$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json) Hash identifier: zZnX45Uy8P2ER/Eh0v9vxnivRTbdkuraRcrzDCQ+1EY= Subject key identifier: 2A:F1:07:B7:96:17:83:1C:49:12:B6:9A:A4:04:75:6A:65:A3:1A:FF Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03 Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:56:50 +0000 Manifest this update: Tue 01 Jul 2025 08:56:49 +0000 Manifest next update: Tue 08 Jul 2025 08:56:49 +0000 Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: T2bsVJbSeCH8Tt1IAln5pJr5eFcALmjWxMquGjqbqHU=) 2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: OZHK+au5UwVImKpl7QVZcEGwIUNhlUMC18l25bqrmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03 Validity Not Before: Jul 1 08:56:49 2025 GMT Not After : Jul 8 08:56:49 2025 GMT Subject: CN=6863a2d1-c955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:9f:07:a1:24:8b:2f:78:4a:b1:4c:32:94: 72:e6:60:96:d3:af:bc:79:e5:69:34:9c:ad:1c:43: fc:7f:03:86:50:92:6f:24:12:cc:e2:55:74:bc:dc: 89:10:e3:0c:11:bc:f8:08:9c:e9:ad:cf:0e:5b:d3: ea:a8:5b:e6:13:89:2b:45:e6:64:f2:9e:77:0e:62: a0:4f:b2:52:59:cb:8d:3b:64:da:9c:68:3e:cb:ee: 68:b4:d0:d9:75:70:92:21:48:38:ea:23:db:d7:f0: 00:8b:47:35:93:ab:be:fd:05:73:05:17:13:0a:b1: 46:09:66:9b:4e:a4:25:f1:69:d9:5b:f4:c4:a1:e1: 9b:64:61:a8:8a:a6:29:29:d0:55:2a:d6:b0:9c:4a: ec:0d:cd:23:17:41:6e:23:4f:86:93:f0:94:29:87: b6:ff:da:0d:a8:0d:5c:52:1e:05:b2:64:70:fb:52: 0d:65:b9:25:33:bd:96:ef:2b:42:13:5b:37:0f:64: e8:ff:1e:cd:33:2d:5d:94:87:cd:9b:99:8f:0c:c8: 75:51:37:76:2c:3d:a7:02:b0:59:e1:5e:1c:6d:d5: 08:d3:1c:1e:c5:52:50:72:94:97:d8:a9:29:2f:2f: d2:4d:98:c8:66:db:c1:10:e5:c8:06:4d:a6:4a:fe: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F1:07:B7:96:17:83:1C:49:12:B6:9A:A4:04:75:6A:65:A3:1A:FF X509v3 Authority Key Identifier: keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:d8:28:a6:74:da:39:e7:18:b4:21:b2:47:b9:a4:7f:78:e2: 63:1e:36:f5:0a:19:d5:24:00:3d:20:b8:65:95:50:77:e8:af: 42:09:41:8f:3a:d7:c0:eb:1d:6c:41:a4:3a:91:58:54:06:ce: ae:84:28:f8:d8:4b:42:15:18:4e:59:f4:b0:af:88:6b:68:ae: 05:fa:48:bc:d4:66:82:6a:85:01:4c:01:8c:5b:10:3e:23:14: e0:03:11:43:cb:ea:97:e6:77:57:bf:bf:51:4e:c7:a5:b6:f2: a1:14:e3:bc:88:74:90:cc:5a:50:73:d8:4e:00:bc:e6:2e:bb: 56:38:74:ad:51:3a:bc:56:43:60:a5:8e:cc:de:69:ef:d3:0b: 54:f7:78:3a:3a:b8:81:12:ac:1d:b4:e7:72:7d:c2:39:d2:c2: d5:b4:73:a6:b9:53:30:74:68:31:47:7e:9b:c7:64:d1:45:aa: a9:09:12:72:51:e3:6b:26:b4:bb:ca:90:6b:63:ec:3f:bf:37: a5:c6:b9:5f:0f:de:f8:84:26:ce:f2:c9:bd:02:26:df:f7:b2: 8a:6f:1b:7d:0a:e5:f5:24:de:e3:9e:b5:ef:aa:02:ba:16:a5: 7b:a3:89:d0:46:6c:63:f5:8e:24:88:5b:7f:4b:8d:c3:01:98: da:7e:b5:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoMjQ1RkY0NUMyODY1MkJGNzE1NjU4NUEzRkQ5QTc5NzRF NTM3NUQwMzAeFw0yNTA3MDEwODU2NDlaFw0yNTA3MDgwODU2NDlaMBgxFjAUBgNV BAMTDTY4NjNhMmQxLWM5NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXT58HoSSLL3hKsUwylHLmYJbTr7x55Wk0nK0cQ/x/A4ZQkm8kEsziVXS83IkQ 4wwRvPgInOmtzw5b0+qoW+YTiStF5mTynncOYqBPslJZy407ZNqcaD7L7mi00Nl1 cJIhSDjqI9vX8ACLRzWTq779BXMFFxMKsUYJZptOpCXxadlb9MSh4ZtkYaiKpikp 0FUq1rCcSuwNzSMXQW4jT4aT8JQph7b/2g2oDVxSHgWyZHD7Ug1luSUzvZbvK0IT WzcPZOj/Hs0zLV2Uh82bmY8MyHVRN3YsPacCsFnhXhxt1QjTHB7FUlBylJfYqSkv L9JNmMhm28EQ5cgGTaZK/j9hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKvEHt5YX gxxJEraapAR1amWjGv8wHwYDVR0jBBgwFoAUJF/0XChlK/cVZYWj/Zp5dOU3XQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0I2M0YzMUFFNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19jVlpZV2pfWnA1ZE9VM1hR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkZfMFhDaGxLX2NWWllXal9acDVkT1UzWFFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0I2M0YzMUFFNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19j VlpZV2pfWnA1ZE9VM1hRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbYKKZ02jnnGLQhske5pH944mMeNvUKGdUkAD0guGWVUHfor0IJQY86 18DrHWxBpDqRWFQGzq6EKPjYS0IVGE5Z9LCviGtorgX6SLzUZoJqhQFMAYxbED4j FOADEUPL6pfmd1e/v1FOx6W28qEU47yIdJDMWlBz2E4AvOYuu1Y4dK1ROrxWQ2Cl jszeae/TC1T3eDo6uIESrB2053J9wjnSwtW0c6a5UzB0aDFHfpvHZNFFqqkJEnJR 42smtLvKkGtj7D+/N6XGuV8P3viEJs7yyb0CJt/3sopvG30K5fUk3uOete+qAroW pXujidBGbGP1jiSIW39LjcMBmNp+tR0= -----END CERTIFICATE-----Generated at Wed Jul 2 01:44:49 2025 by rpki-client