$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: G2TzxKovgLWdqdeK12xsAJk6gQa4Hqwc1JRbMn3u02I= Subject key identifier: BF:32:11:63:3B:C5:5C:5C:9E:1D:C1:89:24:84:DE:D0:C8:F7:59:1C Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 028C Signing time: Mon 21 Jul 2025 01:56:52 +0000 Manifest this update: Mon 21 Jul 2025 01:56:52 +0000 Manifest next update: Mon 28 Jul 2025 01:56:52 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: 9/NnC0rRiNv2yWZStcg5l2t65iP3bBVLiTf9TFFljRI=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Jul 21 01:56:52 2025 GMT Not After : Jul 28 01:56:52 2025 GMT Subject: CN=687d9e64-1bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:3f:9e:df:c7:54:e8:91:ca:9e:45:31:8b: c9:1e:23:31:65:94:ce:0d:c6:c3:63:75:93:7d:6e: b6:5a:dc:e4:4a:fc:f0:53:66:a7:bf:06:c9:a0:42: 05:40:10:70:a6:e7:e2:77:38:0e:1e:cf:40:ae:64: de:f6:31:3d:45:59:b8:cf:ac:c2:4c:5e:a5:24:84: 98:80:1a:83:85:06:d9:32:13:16:0c:f8:e6:4f:27: ec:af:4d:2e:3c:88:1b:5f:ce:13:6e:27:d2:25:28: 51:50:13:fb:9a:25:14:0a:c1:9f:67:12:e4:7a:f1: a8:63:d1:41:0b:f9:4a:03:b0:7b:97:21:82:a2:eb: 0e:09:dd:15:af:ef:ad:05:0f:13:71:e1:76:80:df: 49:ad:6e:46:8c:b4:b2:71:00:c8:53:1f:dd:36:39: cf:0a:9d:b2:bb:d2:1d:a3:e6:a4:b0:1d:c6:18:d4: c0:5d:3e:60:f0:93:20:e2:b4:d6:76:69:5f:3c:86: c1:79:13:62:73:34:95:3f:e6:06:5f:82:89:69:c7: d8:41:2f:d5:d5:5a:a6:dc:00:b9:c8:40:6c:65:51: 79:c1:22:a3:6f:87:17:24:49:58:bc:4f:4d:82:e5: 35:5a:b6:33:75:a5:f9:7f:83:fe:38:7a:be:0c:e5: 65:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:32:11:63:3B:C5:5C:5C:9E:1D:C1:89:24:84:DE:D0:C8:F7:59:1C X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3a:e2:0b:b8:e7:08:90:ce:04:bc:0a:b2:8a:b1:a6:c2:e8: 77:84:d6:af:ca:be:fe:a9:80:fd:7f:3f:2b:f2:e7:aa:32:27: e2:74:e2:e4:4f:85:0a:06:05:aa:d5:fc:63:34:57:f0:19:e5: 02:93:a0:75:f9:fb:71:8c:37:cb:9b:5b:ae:2d:b1:74:8b:9f: 98:62:45:90:68:8c:b8:1f:51:57:02:b0:6c:31:88:be:07:8b: b5:53:1c:29:e7:c7:e9:2d:28:76:cc:11:b2:51:25:69:34:8a: 10:eb:96:8c:3f:ae:4f:d8:7f:ae:72:4f:72:b2:aa:95:3e:d8: d8:ff:36:95:96:0a:de:1d:37:18:00:74:37:a4:a4:ac:d2:ca: b9:9f:d8:73:63:a2:8d:31:2c:cc:29:d7:fc:ff:7f:4a:c8:c7: 94:60:52:83:42:73:4a:f0:c5:fc:fa:09:e7:f1:d5:9f:e4:ff: e9:be:11:43:3a:d5:2a:63:26:d2:24:43:37:c5:cb:62:82:cc: ba:34:ae:6b:a9:07:30:ce:78:6a:58:a1:df:e3:68:8d:c7:62: 34:bc:5d:06:07:63:a9:45:bf:57:00:f1:1e:39:f6:08:3d:48: 90:a8:e3:fb:03:67:a2:1d:d8:cb:8e:d7:43:68:e4:69:a3:83: 43:fd:4e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwNzIxMDE1NjUyWhcNMjUwNzI4MDE1NjUyWjAYMRYwFAYD VQQDEw02ODdkOWU2NC0xYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+s/nt/HVOiRyp5FMYvJHiMxZZTODcbDY3WTfW62WtzkSvzwU2anvwbJoEIF QBBwpufidzgOHs9ArmTe9jE9RVm4z6zCTF6lJISYgBqDhQbZMhMWDPjmTyfsr00u PIgbX84TbifSJShRUBP7miUUCsGfZxLkevGoY9FBC/lKA7B7lyGCousOCd0Vr++t BQ8TceF2gN9JrW5GjLSycQDIUx/dNjnPCp2yu9Ido+aksB3GGNTAXT5g8JMg4rTW dmlfPIbBeRNiczSVP+YGX4KJacfYQS/V1Vqm3AC5yEBsZVF5wSKjb4cXJElYvE9N guU1WrYzdaX5f4P+OHq+DOVl3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8yEWM7 xVxcnh3BiSSE3tDI91kcMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtOuILuOcIkM4EvAqyirGmwuh3hNavyr7+qYD9fz8r8ueqMifidOLk T4UKBgWq1fxjNFfwGeUCk6B1+ftxjDfLm1uuLbF0i5+YYkWQaIy4H1FXArBsMYi+ B4u1Uxwp58fpLSh2zBGyUSVpNIoQ65aMP65P2H+uck9ysqqVPtjY/zaVlgreHTcY AHQ3pKSs0sq5n9hzY6KNMSzMKdf8/39KyMeUYFKDQnNK8MX8+gnn8dWf5P/pvhFD OtUqYybSJEM3xctigsy6NK5rqQcwznhqWKHf42iNx2I0vF0GB2OpRb9XAPEeOfYI PUiQqOP7A2eiHdjLjtdDaORpo4ND/U4f -----END CERTIFICATE-----Generated at Mon Jul 21 08:04:39 2025 by rpki-client