$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: 0weJUffoYpFie4UMWpQUFTzP7RBJyFkXMlzFhK5qJjI= Subject key identifier: 86:14:70:AB:81:09:09:80:F5:57:A2:3E:6B:5A:97:45:DF:C8:4C:45 Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 1FA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1F56 Signing time: Sun 20 Jul 2025 16:03:35 +0000 Manifest this update: Sun 20 Jul 2025 16:03:35 +0000 Manifest next update: Sun 27 Jul 2025 16:03:35 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: Pxes5V35R3ZbIyeHgvH/V2M5vUdgjnOWmOhlOMT2yEo=) 2: 3CC1BACC620811F091BDA035C4F9AE02.roa (hash: +kW7R+46on8p1PnkX3yh1Os22Qd6uo5/v1we6/yqToU=) 3: 3BBD8AE8620811F091BDA035C4F9AE02.roa (hash: pXxHg71yxRiiHw7/GQ7Fh+F9NdGSuvQsF44CWQnYFs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8100 (0x1fa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Jul 20 16:03:35 2025 GMT Not After : Jul 27 16:03:35 2025 GMT Subject: CN=687d1357-52ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:41:30:5e:ae:0b:c4:c4:48:e4:b2:a5:3f: 35:ff:89:0d:4a:c9:64:ab:bd:ee:4d:d9:c9:99:91: c6:44:e3:e6:ba:2f:58:f0:6f:ed:0e:10:34:2f:b0: 6e:f8:9a:23:a3:01:4e:17:17:bc:64:4f:c5:08:6a: 30:ad:18:5c:6f:5c:dc:af:13:eb:0e:76:bd:8a:3d: 55:69:24:cd:02:50:1b:a1:bd:95:d9:17:ff:25:41: a0:f8:8b:b5:9a:58:39:9a:a3:7c:43:bf:3c:8e:79: 02:dd:6c:60:99:8b:fd:dc:51:5e:b3:9d:5e:09:05: e7:6e:53:c5:33:d6:51:84:61:93:88:12:a4:f3:40: 63:9b:86:a8:e6:3f:a7:50:28:27:3d:71:f5:a9:f4: 51:b0:92:af:73:bb:a3:31:a3:84:06:32:28:9a:3d: 77:b6:c9:8b:f8:ea:4d:d3:11:1d:9d:f8:30:b7:48: f4:c8:97:f7:70:10:6f:c2:1b:f8:9d:60:45:a3:97: be:38:9d:ab:f1:99:ca:0b:d1:bf:1f:e6:49:5d:6c: 9c:68:b3:41:3d:1e:5c:67:52:5e:ce:d2:70:99:a8: 8d:92:cf:62:30:f1:02:ff:99:38:f1:91:9e:ab:37: 33:09:53:e2:7b:2a:47:11:64:8d:c9:e5:d9:8e:40: c2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:14:70:AB:81:09:09:80:F5:57:A2:3E:6B:5A:97:45:DF:C8:4C:45 X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7f:c5:a7:98:39:72:d7:22:5e:90:86:cc:86:d5:51:66:c7: 69:4b:56:62:f4:61:b3:d1:3f:07:01:1c:1f:e7:08:0c:05:be: 01:49:de:10:2b:ed:fa:6c:ae:fc:23:26:ea:e4:03:c7:6c:23: 0d:0a:7e:4c:f9:74:e9:da:17:e3:64:90:e3:bc:b6:4c:39:25: 39:51:c3:3d:7c:55:d1:a6:89:41:4b:f3:45:43:69:05:b4:04: 2f:dd:99:e2:a6:cc:3f:7d:c8:d2:26:b9:4f:50:42:98:75:d9: f5:0a:e5:73:9f:4f:05:39:6d:4d:02:30:88:50:ce:b6:45:c8: 03:db:1d:91:ab:38:0e:46:05:77:e1:8f:8d:ce:39:d1:d3:55: ab:d1:a2:a5:f1:70:da:9c:4d:5a:0f:61:de:b8:f4:17:e9:f1: 1f:b0:53:a4:5e:25:dc:f5:d9:56:5a:c3:08:68:18:da:c3:07: 07:19:e2:b8:eb:2a:da:cb:db:9c:67:88:e2:1c:6e:6e:2d:f4: 72:c5:94:3b:1e:ea:3a:69:54:0f:2e:f0:58:fb:b3:19:3d:e7: 82:6b:3a:52:ed:76:6d:84:b8:48:6f:80:23:67:9e:fe:5d:21: 98:df:77:6f:33:b7:c7:af:17:b0:29:54:72:47:38:2a:80:05: 1d:96:e0:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjUwNzIwMTYwMzM1WhcNMjUwNzI3MTYwMzM1WjAYMRYwFAYD VQQDEw02ODdkMTM1Ny01MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEdBMF6uC8TESOSypT81/4kNSslkq73uTdnJmZHGROPmui9Y8G/tDhA0L7Bu +JojowFOFxe8ZE/FCGowrRhcb1zcrxPrDna9ij1VaSTNAlAbob2V2Rf/JUGg+Iu1 mlg5mqN8Q788jnkC3WxgmYv93FFes51eCQXnblPFM9ZRhGGTiBKk80Bjm4ao5j+n UCgnPXH1qfRRsJKvc7ujMaOEBjIomj13tsmL+OpN0xEdnfgwt0j0yJf3cBBvwhv4 nWBFo5e+OJ2r8ZnKC9G/H+ZJXWycaLNBPR5cZ1JeztJwmaiNks9iMPEC/5k48ZGe qzczCVPieypHEWSNyeXZjkDCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYUcKuB CQmA9VeiPmtal0XfyExFMB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxf8WnmDly1yJekIbMhtVRZsdpS1Zi9GGz0T8HARwf5wgMBb4BSd4Q K+36bK78Iybq5APHbCMNCn5M+XTp2hfjZJDjvLZMOSU5UcM9fFXRpolBS/NFQ2kF tAQv3Znipsw/fcjSJrlPUEKYddn1CuVzn08FOW1NAjCIUM62RcgD2x2RqzgORgV3 4Y+NzjnR01Wr0aKl8XDanE1aD2HeuPQX6fEfsFOkXiXc9dlWWsMIaBjawwcHGeK4 6yray9ucZ4jiHG5uLfRyxZQ7Huo6aVQPLvBY+7MZPeeCazpS7XZthLhIb4AjZ57+ XSGY33dvM7fHrxewKVRyRzgqgAUdluDP -----END CERTIFICATE-----Generated at Mon Jul 21 06:59:37 2025 by rpki-client