$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: PL6d+KrlQAwBzKhORpGIyb5TlDEWcuMjq6WxxWvw8wg= Subject key identifier: 66:F2:1B:FB:97:1F:B5:2D:DF:D6:68:A3:A9:9C:AA:39:0F:B6:5B:D7 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 85 Signing time: Sat 19 Jul 2025 06:50:56 +0000 Manifest this update: Sat 19 Jul 2025 06:50:55 +0000 Manifest next update: Sat 26 Jul 2025 06:50:55 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: 2akbrtuuSCsMVuXQss1hkctjhcIHWgVv4jDDjnm54hY=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Jul 19 06:50:55 2025 GMT Not After : Jul 26 06:50:55 2025 GMT Subject: CN=687b4050-b89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:1d:c7:c0:e0:f0:52:e8:44:86:50:3d:1f: b5:08:61:d1:66:5c:3b:19:13:fb:7f:76:3a:42:26: 23:cd:e5:93:b7:0e:86:9e:0b:98:f5:dc:00:77:09: fc:8b:00:2f:a3:bc:df:e2:98:c1:14:e3:bb:1c:15: 76:f7:39:3a:16:e5:2e:b1:20:8e:a4:74:94:8a:57: 34:9c:95:25:09:30:e4:cd:b0:8a:94:7f:9e:17:19: d1:e5:45:6c:b0:75:e9:c7:5b:e8:5c:ea:dc:03:5b: e7:0f:a5:fa:67:f3:6a:f4:01:bb:b9:75:f6:30:a6: 5f:70:62:82:9b:c7:10:1a:15:1e:59:40:df:42:20: 33:85:65:b7:19:1b:a1:92:1b:96:5a:52:7b:e0:89: 73:43:8b:cf:13:9b:ea:00:87:04:04:79:0f:a0:f1: b3:91:9b:d0:f8:d2:52:14:9d:42:ed:69:1c:ce:ee: 37:6a:59:08:69:e8:a0:aa:1c:26:71:8e:6e:d4:b7: 1e:b8:54:ec:bc:27:37:3d:c3:cb:1f:f0:5e:31:ca: 39:05:b6:45:4a:58:3a:1b:83:55:c9:5b:25:fa:55: 71:95:43:bc:08:b7:47:bc:c1:ab:86:f1:ae:42:12: fd:a5:20:b7:08:8f:2f:5d:18:18:19:5a:12:2f:37: 67:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F2:1B:FB:97:1F:B5:2D:DF:D6:68:A3:A9:9C:AA:39:0F:B6:5B:D7 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:51:0d:50:23:14:db:30:7f:67:aa:30:c0:bc:d2:c0:2e:84: b3:3f:34:62:fa:6b:c3:38:d0:ce:2c:74:5b:09:29:7a:ae:01: 67:59:fb:fe:f7:c9:57:f6:95:e2:73:f0:23:41:b1:19:4c:7e: 75:17:2f:50:16:8d:4c:49:13:48:c3:f7:65:a6:9f:b8:82:7b: a5:7d:08:dc:e0:ca:02:b0:c1:88:38:e5:03:22:d5:19:e7:5f: a2:f4:53:55:19:0f:ba:b5:07:30:29:8b:b2:dc:64:43:db:79: d9:14:17:d8:60:9d:0d:d8:ee:24:a1:15:bb:12:92:af:c2:9c: 22:0f:0c:32:2b:38:4c:7a:38:65:3e:82:38:c6:51:f1:62:ed: b5:e1:1f:96:b3:08:32:fd:d7:70:f6:7b:ca:0a:b2:79:4b:3c: 9d:f6:89:1b:21:92:9f:4e:58:84:a2:60:f0:33:39:77:92:7c: 3d:82:c0:ac:29:1e:f7:4c:ea:ce:87:92:ee:0a:d5:af:25:80: 6e:25:3d:cc:78:7c:77:ce:69:2c:70:f9:c7:18:b6:67:dd:29: a4:00:4b:b7:72:13:f6:20:c9:10:5d:6e:e7:45:1d:11:f6:1e: 93:a0:83:53:05:55:18:51:d5:67:7e:ca:c5:64:95:99:1b:39: 27:52:cf:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDNkExMTAvBgNVBAUTKDQ0OUQwN0RBOTIwREEwMjYzNDJCRjZFMjY4OUNDN0Uw RjBBM0NBRkMwHhcNMjUwNzE5MDY1MDU1WhcNMjUwNzI2MDY1MDU1WjAYMRYwFAYD VQQDEw02ODdiNDA1MC1iODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbAdx8Dg8FLoRIZQPR+1CGHRZlw7GRP7f3Y6QiYjzeWTtw6GnguY9dwAdwn8 iwAvo7zf4pjBFOO7HBV29zk6FuUusSCOpHSUilc0nJUlCTDkzbCKlH+eFxnR5UVs sHXpx1voXOrcA1vnD6X6Z/Nq9AG7uXX2MKZfcGKCm8cQGhUeWUDfQiAzhWW3GRuh khuWWlJ74IlzQ4vPE5vqAIcEBHkPoPGzkZvQ+NJSFJ1C7Wkczu43alkIaeigqhwm cY5u1LceuFTsvCc3PcPLH/BeMco5BbZFSlg6G4NVyVsl+lVxlUO8CLdHvMGrhvGu QhL9pSC3CI8vXRgYGVoSLzdnYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbyG/uX H7Ut39Zoo6mcqjkPtlvXMB8GA1UdIwQYMBaAFESdB9qSDaAmNCv24micx+Dwo8r8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUM2QS85MDY2MkVCNjlD MEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9DWTBLX2JpYUp6SDRQQ2p5 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUM2QS85MDY2MkVCNjlDMEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9D WTBLX2JpYUp6SDRQQ2p5dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMUQ1QIxTbMH9nqjDAvNLALoSzPzRi+mvDONDOLHRbCSl6rgFnWfv+ 98lX9pXic/AjQbEZTH51Fy9QFo1MSRNIw/dlpp+4gnulfQjc4MoCsMGIOOUDItUZ 51+i9FNVGQ+6tQcwKYuy3GRD23nZFBfYYJ0N2O4koRW7EpKvwpwiDwwyKzhMejhl PoI4xlHxYu214R+Wswgy/ddw9nvKCrJ5Szyd9okbIZKfTliEomDwMzl3knw9gsCs KR73TOrOh5LuCtWvJYBuJT3MeHx3zmkscPnHGLZn3SmkAEu3chP2IMkQXW7nRR0R 9h6ToINTBVUYUdVnfsrFZJWZGzknUs/V -----END CERTIFICATE-----Generated at Sun Jul 20 07:01:54 2025 by rpki-client