$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: wtD+67wArdwDs21zg5HTsUMC3XrmqDNsEHMYdJqV9xU= Subject key identifier: B7:C2:88:06:58:68:A0:BC:17:48:5D:23:1C:FF:4E:47:AB:BC:B7:A8 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0BE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0BD9 Signing time: Tue 10 Jun 2025 18:43:30 +0000 Manifest this update: Tue 10 Jun 2025 18:43:30 +0000 Manifest next update: Tue 17 Jun 2025 18:43:30 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: 217Na0jiCL7pWNIkjRJNa5w05Le0Ma9IX0rxNw0Qb8g=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3040 (0xbe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Jun 10 18:43:30 2025 GMT Not After : Jun 17 18:43:30 2025 GMT Subject: CN=68487cd2-2e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:9f:34:2c:52:b9:fe:4e:cc:bd:85:b3:f2: 1b:14:ca:3f:89:bd:c7:c1:87:bd:9c:d9:33:69:7d: 09:b8:c0:78:1c:a7:f2:21:92:e5:a7:62:5c:03:e1: 2c:42:bf:e0:1a:f0:a3:2a:70:00:21:f9:50:82:19: ed:1c:e5:52:93:e1:18:ef:cd:96:a9:78:11:aa:b8: fd:6f:45:d8:cc:cb:12:33:73:13:3b:fb:ae:f1:4e: 04:37:24:4d:f6:db:24:37:56:0d:55:ff:ca:86:98: 8a:c9:5b:13:2a:3c:d4:70:34:5a:50:20:00:1c:cb: 45:4d:a7:89:f0:51:cf:30:80:f8:c9:62:1c:d6:79: 9f:bb:19:e5:b0:ea:44:f4:df:d0:8f:b3:b9:72:bf: f7:1d:1f:57:ee:9e:a9:11:d7:00:3f:ac:6d:95:80: 27:60:fc:aa:9c:9c:87:da:c2:bb:8b:96:cc:fb:a3: f6:64:63:ce:fd:3e:15:6a:b5:37:4e:55:df:6a:ed: 7f:11:b9:62:ac:89:3f:ee:66:e3:ea:04:f9:d6:05: 57:87:96:1a:02:87:08:75:f4:70:a7:2f:52:26:14: 01:46:ca:aa:72:fd:51:95:23:af:d9:c2:df:a3:8a: a2:02:de:68:27:ff:c2:4e:b9:c4:a9:cc:c6:57:af: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C2:88:06:58:68:A0:BC:17:48:5D:23:1C:FF:4E:47:AB:BC:B7:A8 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:79:13:f6:06:f7:35:d8:20:cb:7e:37:34:09:e4:96:11:b8: ce:7c:d3:dd:b1:03:61:1e:03:ae:9b:7c:67:05:51:9b:0f:d0: 06:aa:73:6f:89:56:dd:62:90:43:4f:34:a4:2f:86:f0:73:cb: bb:75:50:ea:57:91:67:85:e1:f9:39:23:47:3b:a7:1f:a1:99: d7:a5:08:24:e1:e5:d9:9f:b6:de:86:53:ea:06:57:5e:23:e6: a6:c8:7b:12:5b:e7:c2:28:2d:c5:d0:31:ed:df:3f:de:6c:5f: 69:77:ae:2c:dd:51:24:db:39:33:de:bf:76:07:c6:a1:a1:f0: 26:25:80:03:c0:ef:29:8c:27:67:4d:27:d7:59:f2:00:34:c7: fb:e3:ec:8e:35:23:26:73:65:1d:2d:a4:e5:c7:00:79:ca:5d: cd:3b:0b:32:8c:c3:da:b4:06:6a:3f:b5:5e:95:df:04:2f:c1: b2:e9:68:99:04:69:b5:9c:0e:74:24:ec:3c:7d:e8:1f:b1:4f: b3:48:03:01:d6:c0:a1:80:d9:ab:45:49:ee:77:a0:93:ae:6f: c1:a0:ef:0c:90:bd:5f:b4:ee:9e:70:e2:44:30:5c:c1:bf:32: f7:4c:ef:ab:1a:5a:e0:ee:d5:cd:12:4d:8d:8b:69:93:dd:c7: bb:09:f4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUwNjEwMTg0MzMwWhcNMjUwNjE3MTg0MzMwWjAYMRYwFAYD VQQDEw02ODQ4N2NkMi0yZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/mfNCxSuf5OzL2Fs/IbFMo/ib3HwYe9nNkzaX0JuMB4HKfyIZLlp2JcA+Es Qr/gGvCjKnAAIflQghntHOVSk+EY782WqXgRqrj9b0XYzMsSM3MTO/uu8U4ENyRN 9tskN1YNVf/KhpiKyVsTKjzUcDRaUCAAHMtFTaeJ8FHPMID4yWIc1nmfuxnlsOpE 9N/Qj7O5cr/3HR9X7p6pEdcAP6xtlYAnYPyqnJyH2sK7i5bM+6P2ZGPO/T4VarU3 TlXfau1/EblirIk/7mbj6gT51gVXh5YaAocIdfRwpy9SJhQBRsqqcv1RlSOv2cLf o4qiAt5oJ//CTrnEqczGV69p5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfCiAZY aKC8F0hdIxz/TkervLeoMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4eRP2Bvc12CDLfjc0CeSWEbjOfNPdsQNhHgOum3xnBVGbD9AGqnNv iVbdYpBDTzSkL4bwc8u7dVDqV5FnheH5OSNHO6cfoZnXpQgk4eXZn7behlPqBlde I+amyHsSW+fCKC3F0DHt3z/ebF9pd64s3VEk2zkz3r92B8ahofAmJYADwO8pjCdn TSfXWfIANMf74+yONSMmc2UdLaTlxwB5yl3NOwsyjMPatAZqP7Veld8EL8Gy6WiZ BGm1nA50JOw8fegfsU+zSAMB1sChgNmrRUnud6CTrm/BoO8MkL1ftO6ecOJEMFzB vzL3TO+rGlrg7tXNEk2Ni2mT3ce7CfQq -----END CERTIFICATE-----Generated at Thu Jun 12 00:49:34 2025 by rpki-client