$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: 1pA6AbGte98N9l4ei7s0xkSAfsVrR/T/Q0goQz5j3K4= Subject key identifier: 36:3C:AA:07:17:E4:3C:8B:F0:A7:E6:CA:3C:D2:5C:47:10:33:84:D0 Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 16ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 16E3 Signing time: Sat 14 Jun 2025 16:36:36 +0000 Manifest this update: Sat 14 Jun 2025 16:36:36 +0000 Manifest next update: Sat 21 Jun 2025 16:36:36 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: xOXP4Jz1UdTVl5gaTlACacMTqajWvgI/mmHZIYqqU0c=) 2: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (hash: 995PegsL3ZUwg9uvRMBU899Zay98EopTGO6qSEJefks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5869 (0x16ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Jun 14 16:36:36 2025 GMT Not After : Jun 21 16:36:36 2025 GMT Subject: CN=684da514-02e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:00:d4:3c:28:76:9e:2f:4f:0c:38:e6:14: 48:21:d1:4c:e4:1a:6b:7f:04:d1:92:c0:02:19:3a: 33:1b:d2:0f:2a:b7:8f:9a:4a:c5:bb:db:46:6d:e1: 29:b8:86:db:af:45:22:99:6c:8e:1c:4d:6f:c4:89: da:8c:f3:da:81:dd:5e:7c:52:1a:98:bb:8c:99:c8: 1f:6a:df:bb:dc:29:6d:ff:03:7f:2f:23:f5:a2:a0: 40:33:e7:d3:ba:24:01:1f:a5:de:0f:91:ea:5d:1f: 63:d8:d8:b0:24:21:67:4d:91:ef:71:d3:dd:32:73: 0c:c9:c4:de:69:6c:93:51:0d:2c:53:3b:95:dc:0f: 49:d5:eb:a1:34:5d:74:98:12:b4:0e:40:72:15:1b: fd:be:70:ff:4d:6a:98:8f:73:ce:a5:40:65:e7:5d: 67:b9:bb:76:1e:62:72:3b:8a:e4:8a:2f:da:d2:14: 95:b6:50:18:cd:93:cb:9c:3c:c1:dc:1b:fa:39:97: 41:7e:c6:e9:1b:01:b8:dd:64:f0:4e:07:66:b3:3d: 56:70:3f:41:73:f4:d3:97:09:b5:6b:f5:4d:2e:71: a4:ef:42:19:04:3c:9f:5f:24:bf:e9:52:ed:1c:77: c2:f1:26:7f:af:b2:71:0c:49:30:36:e4:8a:3f:e6: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:AA:07:17:E4:3C:8B:F0:A7:E6:CA:3C:D2:5C:47:10:33:84:D0 X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8b:40:8a:a8:57:37:f4:51:9b:36:6d:1e:1f:2c:03:2c:a6: ff:93:f6:79:e6:b1:94:80:ad:47:76:57:7c:01:2d:71:65:bf: 07:5b:d6:2f:86:d9:dc:60:a0:90:03:4b:9a:4a:b5:fe:9d:39: 45:6e:ff:65:10:b8:32:34:49:92:3f:cb:9a:1b:bb:d1:3a:c3: ba:16:94:af:91:c0:3d:0e:63:6f:b4:d3:33:eb:e4:41:a7:42: 15:15:f0:ac:20:6c:1a:fc:9d:20:a7:9f:59:11:ee:07:86:21: 3b:aa:39:52:56:b1:61:3b:e8:3c:f5:cc:17:b8:93:49:19:b1: c3:7f:6e:38:42:e3:47:6f:ff:25:38:92:95:8d:79:79:2f:e1: 57:42:b4:be:3c:69:1d:bd:f1:dc:95:cd:99:0b:d4:d9:c8:19: 01:55:25:a7:86:43:03:45:ec:0a:e3:3d:ce:bf:13:45:9f:90: 7f:ff:ed:46:01:2e:a9:fa:01:7f:c1:55:2d:f0:e6:ba:11:14: 91:3f:63:23:a1:96:13:b3:65:82:c5:e9:f7:ef:4d:d8:fc:15: 41:b0:76:c8:fb:0d:6d:cd:f2:5a:ba:23:3e:7b:7a:7c:76:79: d6:de:0c:5d:5e:5b:07:84:88:ed:a6:53:d8:d5:56:89:8b:7a: 6d:76:6e:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUwNjE0MTYzNjM2WhcNMjUwNjIxMTYzNjM2WjAYMRYwFAYD VQQDEw02ODRkYTUxNC0wMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3EA1Dwodp4vTww45hRIIdFM5BprfwTRksACGTozG9IPKrePmkrFu9tGbeEp uIbbr0UimWyOHE1vxInajPPagd1efFIamLuMmcgfat+73Clt/wN/LyP1oqBAM+fT uiQBH6XeD5HqXR9j2NiwJCFnTZHvcdPdMnMMycTeaWyTUQ0sUzuV3A9J1euhNF10 mBK0DkByFRv9vnD/TWqYj3POpUBl511nubt2HmJyO4rkii/a0hSVtlAYzZPLnDzB 3Bv6OZdBfsbpGwG43WTwTgdmsz1WcD9Bc/TTlwm1a/VNLnGk70IZBDyfXyS/6VLt HHfC8SZ/r7JxDEkwNuSKP+anwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY8qgcX 5DyL8KfmyjzSXEcQM4TQMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCei0CKqFc39FGbNm0eHywDLKb/k/Z55rGUgK1Hdld8AS1xZb8HW9Yv htncYKCQA0uaSrX+nTlFbv9lELgyNEmSP8uaG7vROsO6FpSvkcA9DmNvtNMz6+RB p0IVFfCsIGwa/J0gp59ZEe4HhiE7qjlSVrFhO+g89cwXuJNJGbHDf244QuNHb/8l OJKVjXl5L+FXQrS+PGkdvfHclc2ZC9TZyBkBVSWnhkMDRewK4z3OvxNFn5B//+1G AS6p+gF/wVUt8Oa6ERSRP2MjoZYTs2WCxen3703Y/BVBsHbI+w1tzfJauiM+e3p8 dnnW3gxdXlsHhIjtplPY1VaJi3ptdm6U -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:55 2025 by rpki-client