$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: pf7Bvij+Zq1bAZuihQQ9F8X9Dgm3gGgnKYBEBnK6BEU= Subject key identifier: AD:E4:46:D5:25:CC:76:E2:1B:8A:3D:20:D9:28:3A:25:10:D4:CF:1F Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 06EC Signing time: Mon 16 Jun 2025 21:45:56 +0000 Manifest this update: Mon 16 Jun 2025 21:45:56 +0000 Manifest next update: Mon 23 Jun 2025 21:45:56 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: ahkbLf5+Eylslhn2hpsQMKCgPqSCaFm8yP6VYQc46bA=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: X7/wtt04QWk9x+2X3bhJ9nLStWcZ9LhUojCxV8pCE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Jun 16 21:45:56 2025 GMT Not After : Jun 23 21:45:56 2025 GMT Subject: CN=68509094-47ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:7d:cb:fb:a4:71:3f:fe:e7:45:79:5e:98: 4c:ef:cc:fe:d2:38:0b:da:ca:b6:fa:dc:81:f2:41: f2:af:4b:d5:df:7c:96:f3:72:ee:4c:c2:10:6d:b2: dc:ed:ec:7a:6f:2e:31:c0:b9:28:e4:dd:e0:b0:16: 7a:b0:cc:c3:34:2e:a1:02:0d:d2:89:ab:40:80:a2: 0d:dd:a5:c1:38:f7:8e:9f:7d:af:a5:44:c9:58:a1: e8:58:56:92:4e:5e:8e:de:15:57:ac:9b:78:04:1a: aa:0d:8f:a6:94:16:1f:2c:62:71:44:54:ed:77:73: 21:28:ee:af:89:b3:3e:f6:ab:3f:42:70:11:12:40: e7:d8:80:a2:e3:05:90:18:e6:2a:d7:7a:f9:18:42: 67:b7:c0:78:49:aa:16:2a:3d:a0:f3:da:4a:3d:91: d8:7f:d5:19:0a:84:82:15:29:6e:20:26:cc:69:4b: e0:b7:51:f6:aa:a7:bc:58:8f:07:a5:ba:19:22:21: b0:da:fc:fe:b5:4d:f4:47:5b:7e:8b:55:18:01:15: ea:36:73:ab:28:c9:6d:e5:5e:68:4c:7f:bb:93:42: 1e:01:a9:e9:82:2c:35:0f:47:2b:d2:86:0c:12:ab: 12:fe:f0:30:64:f6:87:22:0d:16:10:28:ef:63:4c: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E4:46:D5:25:CC:76:E2:1B:8A:3D:20:D9:28:3A:25:10:D4:CF:1F X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:45:e3:aa:63:de:aa:7e:b1:c4:63:2c:a7:d6:80:57:80:a1: 2d:01:51:2b:10:48:b0:08:6f:09:fb:5e:fa:55:83:0a:df:47: 5d:75:4a:da:f0:80:5e:6a:c9:5a:11:b6:46:58:dc:dd:47:be: b6:b7:e3:70:d2:e4:b0:32:26:44:aa:e5:80:74:5f:99:65:45: 1e:a3:bd:34:d2:0d:de:c9:b3:11:25:b4:3a:84:4c:88:84:04: 98:1b:37:60:8a:6d:f2:a8:0e:4a:75:2e:fd:1d:66:7a:f2:01: 9b:88:2f:03:11:ba:7c:79:5e:17:f0:0e:c2:ca:4c:5d:df:86: 1c:d6:a5:99:43:ee:6e:5e:af:e6:60:53:b2:44:84:02:ea:1b: 34:df:de:54:62:0e:3f:3c:80:ec:92:e3:55:a7:ea:46:99:d7: e3:79:4c:8c:83:75:89:15:0a:bf:84:96:66:b1:34:f2:eb:00: 22:4c:3c:01:ba:96:79:18:a8:55:e3:08:27:dd:d1:2b:8d:96: cf:67:57:1e:60:b5:a4:8c:de:38:61:7e:c3:19:37:8c:ff:bd: f9:66:3e:3e:36:0b:e4:2e:ee:59:2d:dd:83:a8:bd:2e:39:8f: bb:f2:ff:10:76:e8:b2:ab:fa:ba:87:33:bb:88:c0:06:f6:ae: a3:41:c0:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwNjE2MjE0NTU2WhcNMjUwNjIzMjE0NTU2WjAYMRYwFAYD VQQDEw02ODUwOTA5NC00N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr319y/ukcT/+50V5XphM78z+0jgL2sq2+tyB8kHyr0vV33yW83LuTMIQbbLc 7ex6by4xwLko5N3gsBZ6sMzDNC6hAg3SiatAgKIN3aXBOPeOn32vpUTJWKHoWFaS Tl6O3hVXrJt4BBqqDY+mlBYfLGJxRFTtd3MhKO6vibM+9qs/QnAREkDn2ICi4wWQ GOYq13r5GEJnt8B4SaoWKj2g89pKPZHYf9UZCoSCFSluICbMaUvgt1H2qqe8WI8H pboZIiGw2vz+tU30R1t+i1UYARXqNnOrKMlt5V5oTH+7k0IeAanpgiw1D0cr0oYM EqsS/vAwZPaHIg0WECjvY0yfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3kRtUl zHbiG4o9INkoOiUQ1M8fMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpReOqY96qfrHEYyyn1oBXgKEtAVErEEiwCG8J+176VYMK30dddUra 8IBeaslaEbZGWNzdR762t+Nw0uSwMiZEquWAdF+ZZUUeo7000g3eybMRJbQ6hEyI hASYGzdgim3yqA5KdS79HWZ68gGbiC8DEbp8eV4X8A7Cykxd34Yc1qWZQ+5uXq/m YFOyRIQC6hs0395UYg4/PIDskuNVp+pGmdfjeUyMg3WJFQq/hJZmsTTy6wAiTDwB upZ5GKhV4wgn3dErjZbPZ1ceYLWkjN44YX7DGTeM/735Zj4+NgvkLu5ZLd2DqL0u OY+78v8Qduiyq/q6hzO7iMAG9q6jQcCy -----END CERTIFICATE-----Generated at Mon Jun 16 23:53:30 2025 by rpki-client