$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: Bd6opoe/+kiyk490QlRtmklx/6SnvpnPc5DxfConvHU= Subject key identifier: A9:80:2F:98:B0:1B:6A:26:76:9B:5D:1C:BE:65:4B:73:46:C1:8B:B1 Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0AB0 Signing time: Thu 12 Jun 2025 19:19:49 +0000 Manifest this update: Thu 12 Jun 2025 19:19:49 +0000 Manifest next update: Thu 19 Jun 2025 19:19:49 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: Mm2zrSkXDcs3N8RnLRlIVh6MmdzVKLe1AJvReRw85aI=) 2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=) 3: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=) 4: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Jun 12 19:19:49 2025 GMT Not After : Jun 19 19:19:49 2025 GMT Subject: CN=684b2855-498b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:a2:02:43:e6:36:97:9c:70:29:c0:a6:01: fb:23:f4:1c:94:67:57:e3:d4:3d:de:6a:c2:4f:5c: a9:76:9c:8b:19:b5:6f:28:e3:9c:ee:ec:be:98:f7: 58:db:e8:94:4e:c6:3c:c0:bf:30:b2:f9:5d:52:41: 56:18:e4:fc:7b:63:05:e3:d4:37:54:fe:b7:e9:26: 37:7d:fc:03:19:7b:dd:f9:c1:9b:70:e5:eb:c6:28: b9:54:41:af:2e:60:94:be:2a:35:bd:40:22:dc:12: dd:23:28:9b:3b:54:57:f9:3c:81:27:7e:10:f3:fd: 2f:e0:c1:e8:42:a9:ab:c9:cb:19:21:47:c0:a1:14: e3:37:47:64:34:cb:66:ae:a2:6e:c8:49:b6:b0:8e: ca:b8:84:a0:8f:66:5c:e3:49:98:cf:77:6e:27:2d: ab:9d:fe:bb:5b:06:f9:26:5e:c3:74:d1:e7:c0:50: ed:32:e7:80:38:2c:52:52:50:8d:e8:13:4c:93:e7: 5a:27:1f:4a:f5:af:1e:5d:b2:3b:7d:c0:00:1b:1c: 55:e8:25:aa:9b:3e:ec:dd:bc:8f:25:d2:25:c6:21: 5e:79:33:20:55:92:a6:99:c3:d2:e5:d1:5b:23:06: f1:70:24:d1:13:d4:b2:b1:29:c0:f6:10:17:dc:5a: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:2F:98:B0:1B:6A:26:76:9B:5D:1C:BE:65:4B:73:46:C1:8B:B1 X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ba:05:bf:32:a5:bd:04:7b:01:df:4c:9b:92:87:91:9d:8a: 0b:9b:93:b9:ba:2e:f1:1d:de:28:40:9c:64:b4:35:f4:c2:95: 3f:10:67:c3:6a:33:10:ca:f0:6f:bb:38:f6:4b:8a:72:78:5e: 48:f1:d8:b6:88:52:aa:73:0b:99:f0:6a:cb:35:95:43:1b:e2: a7:f5:51:df:64:04:20:f9:e8:57:5f:a5:4e:81:a5:bb:ae:7f: ba:ea:99:2a:78:7d:96:2a:4f:57:9c:4d:1c:1f:92:cc:54:40: e7:61:9a:8a:bf:d5:9e:96:77:cd:db:19:4d:72:41:dd:82:2b: c3:21:09:92:ce:8e:df:ea:02:ae:ad:22:f2:fc:23:3e:f8:bb: 37:02:11:1e:83:6c:95:40:e7:85:41:66:04:40:84:8f:7d:ad: cc:9e:03:48:fe:21:fe:75:6a:1a:b9:ec:50:78:61:34:d8:b6: 00:c0:00:2a:11:02:31:c8:28:a1:02:2f:d5:31:29:97:fe:da: 8b:39:8e:e3:32:a7:8f:0d:c0:4b:91:bf:1e:7b:2c:ff:ad:6c: fa:cd:23:07:a2:c6:55:97:6a:61:6c:69:b3:2f:e1:df:c1:6f: 00:0e:ea:c4:c2:ab:14:d5:43:a3:5b:7b:47:5d:49:cc:2a:09: 43:11:b8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjUwNjEyMTkxOTQ5WhcNMjUwNjE5MTkxOTQ5WjAYMRYwFAYD VQQDEw02ODRiMjg1NS00OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbyiAkPmNpeccCnApgH7I/QclGdX49Q93mrCT1ypdpyLGbVvKOOc7uy+mPdY 2+iUTsY8wL8wsvldUkFWGOT8e2MF49Q3VP636SY3ffwDGXvd+cGbcOXrxii5VEGv LmCUvio1vUAi3BLdIyibO1RX+TyBJ34Q8/0v4MHoQqmrycsZIUfAoRTjN0dkNMtm rqJuyEm2sI7KuISgj2Zc40mYz3duJy2rnf67Wwb5Jl7DdNHnwFDtMueAOCxSUlCN 6BNMk+daJx9K9a8eXbI7fcAAGxxV6CWqmz7s3byPJdIlxiFeeTMgVZKmmcPS5dFb IwbxcCTRE9SysSnA9hAX3FriEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmAL5iw G2omdptdHL5lS3NGwYuxMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4ugW/MqW9BHsB30ybkoeRnYoLm5O5ui7xHd4oQJxktDX0wpU/EGfD ajMQyvBvuzj2S4pyeF5I8di2iFKqcwuZ8GrLNZVDG+Kn9VHfZAQg+ehXX6VOgaW7 rn+66pkqeH2WKk9XnE0cH5LMVEDnYZqKv9WelnfN2xlNckHdgivDIQmSzo7f6gKu rSLy/CM++Ls3AhEeg2yVQOeFQWYEQISPfa3MngNI/iH+dWoauexQeGE02LYAwAAq EQIxyCihAi/VMSmX/tqLOY7jMqePDcBLkb8eeyz/rWz6zSMHosZVl2phbGmzL+Hf wW8ADurEwqsU1UOjW3tHXUnMKglDEbiw -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:57 2025 by rpki-client