$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: jiwcAPOyGQAXnSk6NRbQ6F3y6+wa9jTi/DtXyu2Ycbk= Subject key identifier: C0:8F:DB:3B:22:CE:EE:FE:AC:C5:A0:1E:FE:08:27:E4:38:4E:7D:28 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34AD Signing time: Sun 20 Jul 2025 14:22:29 +0000 Manifest this update: Sun 20 Jul 2025 14:22:29 +0000 Manifest next update: Sun 27 Jul 2025 14:22:29 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: CqBFD9P3DHuMfrVxT/52YrrPZNSg7b7+LvzqZe7y5e4=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Jul 20 14:22:29 2025 GMT Not After : Jul 27 14:22:29 2025 GMT Subject: CN=687cfba5-56e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:5f:23:51:8d:d1:03:c2:2c:6f:90:b2:b1: 76:95:13:55:68:f7:6e:84:ec:55:2a:9a:e7:75:2b: 7f:a2:32:c0:1a:73:19:1c:a2:41:01:4b:e0:8c:67: 2d:24:32:28:36:5c:cc:9d:42:52:fd:f4:9c:69:db: 2d:11:d3:83:35:70:cb:23:b4:ba:57:78:b1:7e:07: 8c:22:c2:66:28:d3:8d:e6:8b:0a:17:c4:e8:85:e5: e4:4f:bf:66:d9:77:ba:a7:44:43:b9:fb:30:2a:6c: cf:47:33:00:4c:0e:42:30:16:a0:5d:f8:77:7f:4c: de:bf:1b:b9:1b:44:b5:53:6c:38:ab:b3:f9:82:65: 82:72:63:04:67:3c:2a:17:15:eb:a4:51:4a:5f:43: 09:da:ab:f1:58:1c:96:03:6a:2a:a9:b0:8b:4b:1e: f4:7d:aa:c9:d6:b4:42:d2:68:93:77:07:e3:f6:d0: ba:2e:21:61:c5:ab:d3:54:fa:20:d3:8c:8f:15:38: fb:2d:75:37:a2:02:c7:b2:65:85:9e:48:12:a2:65: 32:e1:ec:56:1e:b9:4a:03:5e:3c:6a:b6:1e:f1:20: c2:07:d6:89:7e:c7:d2:f9:bf:0b:66:c4:ee:a2:75: c6:01:28:56:21:b5:1a:e8:48:30:7d:03:0b:64:3a: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8F:DB:3B:22:CE:EE:FE:AC:C5:A0:1E:FE:08:27:E4:38:4E:7D:28 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:43:77:ba:fa:68:63:11:cd:18:05:38:75:40:20:e4:ed:d3: fa:f7:ce:8f:42:0a:89:c0:2a:87:8d:75:c3:ed:d7:cc:4b:94: ac:65:40:3e:66:c4:23:2c:79:6b:9a:1d:ca:0f:f3:dc:70:5c: 31:5f:59:a7:1b:30:d8:44:3b:d7:0e:45:ef:fb:81:24:e3:d8: 23:a2:b1:58:d9:43:a2:8d:fd:ae:93:ee:bd:97:f2:76:65:35: fe:29:67:31:1d:b2:e2:aa:23:cb:57:50:13:69:e0:06:e6:64: ad:21:fc:14:80:73:ce:bd:be:b5:02:7d:b9:65:4d:22:20:8e: 2d:0d:41:9f:b2:81:74:5d:d1:18:f4:cb:6c:06:83:55:48:2b: 85:52:1a:f5:27:dc:2c:99:69:57:bc:16:08:da:04:13:4d:08: e8:6e:dd:c3:08:af:f9:cf:15:b7:93:ad:57:5c:88:a1:c5:11: 6d:57:63:c7:6c:05:e6:ca:5c:00:d2:36:76:dd:14:2e:fe:0b: 93:5e:37:86:5f:9e:a6:97:6f:0a:62:bc:a0:1e:69:3d:19:7e: 4d:61:90:e3:97:e2:8d:8b:09:35:fb:95:80:38:24:58:88:d3: f8:a2:5f:5c:dc:a3:0f:64:96:1c:01:f1:fd:39:32:c0:ca:e6: b7:59:ee:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwNzIwMTQyMjI5WhcNMjUwNzI3MTQyMjI5WjAYMRYwFAYD VQQDEw02ODdjZmJhNS01NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKVfI1GN0QPCLG+QsrF2lRNVaPduhOxVKprndSt/ojLAGnMZHKJBAUvgjGct JDIoNlzMnUJS/fScadstEdODNXDLI7S6V3ixfgeMIsJmKNON5osKF8ToheXkT79m 2Xe6p0RDufswKmzPRzMATA5CMBagXfh3f0zevxu5G0S1U2w4q7P5gmWCcmMEZzwq FxXrpFFKX0MJ2qvxWByWA2oqqbCLSx70farJ1rRC0miTdwfj9tC6LiFhxavTVPog 04yPFTj7LXU3ogLHsmWFnkgSomUy4exWHrlKA148arYe8SDCB9aJfsfS+b8LZsTu onXGAShWIbUa6EgwfQMLZDpWewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCP2zsi zu7+rMWgHv4IJ+Q4Tn0oMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPQ3e6+mhjEc0YBTh1QCDk7dP6986PQgqJwCqHjXXD7dfMS5SsZUA+ ZsQjLHlrmh3KD/PccFwxX1mnGzDYRDvXDkXv+4Ek49gjorFY2UOijf2uk+69l/J2 ZTX+KWcxHbLiqiPLV1ATaeAG5mStIfwUgHPOvb61An25ZU0iII4tDUGfsoF0XdEY 9MtsBoNVSCuFUhr1J9wsmWlXvBYI2gQTTQjobt3DCK/5zxW3k61XXIihxRFtV2PH bAXmylwA0jZ23RQu/guTXjeGX56ml28KYrygHmk9GX5NYZDjl+KNiwk1+5WAOCRY iNP4ol9c3KMPZJYcAfH9OTLAyua3We70 -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:17 2025 by rpki-client