$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: 194CwUqImPSvA8Pul3aFI8tZu97t09XUFLx1Bt+iVG8= Subject key identifier: 29:5A:1F:08:56:C3:CA:A0:7C:06:7E:F5:B4:59:B9:85:A4:2E:39:DB Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 34AE Signing time: Sun 20 Jul 2025 15:20:53 +0000 Manifest this update: Sun 20 Jul 2025 15:20:52 +0000 Manifest next update: Sun 27 Jul 2025 15:20:52 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: /Ndgylb9GwnOSzUZUkAGIv8dwnOOrd3wGKjJJJPx4C4=) 2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: /bwjOfOgBgzDBHXr9cFvAWkZ1AlICX8Jz/NbgeZ1nF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Jul 20 15:20:52 2025 GMT Not After : Jul 27 15:20:52 2025 GMT Subject: CN=687d0955-7c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:d8:fa:a0:37:4c:0d:e0:a4:58:09:a5:7a: 01:3f:13:d4:1f:af:cc:11:8b:91:a9:7e:1d:86:82: af:39:9d:f7:9f:f2:c8:d3:ad:8c:c6:26:d0:fa:a7: 92:e4:47:09:f5:65:14:8a:31:70:ed:8b:b0:af:7e: df:4b:55:a9:71:79:cd:33:27:e1:82:32:65:98:4d: a8:5b:5e:ed:55:12:14:8c:39:e3:8e:18:28:6a:1b: 67:98:94:25:61:c4:d2:e5:f5:d5:1d:41:9b:fb:a4: ca:53:91:1e:d7:1b:bc:cf:63:26:b7:2a:1b:89:8b: 98:82:dc:77:d0:d6:90:a9:b9:06:5c:50:24:8a:ce: 40:cc:07:a0:e9:48:5d:17:a4:10:39:0b:18:0f:b5: b4:e1:b4:fe:90:fc:7a:13:cb:05:54:67:55:4f:c1: e4:84:4f:fb:37:8e:1b:72:85:cf:15:52:e3:f3:df: 74:bb:68:e8:70:bd:91:71:de:bc:60:f3:8d:1e:8f: df:26:98:00:b6:86:92:77:40:2d:8f:ca:31:44:41: c5:08:08:28:49:55:4b:82:bd:cf:59:7e:b2:d1:0c: 7b:c8:4b:bb:54:a3:ad:51:65:1d:32:09:da:bf:53: 8c:db:74:ab:2d:ad:51:9a:69:5b:b0:23:c9:75:e8: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5A:1F:08:56:C3:CA:A0:7C:06:7E:F5:B4:59:B9:85:A4:2E:39:DB X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:59:79:f5:7a:35:bd:03:b4:6f:a9:b3:dc:4b:25:1d:3c:2e: 20:aa:9f:44:25:15:73:e2:66:b1:55:19:72:1b:13:38:f2:fb: 1a:a9:3f:27:69:ea:dc:61:ca:a2:a8:3b:25:bb:29:d8:4d:9e: ad:60:8e:9f:e5:46:91:56:8e:7d:34:0e:60:9b:fc:49:d5:15: c2:13:93:63:6d:5f:f9:6a:40:30:18:ea:91:2b:d8:a5:b3:c7: 97:f9:82:ef:66:d4:e7:7a:14:21:53:90:ed:03:69:d4:0d:da: 1d:20:bf:e3:ec:50:90:e7:e4:a0:56:cc:d1:63:46:15:8c:9e: ea:9a:ad:c8:b0:34:11:17:d9:de:4a:5b:3e:d2:e9:6a:74:26: 54:44:fb:e1:2a:81:40:41:06:79:5b:f5:b2:86:4a:8f:f3:e3: 5f:da:cb:6b:b3:82:73:b4:0d:6b:8c:b0:68:bb:1e:5c:dd:93: bd:67:ec:99:89:7d:22:77:27:83:da:9f:b3:ce:5a:f7:08:b2: 48:30:67:a2:29:45:25:06:27:5c:a3:5f:ba:d0:8d:68:40:f8: 9a:a6:94:d2:d8:00:ce:74:bd:a8:18:aa:73:b7:9b:7e:28:2a: 93:82:5b:a3:95:b6:cb:6e:f2:5c:28:01:d5:6c:31:ae:74:26: 82:86:e1:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjUwNzIwMTUyMDUyWhcNMjUwNzI3MTUyMDUyWjAYMRYwFAYD VQQDEw02ODdkMDk1NS03YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmt7Y+qA3TA3gpFgJpXoBPxPUH6/MEYuRqX4dhoKvOZ33n/LI062MxibQ+qeS 5EcJ9WUUijFw7Yuwr37fS1WpcXnNMyfhgjJlmE2oW17tVRIUjDnjjhgoahtnmJQl YcTS5fXVHUGb+6TKU5Ee1xu8z2MmtyobiYuYgtx30NaQqbkGXFAkis5AzAeg6Uhd F6QQOQsYD7W04bT+kPx6E8sFVGdVT8HkhE/7N44bcoXPFVLj8990u2jocL2Rcd68 YPONHo/fJpgAtoaSd0Atj8oxREHFCAgoSVVLgr3PWX6y0Qx7yEu7VKOtUWUdMgna v1OM23SrLa1RmmlbsCPJdehN3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClaHwhW w8qgfAZ+9bRZuYWkLjnbMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWWXn1ejW9A7RvqbPcSyUdPC4gqp9EJRVz4maxVRlyGxM48vsaqT8n aercYcqiqDsluynYTZ6tYI6f5UaRVo59NA5gm/xJ1RXCE5NjbV/5akAwGOqRK9il s8eX+YLvZtTnehQhU5DtA2nUDdodIL/j7FCQ5+SgVszRY0YVjJ7qmq3IsDQRF9ne Sls+0ulqdCZURPvhKoFAQQZ5W/WyhkqP8+Nf2strs4JztA1rjLBoux5c3ZO9Z+yZ iX0idyeD2p+zzlr3CLJIMGeiKUUlBidco1+60I1oQPiappTS2ADOdL2oGKpzt5t+ KCqTglujlbbLbvJcKAHVbDGudCaChuER -----END CERTIFICATE-----Generated at Mon Jul 21 07:38:01 2025 by rpki-client