$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json) Hash identifier: mR83S0zXBWWMG69m4fF/mz8ipIZkxl+oCBCDXaeIChg= Subject key identifier: 06:45:68:A3:14:8B:40:27:54:40:35:8A:23:DC:45:80:59:5B:12:B3 Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Certificate serial: 20CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft Manifest number: 20C4 Signing time: Sat 14 Jun 2025 15:55:30 +0000 Manifest this update: Sat 14 Jun 2025 15:55:29 +0000 Manifest next update: Sat 21 Jun 2025 15:55:29 +0000 Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: A85m9LGPFS/4QjUAXEafOUHcGQcwJixH2rgk9pIAyEo=) 2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: KDA9/GHhy0rjdE5GkXBH2Mt48KB9YjSR7eGXIC67yec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8395 (0x20cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Validity Not Before: Jun 14 15:55:29 2025 GMT Not After : Jun 21 15:55:29 2025 GMT Subject: CN=684d9b71-6a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:07:ed:36:40:98:b3:18:f1:ff:98:20:43: b8:86:d0:51:c3:10:b3:63:7a:64:92:ba:5e:3a:05: 62:5c:eb:35:ed:03:1c:1f:8c:01:cf:85:38:e5:a7: 56:9a:ca:cf:98:f2:74:24:55:3a:2d:40:97:d1:2c: d9:02:e8:af:ce:a8:08:bf:6a:85:4c:a2:06:c5:db: 76:f3:46:cb:48:5a:fd:60:26:7b:8f:7a:58:ea:0c: 38:ff:1d:36:27:98:b2:6d:c0:c3:c6:a7:ac:36:00: ab:1a:5b:3b:9f:c0:76:fd:92:02:47:fd:89:7b:01: 1a:86:d7:bb:44:ed:6a:83:06:dc:c8:14:67:a2:27: 9c:b1:3e:70:f8:ef:07:c8:db:2c:df:c3:62:90:2c: ff:8f:2f:d9:1f:25:a9:75:57:2f:4b:30:a3:e3:0a: 26:93:c4:2f:58:99:c1:4d:05:08:38:51:c3:90:8d: df:e6:aa:67:d3:bd:50:b4:2e:97:d8:63:34:6b:f8: 63:c9:37:84:f9:5c:7b:47:34:78:6d:27:37:de:4e: 9e:a0:40:20:33:cc:cf:e9:7a:3a:5b:63:d0:93:b0: ac:32:fe:f6:02:77:e5:0d:e6:f4:64:fd:cc:df:05: 1e:32:0d:5a:6b:6e:1b:63:a3:15:f8:4f:4b:db:ec: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:45:68:A3:14:8B:40:27:54:40:35:8A:23:DC:45:80:59:5B:12:B3 X509v3 Authority Key Identifier: keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:04:50:5f:db:38:43:2f:87:51:7c:f8:db:f9:5e:68:67:7e: 8b:88:99:cc:03:8d:05:33:78:55:03:94:11:fc:ff:c6:ab:44: ee:c5:ce:f2:62:53:b1:98:7e:4a:f7:91:bd:04:97:cf:bb:99: 2c:1f:e6:0e:89:c4:10:67:5d:f7:f5:2a:2f:ed:2e:d1:e7:b1: 95:26:eb:25:95:f3:74:79:b1:db:17:b9:d6:1e:6c:7c:f8:ca: 64:12:33:2e:05:0f:60:20:73:72:be:b4:e0:eb:3c:a9:e7:e9: f9:b0:fa:ce:a8:fb:27:94:67:57:6d:e3:f5:93:31:57:58:b5: 42:53:9b:e1:11:f5:d8:72:5a:cc:14:4f:4b:fb:57:8e:4a:12: 45:d1:2e:3d:94:d7:98:bd:4f:5a:73:99:98:3d:50:78:42:04: 9b:f8:2f:39:d9:a6:8d:0a:7a:b4:f0:5d:6e:2d:01:4a:f3:4e: 01:52:2c:f8:c7:f4:e4:1a:fd:03:4f:cd:5a:ae:83:5a:d5:d6: 0b:74:15:d7:5c:68:2a:d2:9b:bd:eb:92:65:10:83:5e:d3:5f: e5:95:f7:77:ed:b4:46:f1:24:b2:c1:56:e5:5a:1e:9f:28:55: a7:98:c7:91:ef:5a:b4:97:b3:f1:66:c5:81:fc:db:30:2e:ad: 1b:ab:55:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVFMUUxNENBQjg1 Njk4N0IwNUQwHhcNMjUwNjE0MTU1NTI5WhcNMjUwNjIxMTU1NTI5WjAYMRYwFAYD VQQDEw02ODRkOWI3MS02YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWMH7TZAmLMY8f+YIEO4htBRwxCzY3pkkrpeOgViXOs17QMcH4wBz4U45adW msrPmPJ0JFU6LUCX0SzZAuivzqgIv2qFTKIGxdt280bLSFr9YCZ7j3pY6gw4/x02 J5iybcDDxqesNgCrGls7n8B2/ZICR/2JewEahte7RO1qgwbcyBRnoiecsT5w+O8H yNss38NikCz/jy/ZHyWpdVcvSzCj4womk8QvWJnBTQUIOFHDkI3f5qpn071QtC6X 2GM0a/hjyTeE+Vx7RzR4bSc33k6eoEAgM8zP6Xo6W2PQk7CsMv72AnflDeb0ZP3M 3wUeMg1aa24bY6MV+E9L2+zF9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZFaKMU i0AnVEA1iiPcRYBZWxKzMB8GA1UdIwQYMBaAFI03iUsJQez9TWsF4eFMq4Vph7Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODkwRC8yMUI3QTgwRUZG RkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQMU5hd1hoNFV5cmhXbUhz RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pUZUpTd2xCN1AxTmF3WGg0VXlyaFdtSHNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODkwRC8yMUI3QTgwRUZGRkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQ MU5hd1hoNFV5cmhXbUhzRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhBFBf2zhDL4dRfPjb+V5oZ36LiJnMA40FM3hVA5QR/P/Gq0Tuxc7y YlOxmH5K95G9BJfPu5ksH+YOicQQZ1339Sov7S7R57GVJusllfN0ebHbF7nWHmx8 +MpkEjMuBQ9gIHNyvrTg6zyp5+n5sPrOqPsnlGdXbeP1kzFXWLVCU5vhEfXYclrM FE9L+1eOShJF0S49lNeYvU9ac5mYPVB4QgSb+C852aaNCnq08F1uLQFK804BUiz4 x/TkGv0DT81aroNa1dYLdBXXXGgq0pu965JlEINe01/llfd37bRG8SSywVblWh6f KFWnmMeR71q0l7PxZsWB/NswLq0bq1WZ -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:33 2025 by rpki-client