$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: NIwKIBHxV5p0qyOarzLhgD4UmlMwxWA9f65Va4u37CY= Subject key identifier: 13:07:F7:15:CC:FA:E2:0B:B3:AF:2C:A8:22:EE:6F:C9:61:F2:36:A2 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 0787 Signing time: Tue 22 Jul 2025 21:51:51 +0000 Manifest this update: Tue 22 Jul 2025 21:51:50 +0000 Manifest next update: Tue 29 Jul 2025 21:51:50 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: wcmQzeGZAA/rrlZDEGplQNWVq7pI0tIwtybk2UVxOnI=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Jul 22 21:51:50 2025 GMT Not After : Jul 29 21:51:50 2025 GMT Subject: CN=688007f7-c914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:2f:74:39:49:14:70:a9:39:62:94:93:3b: b2:c4:f0:69:f6:8c:0b:2c:67:a4:4f:ee:49:dc:8f: e6:2b:7b:32:2b:03:ad:52:92:92:37:b9:83:bd:9a: 87:17:4c:9e:49:39:67:8b:8d:33:05:88:dd:fa:d8: 11:54:a3:12:14:34:f6:79:4b:2f:a8:25:c0:a3:b8: c6:d9:f3:3e:3a:e2:6d:37:a3:57:37:c3:7e:e8:ee: 91:b9:53:58:92:67:7b:6f:7e:52:e4:f8:d7:6f:42: 56:51:25:07:29:24:2c:ef:de:3e:48:94:34:52:d2: 62:12:97:55:f4:79:8a:89:d2:f0:d6:0f:30:fa:e6: ce:d9:7c:03:5d:17:e7:69:93:3b:cb:5b:81:67:40: a7:d5:cb:01:9c:10:15:88:cb:15:6d:8e:07:ad:d3: 99:b5:e7:0a:9e:6f:61:4c:9d:8b:f6:5e:ae:3e:c3: 09:f0:d9:c1:08:29:07:1f:31:7c:7c:59:80:14:1f: 22:d3:25:70:7c:9d:21:c7:d8:88:e5:a2:f1:f7:0d: 8b:c0:cd:cf:af:86:63:fb:32:d7:6c:e0:88:aa:38: 16:f2:8c:00:ea:4e:49:d1:b4:20:43:dc:b1:b9:bd: 03:3a:8e:52:a5:69:4e:7a:49:6a:ff:1d:7e:49:8f: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:F7:15:CC:FA:E2:0B:B3:AF:2C:A8:22:EE:6F:C9:61:F2:36:A2 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:51:2f:c3:12:a5:02:57:64:b0:04:c4:87:5e:ea:59:40:a9: 78:cd:51:a7:c5:ee:7a:2f:83:be:2c:26:89:70:94:83:22:b1: 1b:35:af:21:7f:6f:fe:4d:c4:eb:5d:bb:11:09:53:42:fd:28: d6:81:59:4c:0f:1d:2b:8f:22:e5:5c:c6:50:0c:0f:93:60:a3: 8e:86:9a:22:4b:52:63:9a:2b:ee:00:3f:9a:a5:27:54:f5:27: e5:af:7e:51:73:71:51:42:e5:a3:d7:78:a5:67:91:57:8b:93: 65:0e:43:79:14:59:df:d8:14:41:47:12:3b:b2:ad:10:d7:9f: 27:41:55:a6:f5:e2:d1:9b:d7:71:b4:e8:05:6b:58:5d:9b:34: 3a:40:db:2c:d0:77:34:d0:63:e5:61:b8:4f:e6:47:b5:39:3b: ee:02:59:5f:13:c0:f7:4b:bf:86:f4:50:97:ee:ad:d2:06:0e: 48:01:1c:1f:42:14:bd:4a:6d:b3:99:02:9d:ed:02:b1:92:11: d4:2d:7e:89:d5:2d:fc:12:24:9b:ee:98:ae:63:0e:54:7b:22: e3:a8:1b:83:28:5b:3f:65:ee:2b:a1:bc:6e:66:2a:35:8f:61: dd:6f:d9:d7:42:64:68:c5:5e:77:99:43:a4:af:db:a7:85:a7: 67:09:19:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUwNzIyMjE1MTUwWhcNMjUwNzI5MjE1MTUwWjAYMRYwFAYD VQQDEw02ODgwMDdmNy1jOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTAvdDlJFHCpOWKUkzuyxPBp9owLLGekT+5J3I/mK3syKwOtUpKSN7mDvZqH F0yeSTlni40zBYjd+tgRVKMSFDT2eUsvqCXAo7jG2fM+OuJtN6NXN8N+6O6RuVNY kmd7b35S5PjXb0JWUSUHKSQs794+SJQ0UtJiEpdV9HmKidLw1g8w+ubO2XwDXRfn aZM7y1uBZ0Cn1csBnBAViMsVbY4HrdOZtecKnm9hTJ2L9l6uPsMJ8NnBCCkHHzF8 fFmAFB8i0yVwfJ0hx9iI5aLx9w2LwM3Pr4Zj+zLXbOCIqjgW8owA6k5J0bQgQ9yx ub0DOo5SpWlOeklq/x1+SY/eUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMH9xXM +uILs68sqCLub8lh8jaiMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAUS/DEqUCV2SwBMSHXupZQKl4zVGnxe56L4O+LCaJcJSDIrEbNa8h f2/+TcTrXbsRCVNC/SjWgVlMDx0rjyLlXMZQDA+TYKOOhpoiS1JjmivuAD+apSdU 9Sflr35Rc3FRQuWj13ilZ5FXi5NlDkN5FFnf2BRBRxI7sq0Q158nQVWm9eLRm9dx tOgFa1hdmzQ6QNss0Hc00GPlYbhP5ke1OTvuAllfE8D3S7+G9FCX7q3SBg5IARwf QhS9Sm2zmQKd7QKxkhHULX6J1S38EiSb7piuYw5UeyLjqBuDKFs/Ze4robxuZio1 j2Hdb9nXQmRoxV53mUOkr9unhadnCRnl -----END CERTIFICATE-----Generated at Wed Jul 23 05:26:09 2025 by rpki-client