$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json) Hash identifier: 37uz+uA3oDdI5nbi+BvPcklFlrIwvS1Bpp1qRALG6U4= Subject key identifier: 72:8B:66:1C:F0:22:90:05:CB:24:B2:55:F9:A7:C1:AB:72:34:71:50 Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft Manifest number: 0549 Signing time: Sat 14 Jun 2025 23:08:53 +0000 Manifest this update: Sat 14 Jun 2025 23:08:53 +0000 Manifest next update: Sat 21 Jun 2025 23:08:53 +0000 Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: EsHJ1Xiw09BTxt4AQO/+U3EeYblDnBJavuG8/CGuG+c=) 2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Validity Not Before: Jun 14 23:08:53 2025 GMT Not After : Jun 21 23:08:53 2025 GMT Subject: CN=684e0105-656e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:f0:e8:06:ff:12:2c:a2:17:1c:1e:56:f1: 6b:12:cc:9e:e6:12:6b:61:80:35:c5:14:79:5d:34: b3:e0:f7:c8:30:b0:c6:30:95:ca:3e:89:0e:2d:ad: d5:3f:84:e5:42:9e:01:b4:ca:17:dd:ce:a2:ba:05: f5:8b:d4:fe:f6:dc:25:ee:f4:e5:d0:af:0d:2a:d0: cd:89:db:e4:8c:1e:cf:d5:bc:dc:b5:b4:a0:5b:80: 81:51:a3:5e:ae:56:d7:09:c3:52:bb:b3:84:b6:66: 61:b5:f4:af:d4:fa:8f:e0:c8:92:fa:fd:82:8a:da: b8:d9:cd:9b:89:38:69:4b:66:c1:90:d4:bc:4c:66: 9b:49:44:6b:51:22:87:aa:11:a6:90:ac:1d:a4:13: 72:d8:a6:dc:e5:45:67:1d:e4:c9:93:1b:60:5d:7d: 54:f3:2a:ed:77:3c:b6:5b:86:9f:93:45:87:f2:14: ca:1f:ff:fc:43:79:d2:ba:a7:73:69:e5:9c:b2:19: 8d:58:a9:54:89:6d:4a:76:d1:85:2b:1c:e2:95:1c: 74:2d:7c:72:ef:f9:33:c9:ac:c4:84:fa:90:90:35: 29:8c:3d:2d:3c:95:d2:1e:20:f2:0e:ae:95:33:89: 67:26:e4:37:16:2b:49:08:36:62:44:02:49:6a:43: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8B:66:1C:F0:22:90:05:CB:24:B2:55:F9:A7:C1:AB:72:34:71:50 X509v3 Authority Key Identifier: keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a0:35:1b:db:8c:85:c6:75:87:39:22:8d:2c:75:9a:d4:54: bc:ce:e6:d4:3c:5f:20:f4:54:dc:e8:e5:e4:5f:a5:3c:b5:5d: 91:56:1d:a3:7b:56:8c:40:dc:ef:30:34:4a:f1:b3:25:2a:8d: a9:81:d1:02:63:e0:9a:04:c6:fc:ae:3f:40:2b:e1:58:18:d2: d8:1a:61:2d:5f:02:8c:ff:0a:30:0a:e1:7e:31:88:aa:63:53: cb:9e:93:3d:25:99:ed:d9:bf:fb:0f:2b:69:c8:68:be:17:2c: 24:58:b0:19:ce:ad:89:e2:07:35:d6:75:5c:07:cf:31:e8:df: 54:96:d9:c4:fc:ca:6b:26:91:37:7f:18:43:ac:8f:49:62:d2: e5:8e:b0:4d:89:d5:13:74:66:ce:1b:8c:6f:03:f1:fa:f5:e8: a8:62:2b:1a:9b:db:1e:3b:30:b7:b2:8d:d4:26:06:d6:b5:4f: 6c:34:00:e6:c3:11:95:e5:15:17:2c:51:41:94:af:18:92:2d: 64:8b:7a:c5:56:44:c2:cc:ec:f7:e6:2f:68:c8:29:2d:c6:63: ee:65:d9:a4:ea:3e:a1:7c:57:34:9b:a8:77:b5:08:6b:98:c1: 8b:7f:bd:34:8e:d8:40:ef:8a:f8:0c:d1:85:ba:36:68:76:4b: 7c:ce:be:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC MDY4MzQ0NjAwHhcNMjUwNjE0MjMwODUzWhcNMjUwNjIxMjMwODUzWjAYMRYwFAYD VQQDEw02ODRlMDEwNS02NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjHw6Ab/EiyiFxweVvFrEsye5hJrYYA1xRR5XTSz4PfIMLDGMJXKPokOLa3V P4TlQp4BtMoX3c6iugX1i9T+9twl7vTl0K8NKtDNidvkjB7P1bzctbSgW4CBUaNe rlbXCcNSu7OEtmZhtfSv1PqP4MiS+v2Citq42c2biThpS2bBkNS8TGabSURrUSKH qhGmkKwdpBNy2Kbc5UVnHeTJkxtgXX1U8yrtdzy2W4afk0WH8hTKH//8Q3nSuqdz aeWcshmNWKlUiW1KdtGFKxzilRx0LXxy7/kzyazEhPqQkDUpjD0tPJXSHiDyDq6V M4lnJuQ3FitJCDZiRAJJakO+KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKLZhzw IpAFyySyVfmnwatyNHFQMB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5 Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtoDUb24yFxnWHOSKNLHWa1FS8zubUPF8g9FTc6OXkX6U8tV2RVh2j e1aMQNzvMDRK8bMlKo2pgdECY+CaBMb8rj9AK+FYGNLYGmEtXwKM/wowCuF+MYiq Y1PLnpM9JZnt2b/7DytpyGi+FywkWLAZzq2J4gc11nVcB88x6N9UltnE/MprJpE3 fxhDrI9JYtLljrBNidUTdGbOG4xvA/H69eioYisam9seOzC3so3UJgbWtU9sNADm wxGV5RUXLFFBlK8Yki1ki3rFVkTCzOz35i9oyCktxmPuZdmk6j6hfFc0m6h3tQhr mMGLf700jthA74r4DNGFujZodkt8zr69 -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:12 2025 by rpki-client