$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json) Hash identifier: 89wHqfo4aHlXlbcRT7vT1kWNodhEQsAmx9LiynLC6HA= Subject key identifier: BC:95:30:A0:D0:2C:C7:CD:A1:8E:E5:27:16:12:D4:30:FE:61:C7:55 Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Certificate serial: 1785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft Manifest number: 1775 Signing time: Mon 16 Jun 2025 16:39:14 +0000 Manifest this update: Mon 16 Jun 2025 16:39:14 +0000 Manifest next update: Mon 23 Jun 2025 16:39:14 +0000 Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: zMnTAo0YXe4E97TlwD2HhGfSTytn6ZYW9oW4UOD9yS4=) 2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: AFv3+8G4+14cWKdLCa3SvwGQd6CuiEszUkutLoyR7bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6021 (0x1785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Validity Not Before: Jun 16 16:39:14 2025 GMT Not After : Jun 23 16:39:14 2025 GMT Subject: CN=685048b2-a959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:5a:b5:1a:2b:20:10:f1:b5:f2:75:a1:8f: 16:6b:70:48:56:29:e7:bc:d2:4e:88:79:ef:df:20: fe:29:83:e2:2f:12:18:c3:79:dc:ec:77:65:03:13: 53:25:51:9d:95:6e:61:59:63:f9:6a:a5:f0:70:07: 8e:1c:ed:c9:64:cf:13:51:15:21:2c:a6:63:1d:b5: 9f:00:ed:6b:72:54:1f:e8:61:98:1f:64:d4:2a:3a: dd:b4:0c:4e:91:d0:57:20:a7:b0:ba:17:a2:c6:0e: fb:ae:de:7e:86:33:c0:c4:ae:52:b2:38:49:92:f8: 8d:53:4c:e5:26:73:44:6b:51:f3:f1:15:02:57:9a: 6f:75:aa:c1:50:89:06:e7:21:ea:9a:b4:51:1b:26: 92:43:56:49:f1:4d:33:98:30:41:94:89:87:48:0a: 91:56:91:27:74:7a:08:40:ef:de:50:26:61:a2:4e: db:0c:1d:75:aa:47:0d:23:b7:42:87:b7:86:ea:88: cb:bd:32:d1:e1:cc:6d:1e:96:00:42:cd:98:8e:56: 74:3b:c4:05:ef:d4:fc:60:c2:bc:b0:62:5e:46:a4: 3f:81:c3:0b:05:1d:bc:75:a1:97:04:00:b9:2b:f9: 78:e6:8a:42:11:f1:51:0b:62:15:d7:e4:76:37:2b: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:95:30:A0:D0:2C:C7:CD:A1:8E:E5:27:16:12:D4:30:FE:61:C7:55 X509v3 Authority Key Identifier: keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:06:97:1f:5f:96:00:f2:4e:4d:06:46:d5:f5:28:c8:8d:92: 58:6f:c9:a5:b8:79:87:66:d5:fa:51:95:d7:36:a4:0b:4d:53: 95:77:b3:04:66:15:1e:35:ee:a1:f7:11:60:04:94:75:ac:ed: 7e:42:26:04:75:fb:95:a4:93:fa:25:a5:89:e6:ff:f0:1b:02: 8e:14:01:2f:06:f1:20:bc:a4:79:a1:e1:93:8b:7d:f3:3e:02: 30:9d:98:f9:42:fc:d4:df:5e:a4:31:42:4e:eb:ba:d1:d2:28: e5:0f:37:90:27:36:9a:b7:f8:80:0b:e5:44:32:96:31:8c:ef: 97:7c:30:7b:0f:3c:e6:fd:bc:a5:bd:48:f1:08:4a:2c:d3:43: e1:45:ee:2e:53:8b:ed:55:47:fd:05:8a:38:be:ab:89:56:6e: ca:e4:cc:0b:1c:bf:a0:b6:02:e3:c2:31:22:31:4c:dd:ba:d4: 16:bf:4a:4e:51:e1:f0:06:58:d0:89:01:72:91:23:15:fc:9c: 11:16:93:88:be:6b:b9:55:62:a5:cf:e4:96:f3:23:57:25:f6: 64:84:9d:f1:23:4a:bd:e3:f2:59:eb:26:57:8c:2c:0a:c6:93: 83:f6:f7:b4:d4:aa:0d:a1:ba:73:d6:63:ab:61:a4:03:80:78: 0a:0b:07:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy MjdGNEU4N0IwHhcNMjUwNjE2MTYzOTE0WhcNMjUwNjIzMTYzOTE0WjAYMRYwFAYD VQQDEw02ODUwNDhiMi1hOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1BatRorIBDxtfJ1oY8Wa3BIVinnvNJOiHnv3yD+KYPiLxIYw3nc7HdlAxNT JVGdlW5hWWP5aqXwcAeOHO3JZM8TURUhLKZjHbWfAO1rclQf6GGYH2TUKjrdtAxO kdBXIKewuheixg77rt5+hjPAxK5SsjhJkviNU0zlJnNEa1Hz8RUCV5pvdarBUIkG 5yHqmrRRGyaSQ1ZJ8U0zmDBBlImHSAqRVpEndHoIQO/eUCZhok7bDB11qkcNI7dC h7eG6ojLvTLR4cxtHpYAQs2YjlZ0O8QF79T8YMK8sGJeRqQ/gcMLBR28daGXBAC5 K/l45opCEfFRC2IV1+R2NytjXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyVMKDQ LMfNoY7lJxYS1DD+YcdVMB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1 RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5 aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHBpcfX5YA8k5NBkbV9SjIjZJYb8mluHmHZtX6UZXXNqQLTVOVd7ME ZhUeNe6h9xFgBJR1rO1+QiYEdfuVpJP6JaWJ5v/wGwKOFAEvBvEgvKR5oeGTi33z PgIwnZj5QvzU316kMUJO67rR0ijlDzeQJzaat/iAC+VEMpYxjO+XfDB7Dzzm/byl vUjxCEos00PhRe4uU4vtVUf9BYo4vquJVm7K5MwLHL+gtgLjwjEiMUzdutQWv0pO UeHwBljQiQFykSMV/JwRFpOIvmu5VWKlz+SW8yNXJfZkhJ3xI0q94/JZ6yZXjCwK xpOD9ve01KoNobpz1mOrYaQDgHgKCwc4 -----END CERTIFICATE-----Generated at Tue Jun 17 11:32:55 2025 by rpki-client