$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: Y3YYocmr/7NL+UtumfsY632j95D98vLszQTcHHPXeQ8= Subject key identifier: 1D:5C:90:1C:AF:25:FC:48:16:B2:F0:A9:F6:C4:25:6C:B8:E2:63:97 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: 9F Signing time: Sat 19 Jul 2025 06:31:36 +0000 Manifest this update: Sat 19 Jul 2025 06:31:36 +0000 Manifest next update: Sat 26 Jul 2025 06:31:36 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: q891wAkviin0Z6MqPJTMYcrM4DjWOyb/HLBpZjybPdc=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: /HTBqf5H3Uz657hsatlKZqGr2vioW9ZJotjtVpnDq5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Jul 19 06:31:36 2025 GMT Not After : Jul 26 06:31:36 2025 GMT Subject: CN=687b3bc8-3cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:27:3d:a3:3b:b6:80:d3:e1:6c:f9:17:64: 01:96:0a:05:62:b7:d1:4c:26:6e:97:6a:85:89:06: 86:64:bd:5a:c1:ea:5b:cb:ae:1d:fd:9e:83:14:d7: 06:0f:ca:47:19:42:e5:1b:69:88:9d:88:62:78:21: 6f:40:6a:92:f4:8a:3f:6b:ae:b2:60:d5:56:bc:38: 21:21:2f:16:4f:7f:1e:5e:de:84:a1:5a:06:b5:87: e1:f3:4f:cd:d1:bb:e2:63:3d:dc:35:ea:ec:ad:59: e2:3d:ce:6e:6c:97:f9:d7:00:17:9b:40:27:60:ba: e7:0e:b0:92:96:62:d2:55:02:b7:e8:e1:73:fb:8b: 40:a7:16:5d:69:7d:5c:d0:67:bd:5c:98:f2:e5:b3: 4d:c7:93:04:a2:d6:e2:e8:89:66:49:89:0c:8e:67: a1:a1:81:d5:dc:cc:50:1e:a0:6f:98:b6:f1:75:f4: 64:d7:7f:94:83:49:22:6d:f2:4a:07:3a:f1:20:6c: 3f:d7:76:a2:65:dd:41:5c:cb:88:16:19:1e:79:cc: c0:cd:93:08:8f:76:1b:cf:b3:36:b6:3a:c6:85:8f: 4f:79:30:60:8b:95:2f:dd:be:33:69:f9:30:1c:8d: b3:eb:6d:45:eb:c4:42:4d:b3:40:2e:78:8d:24:62: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:90:1C:AF:25:FC:48:16:B2:F0:A9:F6:C4:25:6C:B8:E2:63:97 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ac:53:28:fb:9a:dd:f8:d7:20:12:4c:a0:ff:8a:94:1b:23: b4:46:c2:31:96:02:5e:4c:d6:92:29:6e:ad:7b:36:82:29:e5: 47:ad:4c:70:95:43:37:41:2f:d5:22:50:36:fd:5e:51:01:b9: 47:bd:08:49:c9:48:c7:f5:9a:27:a2:cd:38:e0:aa:0b:ab:b0: 0e:6b:0f:72:b6:c7:6c:69:5b:1c:ff:fc:94:a7:7a:b2:a0:f7: 5d:0d:4e:f6:8e:f8:c7:82:04:d1:ec:a5:0f:2a:f5:ce:05:fd: b5:ff:a3:e8:44:9d:04:59:a5:7f:3a:39:ce:8e:ee:48:8f:27: 25:5c:8a:b5:bf:f8:e2:ec:da:82:d0:95:aa:15:66:51:e5:8e: 5a:bd:9b:62:ad:16:c9:77:c7:16:4b:35:2d:d6:67:79:58:30: 9e:78:6b:d4:53:6d:e8:73:7a:75:86:20:df:e2:20:3c:5b:7b: 5f:69:ce:a5:5c:b7:12:b3:8b:da:c0:3f:1a:ce:c0:60:b7:c5: 45:54:bf:bf:49:f4:77:43:83:81:5d:50:e1:5e:36:d3:e1:59: 93:f6:42:fd:65:a7:c3:98:7f:a8:1b:6a:6c:bb:a0:bc:e2:63: 76:51:b2:bb:40:c4:92:5a:55:b1:5b:4f:2f:db:06:55:7e:56: c2:b0:68:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDhERDQxNDQ4NTkxN0NENEM4MDE2N0JEQTE5RDcyNDk2 NDZCMDY3MjUwHhcNMjUwNzE5MDYzMTM2WhcNMjUwNzI2MDYzMTM2WjAYMRYwFAYD VQQDEw02ODdiM2JjOC0zY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv74nPaM7toDT4Wz5F2QBlgoFYrfRTCZul2qFiQaGZL1awepby64d/Z6DFNcG D8pHGULlG2mInYhieCFvQGqS9Io/a66yYNVWvDghIS8WT38eXt6EoVoGtYfh80/N 0bviYz3cNersrVniPc5ubJf51wAXm0AnYLrnDrCSlmLSVQK36OFz+4tApxZdaX1c 0Ge9XJjy5bNNx5MEotbi6IlmSYkMjmehoYHV3MxQHqBvmLbxdfRk13+Ug0kibfJK BzrxIGw/13aiZd1BXMuIFhkeeczAzZMIj3Ybz7M2tjrGhY9PeTBgi5Uv3b4zafkw HI2z621F68RCTbNALniNJGIzTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1ckByv JfxIFrLwqfbEJWy44mOXMB8GA1UdIwQYMBaAFI3UFEhZF81MgBZ72hnXJJZGsGcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EMjdDOTE1Qzc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpVeUFGbnZhR2Rja2xrYXda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EMjdDOTE1Qzc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpV eUFGbnZhR2Rja2xrYXdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWrFMo+5rd+NcgEkyg/4qUGyO0RsIxlgJeTNaSKW6tezaCKeVHrUxw lUM3QS/VIlA2/V5RAblHvQhJyUjH9Zonos044KoLq7AOaw9ytsdsaVsc//yUp3qy oPddDU72jvjHggTR7KUPKvXOBf21/6PoRJ0EWaV/OjnOju5IjyclXIq1v/ji7NqC 0JWqFWZR5Y5avZtirRbJd8cWSzUt1md5WDCeeGvUU23oc3p1hiDf4iA8W3tfac6l XLcSs4vawD8azsBgt8VFVL+/SfR3Q4OBXVDhXjbT4VmT9kL9ZafDmH+oG2psu6C8 4mN2UbK7QMSSWlWxW08v2wZVflbCsGhE -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:41 2025 by rpki-client