$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: 0bSJ9Ea0W3KAgzabFi5sos5dxHfwAYngt/sOuNNsG5E= Subject key identifier: 90:04:26:01:2B:F8:7F:92:B3:1B:AC:C4:39:15:1D:22:8F:44:D8:80 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 041B Signing time: Sat 19 Jul 2025 00:46:22 +0000 Manifest this update: Sat 19 Jul 2025 00:46:22 +0000 Manifest next update: Sat 26 Jul 2025 00:46:22 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: XUUsLtJ9rd1LUrqwBxLdKiiS4NcuNB4Lh3Jn7EkN/aI=) 2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: Jq+BJa5bIC2ga/tgIn6ID1FhPZxllAOIKx3OxJo/dLg=) 3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: h3fylE+2YBgfkc7GqGmNPtjnF3D2D39dQ6blUneghIY=) 4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: Q81s5XKL5iVaVaoWayTQR37y4XfCEhNVP+1tJwtC+bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: Jul 19 00:46:22 2025 GMT Not After : Jul 26 00:46:22 2025 GMT Subject: CN=687aeade-f8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:3e:fd:44:8b:dd:25:fc:08:7c:39:f2:f3: d2:cf:fa:e1:5b:c1:87:13:89:ca:aa:a2:45:bd:7c: 5b:1c:e8:16:2a:20:8f:c5:c9:26:37:0a:74:af:47: ec:60:9e:2c:8f:64:85:6a:b5:62:bf:8c:f4:4c:fd: 34:af:4d:c0:e9:9f:0c:f4:11:09:a8:3a:12:7f:32: 33:90:2c:26:8f:e2:12:7d:a9:dd:67:71:fa:2e:bb: 1e:ef:c7:31:9f:bf:c2:b1:01:52:7b:77:c1:dd:0a: de:c7:84:7a:fb:b3:3a:b1:57:b9:22:67:0b:84:79: 86:f3:8c:02:70:86:e5:d3:d0:88:bb:ef:1c:53:35: 0b:b2:48:e0:5f:a4:10:02:3c:e7:97:dc:98:22:c6: d6:5a:a7:56:12:6c:9b:2a:91:1e:f2:ac:65:a3:93: 1e:1f:8b:48:74:2b:65:87:e8:e5:23:d9:51:30:32: 76:11:9a:ec:a8:f0:ec:9d:90:b5:63:90:b4:73:b8: 88:16:6b:05:35:18:d5:b3:77:78:55:85:79:a4:d1: d8:25:a5:e1:f2:d4:2a:e3:21:2a:49:2a:11:d0:96: 06:10:47:b9:24:76:e6:da:a3:0e:e3:83:cd:15:60: 2b:a2:55:6d:be:51:c1:78:6d:de:d9:26:2a:7f:5b: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:04:26:01:2B:F8:7F:92:B3:1B:AC:C4:39:15:1D:22:8F:44:D8:80 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:94:5d:b2:84:e0:f7:ed:59:b0:5b:9f:0f:5e:22:2b:6e:27: 12:0c:b7:53:39:99:a9:db:96:90:b2:90:8a:04:c6:cd:62:80: aa:25:64:10:72:f7:b0:8d:d0:19:17:67:c4:af:4b:fc:1c:83: a3:31:f2:0f:b5:70:73:30:24:8a:01:51:e8:95:36:1d:1b:81: 67:ac:6e:a3:bc:b7:b0:84:85:e3:7c:71:6d:07:9b:eb:98:d1: b6:f8:99:d9:74:67:65:e9:01:52:56:62:70:20:b6:48:96:38: ee:55:42:b0:88:90:fc:c9:f3:45:b0:8b:a1:ec:df:31:8b:54: 29:ed:15:3d:00:2c:2b:46:ff:c2:ff:83:2c:21:0f:87:b1:18: 02:35:a9:b0:49:7b:6c:1e:7a:8f:36:6d:26:7d:cc:cf:ce:dd: 4d:d2:0d:e3:12:df:9c:3e:db:83:0e:4a:41:da:fa:85:ff:e9: 3f:a2:60:e6:eb:4f:cf:6f:ab:3e:92:06:91:50:00:12:e4:b4: 25:40:2b:25:17:de:c2:77:41:f0:f2:07:ac:ea:b3:c8:f7:2e: 21:6a:0b:3a:83:4d:fe:47:87:07:e7:a2:69:52:84:e0:be:d1: ff:ac:c5:82:09:80:5d:6c:79:90:5e:df:ef:d9:a3:17:e2:58: 57:79:4f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjUwNzE5MDA0NjIyWhcNMjUwNzI2MDA0NjIyWjAYMRYwFAYD VQQDEw02ODdhZWFkZS1mOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zk+/USL3SX8CHw58vPSz/rhW8GHE4nKqqJFvXxbHOgWKiCPxckmNwp0r0fs YJ4sj2SFarViv4z0TP00r03A6Z8M9BEJqDoSfzIzkCwmj+ISfandZ3H6Lrse78cx n7/CsQFSe3fB3Qrex4R6+7M6sVe5ImcLhHmG84wCcIbl09CIu+8cUzULskjgX6QQ Ajznl9yYIsbWWqdWEmybKpEe8qxlo5MeH4tIdCtlh+jlI9lRMDJ2EZrsqPDsnZC1 Y5C0c7iIFmsFNRjVs3d4VYV5pNHYJaXh8tQq4yEqSSoR0JYGEEe5JHbm2qMO44PN FWArolVtvlHBeG3e2SYqf1svzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAEJgEr +H+SsxusxDkVHSKPRNiAMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnlF2yhOD37VmwW58PXiIrbicSDLdTOZmp25aQspCKBMbNYoCqJWQQ cvewjdAZF2fEr0v8HIOjMfIPtXBzMCSKAVHolTYdG4FnrG6jvLewhIXjfHFtB5vr mNG2+JnZdGdl6QFSVmJwILZIljjuVUKwiJD8yfNFsIuh7N8xi1Qp7RU9ACwrRv/C /4MsIQ+HsRgCNamwSXtsHnqPNm0mfczPzt1N0g3jEt+cPtuDDkpB2vqF/+k/omDm 60/Pb6s+kgaRUAAS5LQlQCslF97Cd0Hw8ges6rPI9y4hags6g03+R4cH56JpUoTg vtH/rMWCCYBdbHmQXt/v2aMX4lhXeU+f -----END CERTIFICATE-----Generated at Sun Jul 20 03:26:05 2025 by rpki-client