$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: yFLWbThoJ8uBNV5AoeybgjvJAPSULSZoKRKNhn0X1xY= Subject key identifier: 8F:44:8C:61:A3:BE:C4:F5:DA:CB:FF:7E:E4:AA:E6:EE:69:F8:FC:9D Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 0698 Signing time: Fri 18 Jul 2025 22:29:12 +0000 Manifest this update: Fri 18 Jul 2025 22:29:11 +0000 Manifest next update: Fri 25 Jul 2025 22:29:11 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: c7BNtSbQO1t3fDAmHTu8J/RvzGGcX2PiI1Cq0ckr2zM=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Jul 18 22:29:11 2025 GMT Not After : Jul 25 22:29:11 2025 GMT Subject: CN=687acab8-a9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:bf:f8:65:13:55:9d:2a:5e:a8:dc:29:87: 5e:64:db:c2:22:f8:3f:3c:b8:23:f4:0c:a8:05:72: 9c:09:a7:92:72:44:7a:3b:2d:bf:0a:82:9b:f2:43: e1:6b:e8:6d:23:3b:ff:4e:b0:9d:9e:65:ac:a7:95: 2b:bb:70:23:ae:e1:dc:81:b2:b1:71:7e:57:04:01: e9:42:53:62:91:8d:d2:c2:26:00:dd:b6:0e:d3:bc: bd:e2:cc:e6:66:77:9e:dd:36:cf:f8:a6:35:6f:2d: 64:5d:7e:5c:c9:75:c5:6d:51:02:5c:7d:b5:2e:be: 96:ce:32:8a:71:c5:6f:8c:13:9c:11:32:90:22:5c: dc:3e:54:75:1c:d7:05:36:38:f5:37:f7:db:87:71: 9d:ae:a1:18:ff:46:dc:11:0b:02:15:0b:69:b9:d8: 14:99:5a:1c:15:7c:24:6a:4b:e5:21:03:f0:35:85: 00:f1:1d:ad:81:00:7c:73:7a:6e:4e:a2:6c:be:4e: 8c:99:c5:fa:6d:9e:03:11:68:23:fd:15:dc:a9:3d: ea:86:a3:bc:e7:8b:aa:9f:5a:5e:99:11:64:e4:c6: e4:c6:80:5c:c0:47:cc:c4:88:ec:44:0a:97:b2:ad: 96:e7:72:bc:1b:f2:65:61:09:eb:6f:87:89:33:97: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:44:8C:61:A3:BE:C4:F5:DA:CB:FF:7E:E4:AA:E6:EE:69:F8:FC:9D X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f3:3c:ae:4e:83:8a:34:e7:91:ea:eb:1d:7f:61:11:5e:8b: d7:0c:f4:f1:d6:12:39:3c:9c:1d:e7:e6:28:8a:91:84:08:06: ea:ba:09:6d:7a:e9:97:c6:6f:cc:b1:3e:d2:0e:47:71:65:f7: c0:42:f9:9e:22:61:8e:82:64:16:95:61:95:d0:2d:f3:b7:9d: 13:70:80:15:89:4a:bd:8c:c9:73:5f:59:0a:7c:a8:e0:9d:62: 98:0b:c7:06:9a:1c:f3:75:a2:c7:cb:15:a2:5a:e7:d5:a6:2e: 3e:19:50:6d:3a:80:07:ab:62:92:39:6c:8a:9f:c6:e5:42:fd: 53:16:7f:fe:f3:57:18:6f:fc:0f:ec:20:3e:6a:5a:47:8d:28: 15:e2:80:6a:8b:9b:7b:a3:7c:d4:ed:99:ec:b7:9c:8b:29:26: 54:d1:bd:5f:34:fc:4f:f4:07:4e:ab:37:f0:53:f6:60:84:9a: dd:20:5c:a9:94:9a:fb:f4:7d:6d:7a:3c:01:94:cf:0c:ac:3e: 6a:9f:0a:a3:78:e8:3b:c3:c4:7b:e2:5a:5c:2d:13:d1:fe:bf: 35:7f:8b:02:5e:6b:61:8f:29:50:64:db:e8:d9:8e:08:60:b3: 63:01:d1:c4:75:d2:3b:a5:e2:40:83:ac:df:07:d7:37:b1:c4: d7:74:c3:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUwNzE4MjIyOTExWhcNMjUwNzI1MjIyOTExWjAYMRYwFAYD VQQDEw02ODdhY2FiOC1hOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWW/+GUTVZ0qXqjcKYdeZNvCIvg/PLgj9AyoBXKcCaeSckR6Oy2/CoKb8kPh a+htIzv/TrCdnmWsp5Uru3AjruHcgbKxcX5XBAHpQlNikY3SwiYA3bYO07y94szm Znee3TbP+KY1by1kXX5cyXXFbVECXH21Lr6WzjKKccVvjBOcETKQIlzcPlR1HNcF Njj1N/fbh3GdrqEY/0bcEQsCFQtpudgUmVocFXwkakvlIQPwNYUA8R2tgQB8c3pu TqJsvk6MmcX6bZ4DEWgj/RXcqT3qhqO854uqn1pemRFk5MbkxoBcwEfMxIjsRAqX sq2W53K8G/JlYQnrb4eJM5c3twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9EjGGj vsT12sv/fuSq5u5p+PydMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+8zyuToOKNOeR6usdf2ERXovXDPTx1hI5PJwd5+YoipGECAbquglt eumXxm/MsT7SDkdxZffAQvmeImGOgmQWlWGV0C3zt50TcIAViUq9jMlzX1kKfKjg nWKYC8cGmhzzdaLHyxWiWufVpi4+GVBtOoAHq2KSOWyKn8blQv1TFn/+81cYb/wP 7CA+alpHjSgV4oBqi5t7o3zU7Znst5yLKSZU0b1fNPxP9AdOqzfwU/ZghJrdIFyp lJr79H1tejwBlM8MrD5qnwqjeOg7w8R74lpcLRPR/r81f4sCXmthjylQZNvo2Y4I YLNjAdHEddI7peJAg6zfB9c3scTXdMOB -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:21 2025 by rpki-client