$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json) Hash identifier: uukSeYCn94XDI7atQsX7CI2g7+jqZ76fAPoauWJzdzc= Subject key identifier: CE:0D:5B:88:7C:74:5C:85:9C:1F:AF:97:A6:FE:DD:D8:7F:57:D9:E6 Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft Manifest number: 1EEC Signing time: Mon 30 Jun 2025 16:34:45 +0000 Manifest this update: Mon 30 Jun 2025 16:34:44 +0000 Manifest next update: Mon 07 Jul 2025 16:34:44 +0000 Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: Z0wbHTWuktDdiRq8HZFWUignOJqElAaZy3Ir9UG9xGM=) 2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: 18yGqSgC4OjskRlJV7bTeEZSgygKIsdz22IPs64qVtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Jun 30 16:34:44 2025 GMT Not After : Jul 7 16:34:44 2025 GMT Subject: CN=6862bca4-e0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:b5:f9:11:52:25:8b:f7:b7:de:a5:aa:36: 04:6a:09:76:41:be:19:22:37:a2:97:8d:1e:47:1c: b2:e6:a5:4e:3a:a0:40:25:a4:9f:77:45:df:70:3d: 3a:81:46:78:e4:7c:7c:ba:b3:8a:9f:aa:e5:81:8a: f7:e8:de:8a:72:96:99:9b:de:8f:c3:fe:76:d1:a8: 5f:a9:09:ba:b8:04:ff:cb:32:11:b0:f7:ee:23:09: aa:fa:6c:e4:c0:c9:66:e8:b6:bf:fd:c9:f6:90:b3: 5c:8a:83:5e:1f:91:d2:80:e4:c8:9c:04:fd:ea:04: 63:b8:53:8f:97:0d:aa:c5:8f:01:78:0b:6f:fc:ec: 0b:95:6a:8e:f5:62:dc:c5:cd:f4:27:19:17:72:42: 8a:81:7b:61:09:86:40:20:40:a1:6a:de:19:0c:b6: 51:fa:8a:9d:80:10:3b:bd:f5:0e:66:3c:e4:e4:dd: 85:0c:36:2c:82:48:f5:07:29:81:01:50:82:65:39: 7a:3e:0a:36:e1:ba:56:86:bc:38:ea:41:5a:1f:24: 09:06:97:68:1d:2e:2b:ff:27:9a:05:c0:45:d7:23: 4c:af:90:28:54:2c:95:99:46:9f:18:67:b4:b7:df: 69:90:25:99:1a:85:20:82:81:a6:d6:31:62:fe:43: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0D:5B:88:7C:74:5C:85:9C:1F:AF:97:A6:FE:DD:D8:7F:57:D9:E6 X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:31:64:cd:45:19:70:13:2b:92:5d:f4:aa:2c:1d:01:bb:c7: 7b:06:65:80:35:87:44:fe:ef:51:94:ef:42:25:30:e3:8e:f5: 74:27:9e:2d:5e:75:3f:86:16:b4:0e:c2:f1:9c:8a:f5:62:7b: 0f:50:a4:f1:e9:ec:56:3e:62:58:d8:5b:95:05:fc:f0:ea:30: 41:3e:dc:8f:be:70:da:7d:a9:36:90:b6:3c:80:2b:1b:97:e1: 97:52:d5:78:a0:9c:d1:b8:1b:53:ff:c3:fd:1a:a2:00:71:69: e2:91:d3:3f:31:68:e6:c3:27:b6:2e:63:ea:8c:be:ce:7e:21: c3:95:e2:f8:83:35:f9:ff:c5:20:ce:8d:e0:a2:34:39:18:af: f4:cc:71:d5:23:b0:eb:44:a3:df:b2:12:bc:c0:a7:85:9f:a4: 08:f6:1b:f2:9a:81:5b:68:75:54:0a:41:b4:7c:2f:51:c8:5e: 9c:54:ad:09:99:99:ef:6f:f4:e7:c1:da:5b:ba:eb:b7:06:d0: c9:26:b9:33:c4:52:e1:ab:f7:f8:1d:56:29:72:1d:b3:ab:4c: 8c:79:a5:10:7a:f6:d1:37:32:d2:3e:09:18:a0:6a:9f:65:66: f6:c5:d7:66:aa:f1:51:0d:6f:04:84:4e:50:93:1a:a8:21:9d: cd:1b:89:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjUwNjMwMTYzNDQ0WhcNMjUwNzA3MTYzNDQ0WjAYMRYwFAYD VQQDEw02ODYyYmNhNC1lMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznu1+RFSJYv3t96lqjYEagl2Qb4ZIjeil40eRxyy5qVOOqBAJaSfd0XfcD06 gUZ45Hx8urOKn6rlgYr36N6KcpaZm96Pw/520ahfqQm6uAT/yzIRsPfuIwmq+mzk wMlm6La//cn2kLNcioNeH5HSgOTInAT96gRjuFOPlw2qxY8BeAtv/OwLlWqO9WLc xc30JxkXckKKgXthCYZAIEChat4ZDLZR+oqdgBA7vfUOZjzk5N2FDDYsgkj1BymB AVCCZTl6Pgo24bpWhrw46kFaHyQJBpdoHS4r/yeaBcBF1yNMr5AoVCyVmUafGGe0 t99pkCWZGoUggoGm1jFi/kPLPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4NW4h8 dFyFnB+vl6b+3dh/V9nmMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V X0Nnei1GY1NranpVRjdmNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIMWTNRRlwEyuSXfSqLB0Bu8d7BmWANYdE/u9RlO9CJTDjjvV0J54t XnU/hha0DsLxnIr1YnsPUKTx6exWPmJY2FuVBfzw6jBBPtyPvnDafak2kLY8gCsb l+GXUtV4oJzRuBtT/8P9GqIAcWnikdM/MWjmwye2LmPqjL7OfiHDleL4gzX5/8Ug zo3gojQ5GK/0zHHVI7DrRKPfshK8wKeFn6QI9hvymoFbaHVUCkG0fC9RyF6cVK0J mZnvb/Tnwdpbuuu3BtDJJrkzxFLhq/f4HVYpch2zq0yMeaUQevbRNzLSPgkYoGqf ZWb2xddmqvFRDW8EhE5QkxqoIZ3NG4ns -----END CERTIFICATE-----Generated at Tue Jul 1 19:01:27 2025 by rpki-client