$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: k6D0tmxjoUyOvBIKf82atP9gMwW3AJgpO4o4MvRFJig= Subject key identifier: FD:53:03:70:A3:BF:5D:A8:43:8A:E1:BB:67:39:8E:C8:A9:43:E2:C6 Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0AA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0A9C Signing time: Fri 06 Jun 2025 19:36:57 +0000 Manifest this update: Fri 06 Jun 2025 19:36:56 +0000 Manifest next update: Fri 13 Jun 2025 19:36:56 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: Zg/98OBVbm/U/bR3BZwOyQWGcAf5SFfoTaAYcajYuaE=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2724 (0xaa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Jun 6 19:36:56 2025 GMT Not After : Jun 13 19:36:56 2025 GMT Subject: CN=68434358-d025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:02:67:fc:ea:6a:77:dc:d9:4e:db:d0:57: 19:cf:47:15:86:3b:56:6c:bc:70:16:e4:29:fa:9b: 7a:7e:37:01:b0:52:42:5d:92:67:50:09:dd:1f:99: ed:62:ef:e0:31:e1:94:11:0f:d8:15:79:a3:7e:33: 4d:f7:c5:cf:70:80:5e:bb:a5:92:a2:9f:4c:5f:74: ff:74:4c:d6:bd:37:73:73:81:66:20:23:a3:e6:e5: 1d:1a:78:68:06:68:69:7b:45:8b:6c:19:78:6a:5b: 20:fa:4d:bb:62:ac:dc:75:ce:40:ad:6b:20:15:1b: d0:90:15:85:14:f1:4c:c6:4b:e4:50:e6:57:56:ba: 07:8e:42:26:49:55:28:26:ae:70:cf:4b:93:7e:ea: e2:8d:73:4b:26:ce:a5:c2:92:18:9a:4c:8a:e5:d0: 4b:e3:73:cc:b0:6b:71:10:8d:8b:a5:8d:be:97:24: 5c:8f:eb:20:25:70:cd:67:9b:88:8f:30:ed:77:72: c8:c3:73:92:24:f6:20:67:21:16:6b:f8:22:31:b2: eb:24:c7:53:de:bb:b3:0d:a2:1a:13:7b:2a:34:0c: 68:24:e3:42:11:cf:76:6b:33:dd:9e:2e:0a:e6:0c: d3:1c:f0:6c:97:1e:48:9a:11:5a:4f:a3:67:e7:da: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:03:70:A3:BF:5D:A8:43:8A:E1:BB:67:39:8E:C8:A9:43:E2:C6 X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:43:f3:56:ca:38:88:6a:96:ef:c0:07:92:90:e8:8d:61:61: a1:e1:02:b2:30:70:0c:09:34:2a:b0:8f:d2:a4:39:98:dd:49: bc:a4:a9:d1:27:94:a7:48:d9:d4:67:2c:75:3b:a0:97:c9:b6: 0e:6f:a2:32:c9:44:07:40:0b:1f:42:da:67:71:a6:ed:ee:96: 40:6b:e1:f7:80:43:31:22:29:9d:5c:28:24:e5:3d:1b:f4:0d: 8f:f9:7d:bc:be:12:6c:79:65:f9:ec:f0:ed:16:d7:08:90:79: 7a:b0:c6:89:db:e6:33:3d:b2:25:02:9f:a5:3c:d5:ae:84:0e: 4a:09:2b:93:23:7a:6d:ad:58:7a:d5:40:94:a2:1f:d0:71:21: b2:e8:bb:50:32:de:c8:de:e7:6f:26:85:cf:56:4b:e5:f8:6e: 59:3f:8f:27:03:25:d2:16:86:8c:ba:1c:f6:94:7a:53:f8:94: e3:02:f7:18:9f:28:b6:e0:bb:09:a3:af:d2:0a:b4:95:58:50: 27:67:d0:39:20:6f:8c:c9:a4:d6:d7:4d:0a:b0:e0:80:ab:e7: 8a:8d:66:99:d8:cb:6a:e5:94:0a:1b:16:cd:b1:1e:3c:4a:c6: 25:e9:d8:16:3a:07:20:f6:5b:48:90:d4:16:3a:b5:83:4e:80: f6:6c:2d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUwNjA2MTkzNjU2WhcNMjUwNjEzMTkzNjU2WjAYMRYwFAYD VQQDEw02ODQzNDM1OC1kMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzYCZ/zqanfc2U7b0FcZz0cVhjtWbLxwFuQp+pt6fjcBsFJCXZJnUAndH5nt Yu/gMeGUEQ/YFXmjfjNN98XPcIBeu6WSop9MX3T/dEzWvTdzc4FmICOj5uUdGnho Bmhpe0WLbBl4alsg+k27Yqzcdc5ArWsgFRvQkBWFFPFMxkvkUOZXVroHjkImSVUo Jq5wz0uTfurijXNLJs6lwpIYmkyK5dBL43PMsGtxEI2LpY2+lyRcj+sgJXDNZ5uI jzDtd3LIw3OSJPYgZyEWa/giMbLrJMdT3ruzDaIaE3sqNAxoJONCEc92azPdni4K 5gzTHPBslx5ImhFaT6Nn59pCsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1TA3Cj v12oQ4rhu2c5jsipQ+LGMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaQ/NWyjiIapbvwAeSkOiNYWGh4QKyMHAMCTQqsI/SpDmY3Um8pKnR J5SnSNnUZyx1O6CXybYOb6IyyUQHQAsfQtpncabt7pZAa+H3gEMxIimdXCgk5T0b 9A2P+X28vhJseWX57PDtFtcIkHl6sMaJ2+YzPbIlAp+lPNWuhA5KCSuTI3ptrVh6 1UCUoh/QcSGy6LtQMt7I3udvJoXPVkvl+G5ZP48nAyXSFoaMuhz2lHpT+JTjAvcY nyi24LsJo6/SCrSVWFAnZ9A5IG+MyaTW100KsOCAq+eKjWaZ2Mtq5ZQKGxbNsR48 SsYl6dgWOgcg9ltIkNQWOrWDToD2bC1V -----END CERTIFICATE-----Generated at Sat Jun 7 19:51:04 2025 by rpki-client