$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: hqN0dwameqASZB3YcE7l8GZ05a/LIov3oHm4gF8Iw74= Subject key identifier: 24:A9:EA:AB:47:B4:F3:CF:22:C6:FE:65:8F:59:FA:54:02:A2:24:48 Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: CF Signing time: Fri 13 Jun 2025 04:39:00 +0000 Manifest this update: Fri 13 Jun 2025 04:38:59 +0000 Manifest next update: Fri 20 Jun 2025 04:38:59 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: T1/LN2NCTKaIQkAlsMHE96XQ8ImKF5gUIX/ClpBGHRg=) 2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=) 3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Validity Not Before: Jun 13 04:38:59 2025 GMT Not After : Jun 20 04:38:59 2025 GMT Subject: CN=684bab64-3655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:fb:ab:8a:ae:79:12:5d:54:6b:d4:55:96: 23:02:d0:44:12:9c:c0:bb:47:dc:b5:12:bd:6f:85: b2:1e:26:07:40:1a:11:98:e1:c2:0a:56:ea:21:ef: 73:d2:b5:42:ea:fb:e4:38:60:f2:f8:47:35:58:67: aa:71:4f:62:4d:91:6e:98:b8:34:6d:17:f7:df:da: ed:99:ad:d7:d6:fe:15:27:23:11:9d:64:8a:4c:45: 84:65:fa:b6:a0:22:ad:ca:5b:38:25:b0:60:5b:e1: a7:ed:b2:2a:a9:7e:cf:db:46:cf:84:ca:92:bc:8a: 64:4e:4d:01:1c:49:9e:69:04:d8:0c:37:ad:9c:3f: d2:53:ef:bd:eb:84:22:60:de:7f:64:5a:e4:1e:68: 5c:c0:e0:54:8c:f8:d6:92:86:1d:f4:ab:de:ea:0d: 5e:cf:7c:bd:85:94:45:3f:79:fb:23:1d:56:e3:47: 95:4e:e2:3f:0d:1f:b7:99:f6:df:de:70:ff:46:1b: 7f:7d:4e:de:55:38:56:7c:44:4e:b6:74:d2:d4:d9: cb:06:43:90:10:4f:31:61:20:06:b9:69:21:f1:56: dd:fa:8b:6a:80:a0:64:19:75:ee:ab:90:77:be:a2: c5:a3:3f:a5:44:e5:9b:ee:e2:3e:07:0d:61:94:d5: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A9:EA:AB:47:B4:F3:CF:22:C6:FE:65:8F:59:FA:54:02:A2:24:48 X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f1:96:f8:b3:3d:a7:7c:54:45:20:d2:43:4f:c6:cb:4f:2c: 73:10:2f:77:4b:65:aa:6c:52:a9:7e:81:e7:66:61:53:01:d8: b4:5e:60:99:8c:96:3b:34:d3:59:55:84:e1:54:dd:6b:af:e6: f7:e9:b0:1c:37:40:f3:38:a6:ec:5b:8c:f1:3f:0c:9d:70:cc: 3f:74:66:2e:b9:28:91:6f:24:66:61:db:0f:a0:d5:91:54:ea: 54:26:d3:c4:a3:29:9f:17:8d:53:ab:27:2e:e1:df:da:b4:75: bb:c6:04:2a:b1:38:cc:e1:d8:67:dc:9b:9f:e2:37:bc:03:b6: f2:64:80:07:03:42:0e:11:3e:55:8b:7f:6a:96:9a:7d:a4:82: 4f:f1:e1:aa:4a:46:a4:7f:23:71:ed:05:8d:79:05:4d:64:fc: e7:fe:c8:60:3a:38:c4:a5:2f:f1:f5:eb:a8:d5:43:7c:a5:2a: 91:61:3b:7b:7c:fd:46:7d:d2:23:3b:06:83:18:38:d0:a2:54: f6:a7:d3:90:68:a4:68:d6:61:f6:2b:54:7e:fa:60:c7:e4:8f: 3e:32:e0:1a:ad:64:1b:87:a9:58:26:e9:c0:e8:74:c7:73:2e: c8:d7:41:31:2a:8d:e6:f0:a8:23:40:a6:ef:c0:51:1d:83:75: 83:9d:da:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQUIxMTAvBgNVBAUTKDI2NTcwM0Q4NTkzM0Y0NUQ5QjA0REFCNzcyMzc1ODRG QzkyRDlENDQwHhcNMjUwNjEzMDQzODU5WhcNMjUwNjIwMDQzODU5WjAYMRYwFAYD VQQDEw02ODRiYWI2NC0zNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9X7q4queRJdVGvUVZYjAtBEEpzAu0fctRK9b4WyHiYHQBoRmOHCClbqIe9z 0rVC6vvkOGDy+Ec1WGeqcU9iTZFumLg0bRf339rtma3X1v4VJyMRnWSKTEWEZfq2 oCKtyls4JbBgW+Gn7bIqqX7P20bPhMqSvIpkTk0BHEmeaQTYDDetnD/SU++964Qi YN5/ZFrkHmhcwOBUjPjWkoYd9Kve6g1ez3y9hZRFP3n7Ix1W40eVTuI/DR+3mfbf 3nD/Rht/fU7eVThWfEROtnTS1NnLBkOQEE8xYSAGuWkh8Vbd+otqgKBkGXXuq5B3 vqLFoz+lROWb7uI+Bw1hlNW9dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSp6qtH tPPPIsb+ZY9Z+lQCoiRIMB8GA1UdIwQYMBaAFCZXA9hZM/RdmwTat3I3WE/JLZ1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBBQi83NDQ1MjZGNjBG QTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlGMmJCTnEzY2pkWVQ4a3Ru VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlG MmJCTnEzY2pkWVQ4a3RuVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr8Zb4sz2nfFRFINJDT8bLTyxzEC93S2WqbFKpfoHnZmFTAdi0XmCZ jJY7NNNZVYThVN1rr+b36bAcN0DzOKbsW4zxPwydcMw/dGYuuSiRbyRmYdsPoNWR VOpUJtPEoymfF41Tqycu4d/atHW7xgQqsTjM4dhn3Juf4je8A7byZIAHA0IOET5V i39qlpp9pIJP8eGqSkakfyNx7QWNeQVNZPzn/shgOjjEpS/x9euo1UN8pSqRYTt7 fP1GfdIjOwaDGDjQolT2p9OQaKRo1mH2K1R++mDH5I8+MuAarWQbh6lYJunA6HTH cy7I10ExKo3m8KgjQKbvwFEdg3WDndqS -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:39 2025 by rpki-client