$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json) Hash identifier: XFW2LbbyveJonWq4QW6kdzUXrCFYPjlSsswMSnVRB24= Subject key identifier: B9:40:5C:6F:16:08:69:C5:76:64:1B:5D:E2:C3:25:C8:2E:C9:5B:79 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 16DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft Manifest number: 16B7 Signing time: Wed 18 Jun 2025 16:40:42 +0000 Manifest this update: Wed 18 Jun 2025 16:40:42 +0000 Manifest next update: Wed 25 Jun 2025 16:40:42 +0000 Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: gQk96wvL3CiIvLezgH6qVWyUwVHbvudMG/5yXjdABjQ=) 2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: i/Bdlwtsw60KlWyTtnZoHMYWyMWkX8rBZXwz4SUYdDY=) 3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: x5fSlx3nNKz6ifMgnnFr+DL48Yd9QT9h8VtP+zrrY4c=) 4: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: 9PGVW+39KLlj0WI9eJ5OovuG1UvnRDi3eMzS7oZFC4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5850 (0x16da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Jun 18 16:40:42 2025 GMT Not After : Jun 25 16:40:42 2025 GMT Subject: CN=6852ec0a-68de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:06:7b:bf:cd:dc:41:c5:32:d8:cc:22:71: f9:81:ef:e0:d8:d4:6f:0a:fb:6e:da:45:9d:6e:8c: 66:56:52:bb:1b:62:4d:22:20:25:2e:e8:0a:67:9e: a2:63:b1:6a:d3:c7:df:7c:23:27:0d:ad:65:04:8d: 11:e1:75:a4:1a:2c:27:33:79:07:cf:06:a9:e9:98: d1:3c:3d:81:ab:ab:84:9b:d1:63:3b:fe:e3:23:b3: 74:fd:4a:6a:6f:67:57:ae:03:85:92:e9:72:25:a4: 28:52:ec:e3:97:9c:65:08:02:9d:eb:90:bf:36:ea: ec:d4:c0:5c:01:a1:72:2a:83:07:20:2c:43:30:5e: ab:c1:1b:9f:6b:f2:37:ad:9b:d1:75:81:8e:55:9b: b0:2b:b6:c1:b2:42:a9:7e:69:5f:5a:77:6c:55:2f: 2a:c2:44:14:69:e7:68:7e:a2:eb:ff:6a:a8:87:16: ea:0a:c2:5c:e5:b0:fe:03:70:46:5f:17:2c:83:a9: 8c:63:db:6f:c1:e7:f9:bb:98:4c:fc:c2:d9:c3:45: 38:46:f9:7d:04:3c:95:f0:a4:58:4f:e1:87:40:ce: 0a:38:c1:ae:33:2c:ef:eb:37:2a:d1:cf:c5:41:60: 2c:47:31:ca:56:2a:de:01:09:74:8f:e9:05:e6:25: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:5C:6F:16:08:69:C5:76:64:1B:5D:E2:C3:25:C8:2E:C9:5B:79 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:29:4c:9b:18:33:1e:8a:58:95:53:5b:36:e9:64:d1:24:85: 15:3d:a6:65:7b:09:79:eb:71:29:4c:7d:b3:c5:ce:bc:f1:b8: c9:f2:fb:a4:c6:69:b7:fe:d6:10:50:8e:70:a8:01:cd:51:f9: 82:dd:09:28:49:d3:e1:f2:24:3a:2c:5b:da:14:c4:6e:aa:3a: ac:b2:28:a1:c4:e4:f5:3a:65:9b:c0:e3:9e:e5:0e:2d:91:4d: 97:23:a7:ba:a5:07:98:af:f4:d8:dd:35:5d:e0:bb:49:23:18: 3b:2e:25:82:f2:c9:60:48:22:57:2c:19:c9:a2:a2:29:78:ff: 49:3d:79:8e:ee:67:22:33:40:07:a7:f2:e4:f1:f3:bc:44:c2: 50:ac:f7:10:10:78:00:b9:98:f1:3c:cb:0f:ef:04:0e:76:d4: 0a:7d:a9:5b:88:bf:c5:69:ee:2a:dc:7d:46:18:14:63:e5:0d: b5:c1:99:3b:58:b7:4d:57:d5:ee:92:87:8f:6d:af:88:f1:57: f6:19:ea:a4:8d:e2:f3:58:0d:97:ce:7d:1e:36:9b:d1:86:c0: 0b:aa:f6:0c:a9:00:f1:e1:24:38:a8:71:24:b7:3a:52:c3:e4: 53:dc:af:6c:f6:22:c3:b2:d2:e0:11:e5:9c:9d:20:9d:47:6c: c5:54:9e:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjUwNjE4MTY0MDQyWhcNMjUwNjI1MTY0MDQyWjAYMRYwFAYD VQQDEw02ODUyZWMwYS02OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwcGe7/N3EHFMtjMInH5ge/g2NRvCvtu2kWdboxmVlK7G2JNIiAlLugKZ56i Y7Fq08fffCMnDa1lBI0R4XWkGiwnM3kHzwap6ZjRPD2Bq6uEm9FjO/7jI7N0/Upq b2dXrgOFkulyJaQoUuzjl5xlCAKd65C/Nurs1MBcAaFyKoMHICxDMF6rwRufa/I3 rZvRdYGOVZuwK7bBskKpfmlfWndsVS8qwkQUaedofqLr/2qohxbqCsJc5bD+A3BG Xxcsg6mMY9tvwef5u5hM/MLZw0U4Rvl9BDyV8KRYT+GHQM4KOMGuMyzv6zcq0c/F QWAsRzHKVireAQl0j+kF5iVOBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlAXG8W CGnFdmQbXeLDJcguyVt5MB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL R2JKQXdKTnBlY29qZG9qZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUKUybGDMeiliVU1s26WTRJIUVPaZlewl563EpTH2zxc688bjJ8vuk xmm3/tYQUI5wqAHNUfmC3QkoSdPh8iQ6LFvaFMRuqjqssiihxOT1OmWbwOOe5Q4t kU2XI6e6pQeYr/TY3TVd4LtJIxg7LiWC8slgSCJXLBnJoqIpeP9JPXmO7mciM0AH p/Lk8fO8RMJQrPcQEHgAuZjxPMsP7wQOdtQKfalbiL/Fae4q3H1GGBRj5Q21wZk7 WLdNV9XukoePba+I8Vf2GeqkjeLzWA2Xzn0eNpvRhsALqvYMqQDx4SQ4qHEktzpS w+RT3K9s9iLDstLgEeWcnSCdR2zFVJ4O -----END CERTIFICATE-----Generated at Fri Jun 20 06:40:13 2025 by rpki-client