ed:c5:30:4d:be: e0:b1:0c:19:d4:38:76:d6:bd:f3:43:53:e0:1d:09:b4:4d:77: c8:dd:e6:73:1f:46:a2:54:f1:ec:0e:46:4a:10:23:ab:a6:ef: 00:46:d8:a2:13:07:54:e7:36:a3:0d:36:f1:14:6d:b2:c1:3a: c1:b4:57:4f:03:21:29:2d:21:02:ac:ba:db:ad:c6:35:07:47: f5:be:79:98:d2:82:fc:ba:93:98:9c:ee:de:da:3e:65:27:11: ac:97:fc:45:4e:4f:b9:fb:04:35:d2:09:58:d5:78:73:6f:3b: 34:51:50:a4:be:7f:73:9a:e9:84:cc:74:c4:f1:1f:97:9e:c7: 34:72:5e:a9:93:d8:10:44:b1:b7:c7:f1:32:e3:ba:60:0b:f7: d8:e8:b0:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUwNzIwMjIwMjIyWhcNMjUwNzI3MjIwMjIyWjAYMRYwFAYD VQQDEw02ODdkNjc2ZS0yNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ0Tt5m4y/I2vl7Q2oiTdij7PrTxoaDECjL1Am0d5yWadJkn+8L2bx82MMtB azNEDsVpPu5/agzfK/tFsbimFUxgAeUtPAfcH9VZrUNjXhIYLnmW8sJZNDHQg8fj JpFbYHVkcgDOu2/xtAOOsCZZB1V/FOe8+RpIsxpx1h8NCNLqmcZL/L3h+EDUHxzU NEAofY8rbUgLmGEFXl/v1mWiMLRqInzkZDgBPklGF9pnsVJbd6c6E4ZARGJO589N +nJAMJmsiup+UsreujTOlZQU87W5pqM1WpD9RTN3bFOTWzGKdmb3KvoleHeyx8NQ Q6AEQWF2/7wRtFMdVReBO1nGuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvM0u6S InIp2ucTAZ1oIeroJLvIMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATIdAa8f8YO+ZUwgg/EATfrY+CTps+9Ajtza5lCkfDLx2IEizQ8n6r Ox0HdAv4qYd4qf869AxG0xEpW4S2ZEn/Pkl8GvU4Gutc+vg7aLcDvvj5/Eqqw9JX euXR4F/6Qw6auhJuO/417cUwTb7gsQwZ1Dh21r3zQ1PgHQm0TXfI3eZzH0aiVPHs DkZKECOrpu8ARtiiEwdU5zajDTbxFG2ywTrBtFdPAyEpLSECrLrbrcY1B0f1vnmY 0oL8upOYnO7e2j5lJxGsl/xFTk+5+wQ10glY1Xhzbzs0UVCkvn9zmumEzHTE8R+X nsc0cl6pk9gQRLG3x/Ey47pgC/fY6LC7 -----END CERTIFICATE-----Generated at Mon Jul 21 07:53:15 2025 by rpki-client