$ rpki-client -vvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft File: Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json) Hash identifier: +Yyyn0Md22+XJRsYx3UHpztbQEaGXX/fo68QfK/EqnE= Subject key identifier: 3C:00:D4:21:DF:D9:88:BE:D5:48:1D:47:13:43:24:70:9C:05:2B:57 Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 Certificate issuer: /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft Manifest number: 38 Signing time: Sun 15 Jun 2025 06:39:28 +0000 Manifest this update: Sun 15 Jun 2025 06:39:27 +0000 Manifest next update: Sun 22 Jun 2025 06:39:27 +0000 Files and hashes: 1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: mWII3HZiu2oLG3C30tHZJndERP+nSZSza6bY0M+KTkU=) 2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: ddGHr0kpolkDLC4jRmYbLqkLIgOm/5JeTXQQ5En7IJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Validity Not Before: Jun 15 06:39:27 2025 GMT Not After : Jun 22 06:39:27 2025 GMT Subject: CN=684e6aa0-f623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:3a:5c:5c:e9:7c:45:07:ff:9a:fb:a9:7c: bd:ac:24:70:80:31:5e:18:83:b8:3e:ad:5d:a8:70: c5:17:6e:bd:d3:cc:68:65:fe:7b:95:5e:ba:c6:25: f8:91:0e:e0:24:07:a2:fb:9e:20:d8:8f:3c:a0:a8: 49:42:b3:5a:1c:54:ba:37:d9:64:00:28:7f:ce:27: ea:94:cf:78:ca:8c:be:b9:ad:42:ae:69:38:d5:0f: 8e:74:d2:a6:20:33:c0:5f:9a:61:0f:bf:25:e3:65: 32:ad:a4:06:2c:18:45:1f:5d:c8:8d:37:c0:ff:fa: fe:ab:82:00:b0:3d:3f:a0:35:e0:4f:14:b6:3b:f8: ef:5c:f7:5c:b1:6f:4a:7c:20:d8:43:ed:9e:bb:dd: f5:b1:73:5d:87:71:36:8d:7e:e6:ee:f1:40:50:5b: 1f:ac:95:b7:a2:1e:25:79:0e:a8:df:1e:fa:a8:e5: 51:9a:a6:89:1c:06:69:87:f5:c2:9f:f9:ea:5b:10: 8b:6f:a9:5d:1f:42:3f:1c:c6:d8:50:82:9f:44:6b: de:fc:a7:db:d3:5b:68:cd:04:3d:4e:21:a2:fb:14: 33:b4:1a:dc:3b:06:6b:f8:6e:da:63:2d:a2:ee:7c: aa:73:b1:6d:06:ac:18:b0:16:63:48:53:54:e6:c9: 0b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:00:D4:21:DF:D9:88:BE:D5:48:1D:47:13:43:24:70:9C:05:2B:57 X509v3 Authority Key Identifier: keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5d:01:a1:df:5e:da:48:46:d4:8f:43:78:1e:58:bc:11:e4: d1:74:92:de:5e:be:77:83:4e:f8:3f:d5:5e:b5:6d:7d:5f:18: b5:1e:85:dc:af:6d:b9:f7:6e:cd:27:e3:f8:31:09:16:c0:a6: 9d:db:ab:de:4d:e5:5a:97:17:67:08:8a:6b:1d:b7:d8:47:66: 22:14:b4:00:55:52:c6:28:36:18:f0:93:d1:b4:0a:e5:03:08: dd:03:25:06:2e:90:fa:e4:f5:e4:e7:94:2f:3e:45:e2:1f:41: 9d:b8:41:9e:91:b4:6a:3a:ab:cf:33:61:33:ff:32:79:36:31: 41:cd:5d:dc:9c:b2:f2:17:63:0b:18:4f:e5:21:74:4b:f6:9b: b2:40:b6:a5:a1:78:f7:c6:43:88:d3:bb:44:86:47:8d:4d:15: 19:27:79:5f:8a:d1:11:27:f4:a7:7d:47:2d:8b:86:f1:1c:93: 84:19:a7:1d:76:d6:6c:08:13:76:31:28:dd:0d:76:7e:4d:0e: 13:1b:37:98:5c:c6:de:9a:5b:d5:57:e2:f1:c4:69:d1:a9:44: 53:22:f4:04:d2:d9:66:9c:60:95:25:ea:64:5e:4e:a4:fa:8f: da:35:f4:90:76:8e:2b:33:ab:56:3d:a0:ea:25:60:fb:e6:93: 2f:d7:d9:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NUZBQjExMC8GA1UEBRMoMjZGOEJEMDNDNUEyQjdBQTcxNzU0NTlFQTA0N0E4ODY3 NjIzOUVFMDAeFw0yNTA2MTUwNjM5MjdaFw0yNTA2MjIwNjM5MjdaMBgxFjAUBgNV BAMTDTY4NGU2YWEwLWY2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPRzpcXOl8RQf/mvupfL2sJHCAMV4Yg7g+rV2ocMUXbr3TzGhl/nuVXrrGJfiR DuAkB6L7niDYjzygqElCs1ocVLo32WQAKH/OJ+qUz3jKjL65rUKuaTjVD4500qYg M8BfmmEPvyXjZTKtpAYsGEUfXciNN8D/+v6rggCwPT+gNeBPFLY7+O9c91yxb0p8 INhD7Z673fWxc12HcTaNfubu8UBQWx+slbeiHiV5DqjfHvqo5VGapokcBmmH9cKf +epbEItvqV0fQj8cxthQgp9Ea978p9vTW2jNBD1OIaL7FDO0Gtw7Bmv4btpjLaLu fKpzsW0GrBiwFmNIU1TmyQvjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPADUId/Z iL7VSB1HE0MkcJwFK1cwHwYDVR0jBBgwFoAUJvi9A8Wit6pxdUWeoEeohnYjnuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1RkFCL0ZBODYzNzcyRjVB QzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZweGRVV2VvRWVvaG5Zam51 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSnZpOUE4V2l0NnB4ZFVXZW9FZW9obllqbnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 RkFCL0ZBODYzNzcyRjVBQzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZw eGRVV2VvRWVvaG5Zam51QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZdAaHfXtpIRtSPQ3geWLwR5NF0kt5evneDTvg/1V61bX1fGLUehdyv bbn3bs0n4/gxCRbApp3bq95N5VqXF2cIimsdt9hHZiIUtABVUsYoNhjwk9G0CuUD CN0DJQYukPrk9eTnlC8+ReIfQZ24QZ6RtGo6q88zYTP/Mnk2MUHNXdycsvIXYwsY T+UhdEv2m7JAtqWhePfGQ4jTu0SGR41NFRkneV+K0REn9Kd9Ry2LhvEck4QZpx12 1mwIE3YxKN0Ndn5NDhMbN5hcxt6aW9VX4vHEadGpRFMi9ATS2WacYJUl6mReTqT6 j9o19JB2jiszq1Y9oOolYPvmky/X2fI= -----END CERTIFICATE-----Generated at Mon Jun 16 16:07:57 2025 by rpki-client