$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json) Hash identifier: MgtTN1HHub637kzp1fFdQA9FzMb8AMSBDV7TUp8+dc4= Subject key identifier: 88:95:AB:9B:EF:52:D3:48:91:10:E5:84:12:93:AC:E7:8A:B2:68:F2 Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft Manifest number: 0F Signing time: Tue 01 Jul 2025 08:52:37 +0000 Manifest this update: Tue 01 Jul 2025 08:52:36 +0000 Manifest next update: Tue 08 Jul 2025 08:52:36 +0000 Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: twd8e0o4D7JZmHJF7IgjmB2F2R3na2QNvp22EyEU/fc=) 2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: nMBBR9lD5xYiXfIobFM2SlzdnRZMD+0VZpUbgMpJGzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Validity Not Before: Jul 1 08:52:36 2025 GMT Not After : Jul 8 08:52:36 2025 GMT Subject: CN=6863a1d5-cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:89:bb:2f:60:4e:32:20:29:1b:bb:5e:7b: a8:df:0e:47:b2:e9:d0:dc:f4:12:67:7b:dc:78:e2: c2:f1:bc:13:66:e9:0a:dd:ac:b2:2e:f8:48:6c:2e: f1:39:8d:a2:16:53:e5:9f:cd:ad:96:13:aa:69:40: 7d:84:0f:5e:4b:9b:a7:31:df:8a:e4:b6:6a:57:b9: 10:72:b8:47:61:94:c1:e5:ca:d5:52:a8:04:f4:0d: 20:c4:85:18:1b:7c:95:91:cd:37:1e:bc:f2:0b:98: 5d:62:e2:c0:de:fd:82:17:32:e7:b8:fd:bd:8a:61: 82:c4:96:8f:38:d6:b6:aa:68:70:b3:11:30:a3:07: 5e:a2:fa:b9:41:72:db:e4:81:28:99:5b:ef:ae:f1: 68:73:d0:e9:2b:30:3f:a2:2d:18:45:a2:25:57:d7: ce:3d:23:33:ef:66:53:07:52:29:0c:18:c9:52:cc: 0f:3f:8f:17:3c:7c:8f:0b:88:d8:87:5e:88:e2:90: 77:2c:54:79:28:e2:06:01:10:0c:bc:17:9b:a9:d8: 36:b3:bc:1f:df:db:a4:dc:90:99:a2:a0:59:13:ab: 0b:6b:a5:c1:7d:8d:21:62:db:d0:30:51:10:20:63: 3a:15:a1:a4:e5:3d:fa:6d:4a:d7:90:63:00:a4:8e: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:95:AB:9B:EF:52:D3:48:91:10:E5:84:12:93:AC:E7:8A:B2:68:F2 X509v3 Authority Key Identifier: keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:0e:4c:06:74:d7:63:d5:85:65:7e:a2:6e:13:e0:89:05: 0f:7c:6a:be:e6:e4:66:ed:20:b6:45:01:a2:fa:5b:78:df:a3: 53:b5:00:80:bb:0f:2c:d9:62:fa:91:0b:a3:bf:ff:3e:d1:9c: ca:e2:f0:00:cb:6f:ed:fd:f3:39:55:e8:10:a6:c5:39:4d:be: e2:38:e8:c9:6d:d1:6f:e5:09:52:f6:37:e9:fa:10:20:2d:2f: 56:41:26:20:8d:a1:07:19:c9:e5:17:08:0b:a9:0c:dd:bc:46: eb:f3:c1:82:dc:df:a9:27:8c:06:6b:62:11:4b:53:b4:83:bc: ee:ce:8c:92:e0:b0:28:ec:ff:c5:f3:9d:cd:08:e2:67:ed:a2: e3:a3:0d:61:94:5b:fd:fc:62:98:7b:b4:be:84:2d:81:e3:c9: 89:eb:e7:c3:58:e7:1b:c1:c1:f2:0d:19:b9:8e:f3:fa:5e:7e: f0:13:55:e9:8a:cd:51:29:e4:36:b3:a7:56:5c:c5:51:d6:ec: e1:56:44:8e:33:2a:83:4e:e7:33:32:bd:4b:7b:46:d3:19:11: 40:72:b5:84:02:1e:b3:92:d9:4e:67:04:9b:45:f0:43:7a:eb: 55:f3:28:de:d9:3d:d0:d2:58:35:4c:7e:2a:33:d4:6e:8d:49: c2:2d:21:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REYyQjExMC8GA1UEBRMoOENEMTkwQTE0M0FBMkUxRTQ4NzMwM0IxM0RDMDUzRUQx N0JDRUIxRTAeFw0yNTA3MDEwODUyMzZaFw0yNTA3MDgwODUyMzZaMBgxFjAUBgNV BAMTDTY4NjNhMWQ1LWNjOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChsom7L2BOMiApG7tee6jfDkey6dDc9BJne9x44sLxvBNm6QrdrLIu+EhsLvE5 jaIWU+Wfza2WE6ppQH2ED15Lm6cx34rktmpXuRByuEdhlMHlytVSqAT0DSDEhRgb fJWRzTcevPILmF1i4sDe/YIXMue4/b2KYYLElo841raqaHCzETCjB16i+rlBctvk gSiZW++u8Whz0OkrMD+iLRhFoiVX1849IzPvZlMHUikMGMlSzA8/jxc8fI8LiNiH XojikHcsVHko4gYBEAy8F5up2DazvB/f26TckJmioFkTqwtrpcF9jSFi29AwURAg YzoVoaTlPfptSteQYwCkjn+jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiJWrm+9S 00iREOWEEpOs54qyaPIwHwYDVR0jBBgwFoAUjNGQoUOqLh5IcwOxPcBT7Re86x4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERjJCLzZDMkI3QjFDNDFC QjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1SWN3T3hQY0JUN1JlODZ4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5HUW9VT3FMaDVJY3dPeFBjQlQ3UmU4Nng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RjJCLzZDMkI3QjFDNDFCQjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1 SWN3T3hQY0JUN1JlODZ4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFskDkwGdNdj1YVlfqJuE+CJBQ98ar7m5GbtILZFAaL6W3jfo1O1AIC7 DyzZYvqRC6O//z7RnMri8ADLb+398zlV6BCmxTlNvuI46Mlt0W/lCVL2N+n6ECAt L1ZBJiCNoQcZyeUXCAupDN28RuvzwYLc36knjAZrYhFLU7SDvO7OjJLgsCjs/8Xz nc0I4mftouOjDWGUW/38Yph7tL6ELYHjyYnr58NY5xvBwfINGbmO8/pefvATVemK zVEp5Dazp1ZcxVHW7OFWRI4zKoNO5zMyvUt7RtMZEUBytYQCHrOS2U5nBJtF8EN6 61XzKN7ZPdDSWDVMfioz1G6NScItIXw= -----END CERTIFICATE-----Generated at Wed Jul 2 15:43:10 2025 by rpki-client