$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: k2DpZVtXdu/MiggxnU3L25jAVwINKRt7qqkZJuiu/Q4= Subject key identifier: 64:31:A7:22:11:1D:0C:9D:36:7E:D5:4D:A6:CC:23:EE:ED:6B:D4:61 Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 06E3 Signing time: Sat 14 Jun 2025 21:43:21 +0000 Manifest this update: Sat 14 Jun 2025 21:43:20 +0000 Manifest next update: Sat 21 Jun 2025 21:43:20 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: 8CEJKrkBdckvwSBcfmcqJ+HeLndEIiy1jZBfeI0XBKo=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Jun 14 21:43:20 2025 GMT Not After : Jun 21 21:43:20 2025 GMT Subject: CN=684decf9-be1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:61:c0:9a:1b:b0:02:54:96:e1:b6:fa:90: a4:c9:7f:a1:2a:88:52:bf:e2:18:e6:fa:23:20:ab: 96:44:ff:ab:6e:02:b4:63:fa:0b:0d:d4:fd:f1:56: 92:f6:fb:29:6f:14:64:73:6a:5d:05:fc:c3:73:36: 85:6b:5e:9d:ee:1f:f7:10:94:8d:60:f8:9c:d2:e4: be:9d:dc:f9:7f:64:b0:05:4a:aa:ea:f2:3c:8e:ec: 08:87:23:bc:71:a4:38:17:85:83:a7:6f:55:f6:be: fe:28:24:18:0c:13:0d:fa:f3:d9:42:d2:df:9c:df: 8f:85:53:6f:dd:4a:79:86:fe:87:e7:85:93:56:a8: 0c:f9:9b:cd:d6:f2:f2:94:b8:b9:3b:9b:f0:0c:c6: 07:76:73:49:82:63:e4:cc:f2:86:c4:6e:20:dd:0e: 17:51:9d:6b:81:4b:3f:db:5c:c1:6c:0c:ef:2e:9d: 7b:63:95:75:e1:cb:3a:67:eb:98:51:67:b2:10:bd: 0b:a3:a8:ff:e1:6c:e5:0a:3e:db:c2:17:50:71:1a: 3b:ab:49:ff:2b:51:78:92:bd:7e:e3:ca:8a:db:2d: e4:a8:3f:71:35:76:00:4b:0d:40:7b:d6:1b:62:f3: 89:61:22:2a:c4:03:73:3e:87:b2:6b:bc:61:f4:45: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:A7:22:11:1D:0C:9D:36:7E:D5:4D:A6:CC:23:EE:ED:6B:D4:61 X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d5:f0:66:3a:0d:d7:47:f8:2c:a6:6d:10:b3:bc:09:92:a4: 57:70:79:77:e9:93:6d:0d:43:be:7f:ad:17:1c:9b:00:0d:91: ab:3d:7d:50:a5:7b:9b:b9:6e:b2:d0:4a:be:7a:c2:32:ec:31: 64:32:1d:84:2f:5a:6a:1c:1e:d6:bc:14:8f:6f:18:f6:77:37: 9c:8a:02:88:87:d3:bd:43:d9:ab:14:8b:d7:cb:31:43:c6:6d: a8:45:cc:10:48:59:78:d2:69:ae:c6:00:65:b7:5f:63:40:42: 47:8a:e5:20:98:58:4b:d5:c3:4b:ba:f4:f3:5a:cc:5c:95:16: be:bb:17:0b:05:bb:c1:ff:b9:fa:5b:0a:db:a1:dd:56:29:56: fe:4a:97:f6:92:57:03:cd:90:e2:cb:cc:bf:4f:40:28:9d:12: 9a:aa:95:07:c4:4c:ee:70:2f:9f:35:de:0a:5e:d2:37:e5:94: 24:74:ef:52:2c:2c:ad:47:8d:cc:22:dd:15:00:c1:bc:27:cd: 2f:c1:0d:7c:88:31:3e:b8:76:6a:c0:3b:d8:cd:08:96:b5:a8: ca:a8:27:aa:e8:ae:cb:83:80:a2:2c:52:0f:0d:92:94:f4:62: 8b:04:cb:7e:53:4a:16:62:4c:61:34:04:70:df:50:3c:92:92: 7a:06:f3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjUwNjE0MjE0MzIwWhcNMjUwNjIxMjE0MzIwWjAYMRYwFAYD VQQDEw02ODRkZWNmOS1iZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YdhwJobsAJUluG2+pCkyX+hKohSv+IY5vojIKuWRP+rbgK0Y/oLDdT98VaS 9vspbxRkc2pdBfzDczaFa16d7h/3EJSNYPic0uS+ndz5f2SwBUqq6vI8juwIhyO8 caQ4F4WDp29V9r7+KCQYDBMN+vPZQtLfnN+PhVNv3Up5hv6H54WTVqgM+ZvN1vLy lLi5O5vwDMYHdnNJgmPkzPKGxG4g3Q4XUZ1rgUs/21zBbAzvLp17Y5V14cs6Z+uY UWeyEL0Lo6j/4WzlCj7bwhdQcRo7q0n/K1F4kr1+48qK2y3kqD9xNXYASw1Ae9Yb YvOJYSIqxANzPoeya7xh9EVySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQxpyIR HQydNn7VTabMI+7ta9RhMB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA1fBmOg3XR/gspm0Qs7wJkqRXcHl36ZNtDUO+f60XHJsADZGrPX1Q pXubuW6y0Eq+esIy7DFkMh2EL1pqHB7WvBSPbxj2dzecigKIh9O9Q9mrFIvXyzFD xm2oRcwQSFl40mmuxgBlt19jQEJHiuUgmFhL1cNLuvTzWsxclRa+uxcLBbvB/7n6 Wwrbod1WKVb+Spf2klcDzZDiy8y/T0AonRKaqpUHxEzucC+fNd4KXtI35ZQkdO9S LCytR43MIt0VAMG8J80vwQ18iDE+uHZqwDvYzQiWtajKqCeq6K7Lg4CiLFIPDZKU 9GKLBMt+U0oWYkxhNARw31A8kpJ6BvMU -----END CERTIFICATE-----Generated at Sun Jun 15 08:19:51 2025 by rpki-client