$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: 57hgQISvdsxBHaCvtIickDwI++YQYlPHDlv4cXbYqQc= Subject key identifier: 4F:4D:78:23:10:0B:4A:97:34:99:AE:2D:07:5B:DF:F5:E7:B7:6D:6E Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 0147 Signing time: Sat 19 Jul 2025 04:29:37 +0000 Manifest this update: Sat 19 Jul 2025 04:29:36 +0000 Manifest next update: Sat 26 Jul 2025 04:29:36 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: XBnZxjdoX4fm7j2r/Hpng04NCcrhrJD05egI9fXKcKQ=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: fsgwXlrQI8Xf5Rjyp/4eVuAgbFz37cGdGAMKHjxGUCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Jul 19 04:29:36 2025 GMT Not After : Jul 26 04:29:36 2025 GMT Subject: CN=687b1f31-0bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:69:7b:f2:e1:18:34:8e:8e:a4:c9:d5:ff: 1a:ab:9c:78:c6:52:ef:3b:94:b2:2c:e4:ab:37:fa: e7:d8:32:d8:f9:02:2f:3c:ee:75:d2:82:6b:d8:48: e1:36:94:11:36:17:13:f0:c4:6c:55:36:5e:14:ca: b1:20:be:91:9d:43:4c:ea:4a:76:5a:4c:39:43:1c: 01:26:76:21:e3:39:be:9f:64:c3:c2:a2:fb:54:9a: f2:61:0a:e5:2d:7f:e6:8f:fb:dc:a0:34:39:02:67: 8d:3c:7b:03:a6:38:19:4a:95:ac:cc:ac:80:65:69: 19:14:c7:4b:bd:46:3d:de:8a:48:a9:74:ba:67:b7: f8:d9:af:20:61:ca:99:03:c3:5c:ef:e8:84:a8:9a: 39:b2:62:0c:33:1a:5e:bf:99:46:cd:1f:01:2f:e6: 1e:3d:a9:23:8e:e7:f9:40:ac:8d:92:20:68:43:ac: c3:34:03:2a:0e:27:f8:16:4e:f0:22:67:74:e5:96: da:51:3e:45:4c:d3:e9:8e:6a:2c:24:40:f5:bc:32: 36:80:81:c3:cd:8d:15:27:6b:e7:59:4a:a0:6f:3e: 26:3b:2f:eb:7d:22:55:d7:cc:0f:af:54:b9:bd:c7: 58:d4:8b:06:76:db:40:c2:48:9c:57:82:1d:b9:bb: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4D:78:23:10:0B:4A:97:34:99:AE:2D:07:5B:DF:F5:E7:B7:6D:6E X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:1f:e6:b7:de:01:04:f3:a7:35:ce:db:6a:2d:29:96:03: fc:7d:b8:5f:24:9b:cc:49:3e:e1:09:e3:28:d0:de:3f:7c:14: ff:87:46:b4:3a:f3:02:2e:07:3a:6b:6d:9c:35:d7:68:99:53: a6:e1:b1:2c:62:60:20:53:03:78:b0:c1:ed:6d:8b:2a:80:9b: a5:1f:eb:eb:9c:43:b1:bb:02:dc:70:b0:78:1c:b2:d7:f0:9b: a2:28:50:95:bd:dd:bd:c3:57:67:e0:7e:6a:12:92:fc:39:0b: 9b:4f:48:90:3f:a8:2c:41:13:54:3f:fe:d8:c0:bd:6b:3c:ca: a0:54:26:98:5a:03:01:5c:25:44:58:54:aa:ca:43:85:7f:e7: 36:cb:db:71:2a:bb:52:c3:22:98:26:84:80:ef:76:e7:f2:db: 1b:97:d9:2e:f1:db:b6:e1:e9:45:c9:af:9c:03:68:a5:0a:c0: cf:3c:bb:3a:59:70:48:a8:a9:21:32:fe:13:3d:13:63:cc:ef: a6:e5:4f:ea:00:ca:ba:66:0c:a5:80:93:1d:6c:b6:b2:e8:dd: 07:2b:0b:29:6f:8e:db:fc:dc:6b:b9:12:83:e0:17:a4:03:33: b2:d7:84:de:d8:76:d0:e9:c8:d5:9e:91:ac:82:9e:45:6c:80: 9a:ef:55:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUwNzE5MDQyOTM2WhcNMjUwNzI2MDQyOTM2WjAYMRYwFAYD VQQDEw02ODdiMWYzMS0wYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P9pe/LhGDSOjqTJ1f8aq5x4xlLvO5SyLOSrN/rn2DLY+QIvPO510oJr2Ejh NpQRNhcT8MRsVTZeFMqxIL6RnUNM6kp2Wkw5QxwBJnYh4zm+n2TDwqL7VJryYQrl LX/mj/vcoDQ5AmeNPHsDpjgZSpWszKyAZWkZFMdLvUY93opIqXS6Z7f42a8gYcqZ A8Nc7+iEqJo5smIMMxpev5lGzR8BL+YePakjjuf5QKyNkiBoQ6zDNAMqDif4Fk7w Imd05ZbaUT5FTNPpjmosJED1vDI2gIHDzY0VJ2vnWUqgbz4mOy/rfSJV18wPr1S5 vcdY1IsGdttAwkicV4IdubsjVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9NeCMQ C0qXNJmuLQdb3/Xnt21uMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAox/mt94BBPOnNc7bai0plgP8fbhfJJvMST7hCeMo0N4/fBT/h0a0 OvMCLgc6a22cNddomVOm4bEsYmAgUwN4sMHtbYsqgJulH+vrnEOxuwLccLB4HLLX 8JuiKFCVvd29w1dn4H5qEpL8OQubT0iQP6gsQRNUP/7YwL1rPMqgVCaYWgMBXCVE WFSqykOFf+c2y9txKrtSwyKYJoSA73bn8tsbl9ku8du24elFya+cA2ilCsDPPLs6 WXBIqKkhMv4TPRNjzO+m5U/qAMq6ZgylgJMdbLay6N0HKwspb47b/NxruRKD4Bek AzOy14Te2HbQ6cjVnpGsgp5FbICa71Vo -----END CERTIFICATE-----Generated at Sun Jul 20 02:04:06 2025 by rpki-client