$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: IMInbwaB8vmbC+JXJB2EbnB/WpYGkbx24hv+bscc318= Subject key identifier: 04:71:C4:54:3C:F9:F5:89:11:EA:77:73:CB:6B:5E:4B:F4:1D:2A:8C Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A24 Signing time: Thu 12 Jun 2025 19:36:18 +0000 Manifest this update: Thu 12 Jun 2025 19:36:18 +0000 Manifest next update: Thu 19 Jun 2025 19:36:18 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: hMX9J1PX6o6B5BvOFwDCNSzx4MSrTMMoGgnugaUP/sU=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: NYdc2f4yDizOBPmg8EBE/rQVPUKcax5Hh13GoWVtgRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Jun 12 19:36:18 2025 GMT Not After : Jun 19 19:36:18 2025 GMT Subject: CN=684b2c32-ed20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:2b:20:e4:1d:a2:b7:ab:d1:8a:c8:50:6e: fe:c4:34:0b:98:f8:91:a5:40:1a:63:4c:b0:c7:b0: ab:70:80:68:07:3f:6d:18:e5:4b:38:2e:4e:50:12: b1:64:75:6f:97:24:b8:84:d3:85:1f:36:8b:2e:6c: b7:1f:13:7f:c5:cb:19:ea:73:7c:e7:3d:a6:df:2e: ee:b4:7d:5f:14:f7:f7:80:77:78:93:c9:ea:9d:cd: 90:3d:26:27:8f:5b:ef:51:c3:4d:65:61:a3:58:7f: 52:fc:7d:d3:d1:4d:e8:92:2b:b2:99:15:64:86:64: 6f:3e:3a:9e:32:c1:f8:ba:d6:f7:53:69:ea:dd:64: b7:41:d9:ec:40:50:ba:a5:5b:02:8b:df:b5:b4:da: e4:83:1c:49:08:55:ba:e2:da:c1:84:51:ab:c3:41: 4a:3d:9e:7c:de:64:10:52:ba:5e:d8:c5:f0:aa:bb: ac:51:f0:ea:2f:ee:e7:7a:08:4b:8a:a4:99:6c:d4: d4:77:47:69:a8:8e:03:8c:61:06:33:08:34:91:b7: 13:e5:a7:af:14:42:eb:3c:97:22:60:9f:86:8b:eb: 38:86:48:94:44:03:ad:5d:42:56:01:bf:2c:bb:cd: b7:dd:c1:2d:da:af:fc:3d:c8:33:62:f1:ed:41:72: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:C4:54:3C:F9:F5:89:11:EA:77:73:CB:6B:5E:4B:F4:1D:2A:8C X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3b:35:47:a7:7d:a6:85:e7:84:2a:4f:35:61:2b:29:b1:b3: c6:4d:fd:02:d3:46:90:63:18:b4:a7:35:c6:16:78:bc:48:b7: a8:47:c3:c6:55:34:38:17:30:12:94:cc:f4:25:af:1d:c8:48: 7d:e5:3d:06:27:6c:1b:16:6e:54:10:9a:cc:ae:e0:dc:11:a0: ae:56:9a:3c:9a:07:ba:83:04:00:39:ef:7e:f6:ad:cc:ae:02: b9:fc:cf:70:6d:c6:11:d4:90:5e:5c:89:72:a3:eb:d8:f7:96: 52:85:c7:57:64:07:5a:37:89:a0:47:db:f8:ec:ce:02:a8:21: 25:16:9f:a5:31:71:73:76:03:a1:52:23:02:cf:ff:17:0b:82: 47:58:97:c4:6f:fc:14:51:23:29:8e:1b:f6:dc:14:46:09:01: 22:02:fd:0c:ab:95:70:52:24:a6:cc:c6:4a:68:13:f9:a4:54: 84:f9:77:28:cb:bc:1b:a6:f3:7a:38:80:15:59:20:d6:11:d0: ea:05:6d:39:72:27:2b:2c:4f:ad:fe:9f:c3:85:11:60:15:b7: 63:47:bd:60:c2:8a:b6:fe:8c:a6:a0:c2:36:32:65:be:f8:9c: f8:0b:ff:d7:77:67:cb:0d:2b:5a:4e:c2:f9:10:8e:ef:d8:70: ac:ce:5c:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUwNjEyMTkzNjE4WhcNMjUwNjE5MTkzNjE4WjAYMRYwFAYD VQQDEw02ODRiMmMzMi1lZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg0rIOQdorer0YrIUG7+xDQLmPiRpUAaY0ywx7CrcIBoBz9tGOVLOC5OUBKx ZHVvlyS4hNOFHzaLLmy3HxN/xcsZ6nN85z2m3y7utH1fFPf3gHd4k8nqnc2QPSYn j1vvUcNNZWGjWH9S/H3T0U3okiuymRVkhmRvPjqeMsH4utb3U2nq3WS3QdnsQFC6 pVsCi9+1tNrkgxxJCFW64trBhFGrw0FKPZ583mQQUrpe2MXwqrusUfDqL+7neghL iqSZbNTUd0dpqI4DjGEGMwg0kbcT5aevFELrPJciYJ+Gi+s4hkiURAOtXUJWAb8s u8233cEt2q/8PcgzYvHtQXKFOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARxxFQ8 +fWJEep3c8trXkv0HSqMMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6OzVHp32mheeEKk81YSspsbPGTf0C00aQYxi0pzXGFni8SLeoR8PG VTQ4FzASlMz0Ja8dyEh95T0GJ2wbFm5UEJrMruDcEaCuVpo8mge6gwQAOe9+9q3M rgK5/M9wbcYR1JBeXIlyo+vY95ZShcdXZAdaN4mgR9v47M4CqCElFp+lMXFzdgOh UiMCz/8XC4JHWJfEb/wUUSMpjhv23BRGCQEiAv0Mq5VwUiSmzMZKaBP5pFSE+Xco y7wbpvN6OIAVWSDWEdDqBW05cicrLE+t/p/DhRFgFbdjR71gwoq2/oymoMI2MmW+ +Jz4C//Xd2fLDStaTsL5EI7v2HCszlwC -----END CERTIFICATE-----Generated at Sat Jun 14 17:34:49 2025 by rpki-client