$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft File: cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json) Hash identifier: DjYPHI8JQW4KNsy0IH+eQc6qFcQvcE6xxVfdOLFSXNM= Subject key identifier: BB:DB:22:D0:15:BD:F8:B2:C0:69:BB:92:62:A8:D1:4C:6C:99:E6:E2 Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft Manifest number: 4A Signing time: Fri 13 Jun 2025 06:16:15 +0000 Manifest this update: Fri 13 Jun 2025 06:16:14 +0000 Manifest next update: Fri 20 Jun 2025 06:16:14 +0000 Files and hashes: 1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: rUMI6tn1OhV+V3+jGGmUQgddGO79emv3BISR1nLQIPw=) 2: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: uGejxwookglu2iCow+tcNdEybEx5MchvlLEGb/BsAIc=) 3: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: pXIC9lifhNka63uxRfDrQycVb+TaKUuZE602Ci63ILU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Validity Not Before: Jun 13 06:16:14 2025 GMT Not After : Jun 20 06:16:14 2025 GMT Subject: CN=684bc22f-ec0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:f5:f4:e3:32:46:3d:13:f3:2b:79:c4:f9: 3f:e8:10:05:fc:e4:8d:b4:6a:e2:59:51:bf:7b:44: ea:86:51:2d:ff:c7:a9:6b:4d:18:83:b8:97:fe:02: 88:3e:a8:59:05:bd:75:fe:a9:cc:40:7c:6c:6d:6c: 34:d4:19:04:2c:b0:14:6b:b0:1f:8c:eb:c5:68:41: 3d:1f:61:6e:0a:31:36:28:dd:89:73:d0:3b:2f:8e: 5a:bb:a3:33:76:0d:55:b2:70:5b:59:97:75:2b:a8: 41:96:5f:86:59:00:f8:d3:8b:eb:b9:14:96:ec:8e: f4:15:b4:1e:b2:60:4d:6b:b2:3e:e4:17:7a:27:90: 00:7b:d2:80:8a:93:4f:c3:c6:00:cd:63:83:8a:31: a5:b8:ae:ca:56:bc:07:5b:2a:4c:63:de:03:bc:1b: 0a:5f:93:3c:d4:cc:e8:a5:19:fd:b4:c2:e1:d6:6e: 73:f6:61:12:a0:f0:b7:a1:b6:20:84:aa:89:1f:d9: 1a:9f:a2:72:87:72:31:cb:d2:23:01:cc:22:f0:d1: d6:55:ec:8d:1d:00:86:7d:79:92:b9:4d:84:1b:ca: 43:18:08:72:9b:7a:2f:16:3d:ab:e9:fd:9b:49:9b: fd:9f:58:16:87:61:5b:51:b0:24:37:3c:c3:1a:b6: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DB:22:D0:15:BD:F8:B2:C0:69:BB:92:62:A8:D1:4C:6C:99:E6:E2 X509v3 Authority Key Identifier: keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6e:77:b7:6c:4e:35:da:ff:a8:50:6d:6f:15:cb:3d:1b:ab: 94:69:95:eb:18:d4:86:cc:0d:8a:ea:94:94:60:d2:98:51:69: 22:50:66:dc:85:af:a3:29:5e:32:08:e2:23:14:a5:7a:e3:6e: 3e:36:43:ff:aa:a4:7c:70:8e:6f:d2:4b:3d:3e:ac:38:1d:56: 81:40:65:80:9e:d3:d8:f2:ba:c8:45:07:f3:77:81:25:43:ac: 79:c1:b8:4d:29:56:34:eb:cd:e4:52:9f:00:51:80:aa:4b:f5: 9e:32:cc:7e:a1:d3:7d:55:4c:f3:dc:ae:0a:7b:2c:f1:8f:89: 43:a0:96:99:42:75:2d:a3:9b:e3:12:e7:5b:9a:91:59:0d:3e: 13:48:9e:b9:e8:ba:c4:09:5d:1a:54:85:54:9f:33:3f:dc:f5: 4e:5e:61:75:fb:01:77:fa:59:17:7b:26:af:94:97:e2:e5:ca: 09:6f:44:4d:9f:83:c8:79:51:72:49:c6:b2:b4:ab:a4:32:ab: 6e:5e:37:9d:02:82:35:7e:c9:6f:b4:c2:58:cd:f0:f5:de:2f: 7b:80:51:ae:63:8a:bd:c3:8c:95:42:f1:30:a7:42:12:d3:7e: d8:91:2b:9d:8c:b8:2e:9c:22:66:f6:d1:3d:f3:53:a5:c4:fb: 82:05:8c:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDU5RTExMC8GA1UEBRMoNzI1OERGRDU2RkE1QTQ4N0YwRDRBQ0M2OUNBREIxQkVB QzJGOTcwRTAeFw0yNTA2MTMwNjE2MTRaFw0yNTA2MjAwNjE2MTRaMBgxFjAUBgNV BAMTDTY4NGJjMjJmLWVjMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3IPX04zJGPRPzK3nE+T/oEAX85I20auJZUb97ROqGUS3/x6lrTRiDuJf+Aog+ qFkFvXX+qcxAfGxtbDTUGQQssBRrsB+M68VoQT0fYW4KMTYo3Ylz0Dsvjlq7ozN2 DVWycFtZl3UrqEGWX4ZZAPjTi+u5FJbsjvQVtB6yYE1rsj7kF3onkAB70oCKk0/D xgDNY4OKMaW4rspWvAdbKkxj3gO8GwpfkzzUzOilGf20wuHWbnP2YRKg8LehtiCE qokf2RqfonKHcjHL0iMBzCLw0dZV7I0dAIZ9eZK5TYQbykMYCHKbei8WPavp/ZtJ m/2fWBaHYVtRsCQ3PMMatohbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu9si0BW9 +LLAabuSYqjRTGyZ5uIwHwYDVR0jBBgwFoAUcljf1W+lpIfw1KzGnK2xvqwvlw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNTlFLzU1NjY2QjU2RDlE MDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2xqZjFXLWxwSWZ3MUt6R25LMnh2cXd2bHc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NTlFLzU1NjY2QjU2RDlEMDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElm dzFLekduSzJ4dnF3dmx3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACpud7dsTjXa/6hQbW8Vyz0bq5RplesY1IbMDYrqlJRg0phRaSJQZtyF r6MpXjII4iMUpXrjbj42Q/+qpHxwjm/SSz0+rDgdVoFAZYCe09jyushFB/N3gSVD rHnBuE0pVjTrzeRSnwBRgKpL9Z4yzH6h031VTPPcrgp7LPGPiUOglplCdS2jm+MS 51uakVkNPhNInrnousQJXRpUhVSfMz/c9U5eYXX7AXf6WRd7Jq+Ul+LlyglvRE2f g8h5UXJJxrK0q6Qyq25eN50CgjV+yW+0wljN8PXeL3uAUa5jir3DjJVC8TCnQhLT ftiRK52MuC6cImb20T3zU6XE+4IFjN4= -----END CERTIFICATE-----Generated at Sat Jun 14 20:43:08 2025 by rpki-client