$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: qPIZJNKbiC00Sq0SrwbD8fQi2mU0FulvRwgLGgzCADs= Subject key identifier: D0:A2:69:E4:55:B7:8D:79:B1:C6:1C:D2:E0:8B:2A:21:68:F4:71:37 Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: 56 Signing time: Mon 21 Jul 2025 07:28:23 +0000 Manifest this update: Mon 21 Jul 2025 07:28:23 +0000 Manifest next update: Mon 28 Jul 2025 07:28:22 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: JhqklzgPDCrdFEpBBNRy2l7/rihiqqUC5/28yGKCEXI=) 2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: FoDHZvXeH5e/XFJzf3AymBW0SIuGnIL2DXJhgfsRixg=) 3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: 8SOJ6SdOtJ/q3NwLkWGRY6LjHM44wHGZjzKG2cwDOuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: Jul 21 07:28:23 2025 GMT Not After : Jul 28 07:28:22 2025 GMT Subject: CN=687dec17-d2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:9b:45:56:32:fc:05:ad:4c:3e:bc:b5:1f: b9:d1:59:27:34:80:3d:ab:9d:63:77:0a:0b:c9:b6: ce:c8:2c:f6:d4:bc:30:a8:9b:22:aa:5e:7a:00:5f: 9c:01:d9:e8:f5:7e:df:d3:17:7c:97:d0:7e:dd:b9: d3:fc:d2:0c:61:8a:c2:c0:56:43:33:8a:28:3c:3a: de:d0:2a:4e:a5:27:63:de:f1:50:c1:a8:a4:29:ad: 38:75:52:c8:3f:06:f9:84:15:ba:e8:07:59:33:ac: c5:54:18:67:38:df:21:f5:42:a7:a0:f9:ed:db:2c: 78:83:e9:25:d5:eb:df:da:36:10:8e:83:7b:d5:82: 15:c8:5e:86:3a:61:20:13:a0:29:ec:e3:41:41:5a: 32:e0:f1:fe:8c:0e:7e:ed:aa:61:d7:59:d3:f4:47: f0:f5:0d:c8:22:4c:7a:98:15:26:6b:01:ef:77:86: 8b:1f:b5:38:dc:18:4a:c1:55:e0:27:e2:66:34:46: c0:40:09:1b:94:44:ba:cd:53:c1:47:e8:02:34:83: 1f:6f:9c:3d:d9:9c:57:62:db:03:06:07:15:42:b1: ba:b4:ec:c9:1b:68:bf:bf:d1:0b:a3:62:d7:c5:75: d7:78:04:d2:82:4f:15:08:1a:68:6e:cb:e7:5b:b1: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A2:69:E4:55:B7:8D:79:B1:C6:1C:D2:E0:8B:2A:21:68:F4:71:37 X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:75:7a:c3:f8:90:4c:ed:fb:fe:3e:eb:0c:f0:98:4c:40: 10:28:16:9f:ff:c4:70:ab:49:72:7d:cd:46:d1:14:08:6a:9f: cd:ac:0d:07:59:12:38:7a:60:eb:b0:27:dd:59:ed:bc:79:e9: 35:b8:97:1b:01:f9:4f:d5:e1:88:01:1f:62:f0:4a:3f:4d:62: 43:13:f5:a0:f5:62:87:73:8d:8b:6e:90:99:08:b9:97:2d:36: 4d:a0:07:7f:50:da:35:d9:2d:27:09:79:bf:1b:9e:ea:f9:74: fb:47:1a:1a:5d:2b:d2:fa:54:69:f4:48:a5:c1:81:0f:94:15: a3:52:d1:81:06:98:1f:d9:ba:2b:02:b5:d6:1e:54:33:ea:4d: 31:a4:38:31:bb:62:29:90:5d:60:3b:3e:6f:4d:33:89:8a:35: f0:6e:8a:57:89:2a:41:f0:7d:ec:79:69:4b:4d:73:96:b5:ce: 97:76:8f:e8:94:2c:82:a6:ba:47:52:f8:06:9f:34:e8:48:d5: 28:05:6f:da:60:46:5b:27:91:56:8d:61:0e:89:4e:a8:4e:7d: ee:4e:34:dd:e2:5d:8c:4e:d8:b4:52:cd:5d:7e:48:38:a6:5e: d0:a3:1b:10:7d:90:03:ba:02:af:90:fd:35:53:3f:b8:c7:ae: 38:7a:73:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTk2RTExMC8GA1UEBRMoMjQyOUEzRUU1MDg4RjNENDUzNzJBOEUzQjM2ODM0Qzc1 RUFFNkQyOTAeFw0yNTA3MjEwNzI4MjNaFw0yNTA3MjgwNzI4MjJaMBgxFjAUBgNV BAMTDTY4N2RlYzE3LWQyZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo75tFVjL8Ba1MPry1H7nRWSc0gD2rnWN3CgvJts7ILPbUvDComyKqXnoAX5wB 2ej1ft/TF3yX0H7dudP80gxhisLAVkMziig8Ot7QKk6lJ2Pe8VDBqKQprTh1Usg/ BvmEFbroB1kzrMVUGGc43yH1Qqeg+e3bLHiD6SXV69/aNhCOg3vVghXIXoY6YSAT oCns40FBWjLg8f6MDn7tqmHXWdP0R/D1DcgiTHqYFSZrAe93hosftTjcGErBVeAn 4mY0RsBACRuURLrNU8FH6AI0gx9vnD3ZnFdi2wMGBxVCsbq07MkbaL+/0QujYtfF ddd4BNKCTxUIGmhuy+dbsUUZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0KJp5FW3 jXmxxhzS4IsqIWj0cTcwHwYDVR0jBBgwFoAUJCmj7lCI89RTcqjjs2g0x16ubSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTZFLzIzRDJGMTZFRUMy MTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkNtajdsQ0k4OVJUY3FqanMyZzB4MTZ1YlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTZFLzIzRDJGMTZFRUMyMTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlS VGNxampzMmcweDE2dWJTay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiOdXrD+JBM7fv+PusM8JhMQBAoFp//xHCrSXJ9zUbRFAhqn82sDQdZ Ejh6YOuwJ91Z7bx56TW4lxsB+U/V4YgBH2LwSj9NYkMT9aD1YodzjYtukJkIuZct Nk2gB39Q2jXZLScJeb8bnur5dPtHGhpdK9L6VGn0SKXBgQ+UFaNS0YEGmB/ZuisC tdYeVDPqTTGkODG7YimQXWA7Pm9NM4mKNfBuileJKkHwfex5aUtNc5a1zpd2j+iU LIKmukdS+AafNOhI1SgFb9pgRlsnkVaNYQ6JTqhOfe5ONN3iXYxO2LRSzV1+SDim XtCjGxB9kAO6Aq+Q/TVTP7jHrjh6cx4= -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:27 2025 by rpki-client