$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft File: RJUXO9LCk43jBnfP3ec80xuKJnY.mft (raw, json) Hash identifier: U14eqZy/z/h0yE1yIhfPCXUuo9Kbx4P04I3iAsF2Ek0= Subject key identifier: 03:04:F4:56:9E:2F:5C:E1:44:CF:E9:78:09:99:AC:F3:ED:99:CE:AC Authority key identifier: 44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76 Certificate issuer: /CN=A91A5098/serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft Manifest number: 5C Signing time: Mon 30 Jun 2025 16:17:44 +0000 Manifest this update: Mon 30 Jun 2025 16:17:44 +0000 Manifest next update: Mon 07 Jul 2025 16:17:44 +0000 Files and hashes: 1: RJUXO9LCk43jBnfP3ec80xuKJnY.crl (hash: sRSRfKIURup81KBXE9WUs18BuLZK++6v1Aq5aLrSa4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676 Validity Not Before: Jun 30 16:17:44 2025 GMT Not After : Jul 7 16:17:44 2025 GMT Subject: CN=6862b8a8-1252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:93:df:f7:78:2f:30:8b:40:5c:ab:9c:90: 9f:b2:88:3d:d4:c9:f6:2f:a4:65:ca:7f:8f:f5:9d: 25:a5:4a:d5:eb:8d:11:7c:d3:af:2c:db:ed:9c:fb: 55:6a:f5:cf:8c:3e:5a:8f:20:62:dd:ad:45:3d:ed: 7c:a5:ae:13:dc:f1:c1:17:ba:b3:a2:53:da:a3:96: 49:10:b5:aa:e1:f9:d5:c5:00:f5:88:e1:0c:5c:4a: 63:50:6b:9a:bf:f9:58:0f:94:06:6b:66:a3:e8:ea: f8:53:cc:e1:73:81:ab:79:3c:14:ac:fa:67:52:fe: d2:bd:5b:00:91:11:55:98:3b:63:03:2a:89:c1:60: ec:fa:1b:e7:cc:15:b8:71:8c:0f:26:be:3d:e0:95: 90:9e:7c:12:f6:5b:8a:42:a4:36:5f:29:8a:2e:69: 55:e9:51:c5:9c:6b:d7:e3:46:95:c2:39:6e:4a:6e: 83:a3:ac:68:1a:2f:1f:b9:c4:c6:e6:88:1e:cf:10: 3c:8b:23:f9:4b:f3:56:65:8f:74:b0:92:8b:26:94: 4c:63:a4:b1:00:92:8a:1c:f8:4d:51:b3:90:61:1a: d9:13:95:ab:d0:23:e6:4c:21:87:75:5f:9e:37:50: dd:ff:58:3a:e6:76:0e:10:03:26:27:90:dd:71:8b: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:04:F4:56:9E:2F:5C:E1:44:CF:E9:78:09:99:AC:F3:ED:99:CE:AC X509v3 Authority Key Identifier: keyid:44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4b:ba:a6:6b:8a:11:a4:ba:f0:ba:45:0c:03:7c:91:dd:83: c3:4b:bf:d9:4a:08:f2:a9:19:fe:0b:1b:4c:48:7a:8e:0d:ba: 29:24:d3:7e:dc:f0:fc:5e:03:3b:f8:00:6a:21:fb:3d:98:46: 55:58:57:52:0e:5c:eb:93:5e:61:ff:99:d3:b4:02:2b:ef:0c: b2:91:c8:65:44:83:37:cd:54:04:04:fa:39:34:d2:af:04:3d: e2:a5:ba:f3:4f:f8:99:7c:79:95:de:c2:4a:87:51:42:a3:6c: ff:8c:ec:b8:d2:b3:b7:27:23:5e:9e:1d:94:53:a8:b1:06:ed: df:3e:aa:1a:fb:c5:8f:77:6c:1f:f3:57:a1:9c:3b:5f:f6:fc: 3c:19:b5:68:1f:5e:9e:61:36:71:05:c0:78:2f:b5:72:a5:02: 94:b9:66:10:62:57:c5:f0:5a:0c:8b:b9:16:47:1c:88:7c:c9: 81:7b:8e:06:a7:a0:b8:37:08:f1:1a:be:20:51:e6:0c:16:8a: 5b:9b:06:82:ad:43:16:99:da:78:7b:6c:45:7c:89:c3:2a:4a: a9:25:bd:c1:e5:64:5f:ec:8a:07:62:46:89:e7:31:53:e0:ec: 14:b0:9d:aa:13:11:9d:27:c9:84:fd:d3:52:f0:62:dd:74:49: 80:34:ab:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTA5ODExMC8GA1UEBRMoNDQ5NTE3M0JEMkMyOTM4REUzMDY3N0NGRERFNzNDRDMx QjhBMjY3NjAeFw0yNTA2MzAxNjE3NDRaFw0yNTA3MDcxNjE3NDRaMBgxFjAUBgNV BAMTDTY4NjJiOGE4LTEyNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD3JPf93gvMItAXKuckJ+yiD3UyfYvpGXKf4/1nSWlStXrjRF8068s2+2c+1Vq 9c+MPlqPIGLdrUU97XylrhPc8cEXurOiU9qjlkkQtarh+dXFAPWI4QxcSmNQa5q/ +VgPlAZrZqPo6vhTzOFzgat5PBSs+mdS/tK9WwCREVWYO2MDKonBYOz6G+fMFbhx jA8mvj3glZCefBL2W4pCpDZfKYouaVXpUcWca9fjRpXCOW5KboOjrGgaLx+5xMbm iB7PEDyLI/lL81Zlj3SwkosmlExjpLEAkooc+E1Rs5BhGtkTlavQI+ZMIYd1X543 UN3/WDrmdg4QAyYnkN1xi2sdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAwT0Vp4v XOFEz+l4CZms8+2ZzqwwHwYDVR0jBBgwFoAURJUXO9LCk43jBnfP3ec80xuKJnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1MDk4LzIyMEIxNzI4Q0JD MjExRUZBMzI0NjU3M0M0RjlBRTAyL1JKVVhPOUxDazQzakJuZlAzZWM4MHh1S0pu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkpVWE85TENrNDNqQm5mUDNlYzgweHVLSm5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 MDk4LzIyMEIxNzI4Q0JDMjExRUZBMzI0NjU3M0M0RjlBRTAyL1JKVVhPOUxDazQz akJuZlAzZWM4MHh1S0puWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEVLuqZrihGkuvC6RQwDfJHdg8NLv9lKCPKpGf4LG0xIeo4Nuikk037c 8PxeAzv4AGoh+z2YRlVYV1IOXOuTXmH/mdO0AivvDLKRyGVEgzfNVAQE+jk00q8E PeKluvNP+Jl8eZXewkqHUUKjbP+M7LjSs7cnI16eHZRTqLEG7d8+qhr7xY93bB/z V6GcO1/2/DwZtWgfXp5hNnEFwHgvtXKlApS5ZhBiV8XwWgyLuRZHHIh8yYF7jgan oLg3CPEaviBR5gwWilubBoKtQxaZ2nh7bEV8icMqSqklvcHlZF/sigdiRonnMVPg 7BSwnaoTEZ0nyYT901LwYt10SYA0q3I= -----END CERTIFICATE-----Generated at Wed Jul 2 13:15:41 2025 by rpki-client