$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: wVv1yPo2NvYLgzclfs4TINMNqoRhYx2Dmnch6tkE9yE= Subject key identifier: 58:5A:DD:AB:9E:C5:8A:79:1F:AC:52:AB:7F:68:82:D7:E6:31:B8:E7 Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 0855 Signing time: Sat 14 Jun 2025 20:30:06 +0000 Manifest this update: Sat 14 Jun 2025 20:30:05 +0000 Manifest next update: Sat 21 Jun 2025 20:30:05 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: hzwdJIjKkaiTadsgevFqxwcGiXYcBXbpIN0amauVvPs=) 2: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (hash: Pre6mj3qji68nWX5VPNZNIBmXlVK+D7mKmGk/F/UT7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Jun 14 20:30:05 2025 GMT Not After : Jun 21 20:30:05 2025 GMT Subject: CN=684ddbce-5655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:1c:c4:ad:93:ef:fe:76:00:5e:f8:a8:1c: 86:ef:44:e0:44:a5:ee:ce:0e:7a:db:1d:2c:f4:d6: 5c:be:0d:3a:50:4c:60:0b:f7:cd:06:74:3e:60:52: e0:2b:b5:37:15:8b:59:02:da:03:b4:6c:b4:c0:3f: 46:f3:78:47:65:f4:1a:58:c0:45:53:dd:e5:b7:98: 6d:05:f9:0a:a0:8c:db:77:d4:50:f5:0f:3b:34:c2: a3:fb:93:29:4f:79:e1:87:b5:cc:eb:04:ea:31:16: e7:73:33:dc:ad:41:ef:d2:69:2e:cc:60:7e:8f:d5: 7b:96:f7:81:9a:16:55:37:cb:c9:e5:cf:79:bd:99: 59:0b:e3:09:b3:c2:b2:8d:4a:a0:4d:47:7e:2c:6d: 97:e3:6c:b5:77:ab:f8:45:21:ce:ea:f7:1b:e4:62: 53:14:d8:d0:8e:3c:3c:53:73:bf:84:0b:46:6e:d1: 86:02:97:52:dd:af:0b:d0:47:d5:b3:85:10:6f:ea: 8f:a8:06:63:07:b9:06:7e:57:50:70:e3:69:a7:66: 42:21:5a:09:5d:5f:61:5e:ae:3a:c3:2e:3b:20:c0: d7:50:2f:87:0b:0c:1a:d0:2a:18:47:08:ab:a2:4c: f1:bb:39:2f:d1:91:c1:a8:27:68:78:9b:b2:23:a8: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:DD:AB:9E:C5:8A:79:1F:AC:52:AB:7F:68:82:D7:E6:31:B8:E7 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:94:2c:b7:f2:80:1f:a6:3c:88:2d:f3:39:55:2f:ea:99:fe: 25:16:22:1a:c2:f6:e5:50:90:54:5b:da:fe:a0:36:1e:57:56: 99:69:34:52:93:28:2d:30:71:f4:17:dc:a7:43:cd:21:e2:63: 45:f8:da:3a:68:e4:2e:7d:1f:c0:b4:71:c4:c8:35:88:fe:1c: 58:12:73:ea:6d:83:29:41:b4:f8:d9:d2:00:a7:54:46:d6:a1: 6c:87:a7:7f:f2:34:19:22:73:a7:e4:dd:2d:70:14:ef:3c:40: c7:fb:77:04:0d:42:f7:2b:7c:37:4a:d5:07:85:c3:ee:1e:06: 76:1f:0e:51:7c:e0:95:bb:e4:7f:ce:58:6f:64:64:92:35:44: 96:45:55:e7:e2:5f:46:84:ed:00:1d:ef:d8:f5:a7:ef:6f:ff: 1c:a0:5b:99:5e:25:a6:ad:41:63:8f:ba:68:93:ff:c3:c4:91: b6:72:67:26:c3:0b:e5:ae:66:43:3a:be:ca:c6:b4:8a:98:5b: e0:aa:3e:7f:63:86:fd:31:a5:84:03:05:08:52:69:75:c9:4e: 44:87:f3:eb:97:d8:b1:7f:8a:0a:f3:d4:4a:66:9f:5b:77:94: 49:d2:1f:e5:08:07:34:61:63:0c:52:a7:54:bc:7f:80:ed:7e: fa:0d:2c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwNjE0MjAzMDA1WhcNMjUwNjIxMjAzMDA1WjAYMRYwFAYD VQQDEw02ODRkZGJjZS01NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iMcxK2T7/52AF74qByG70TgRKXuzg562x0s9NZcvg06UExgC/fNBnQ+YFLg K7U3FYtZAtoDtGy0wD9G83hHZfQaWMBFU93lt5htBfkKoIzbd9RQ9Q87NMKj+5Mp T3nhh7XM6wTqMRbnczPcrUHv0mkuzGB+j9V7lveBmhZVN8vJ5c95vZlZC+MJs8Ky jUqgTUd+LG2X42y1d6v4RSHO6vcb5GJTFNjQjjw8U3O/hAtGbtGGApdS3a8L0EfV s4UQb+qPqAZjB7kGfldQcONpp2ZCIVoJXV9hXq46wy47IMDXUC+HCwwa0CoYRwir okzxuzkv0ZHBqCdoeJuyI6gVMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFha3aue xYp5H6xSq39ogtfmMbjnMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOlCy38oAfpjyILfM5VS/qmf4lFiIawvblUJBUW9r+oDYeV1aZaTRS kygtMHH0F9ynQ80h4mNF+No6aOQufR/AtHHEyDWI/hxYEnPqbYMpQbT42dIAp1RG 1qFsh6d/8jQZInOn5N0tcBTvPEDH+3cEDUL3K3w3StUHhcPuHgZ2Hw5RfOCVu+R/ zlhvZGSSNUSWRVXn4l9GhO0AHe/Y9afvb/8coFuZXiWmrUFjj7pok//DxJG2cmcm wwvlrmZDOr7KxrSKmFvgqj5/Y4b9MaWEAwUIUml1yU5Eh/Prl9ixf4oK89RKZp9b d5RJ0h/lCAc0YWMMUqdUvH+A7X76DSxE -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:45 2025 by rpki-client