$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: KsvhJpVRINdCR+x14sybEOmx75EF2vpY3oDe09aePXc= Subject key identifier: 55:E6:45:C8:42:2E:E2:B3:22:75:1B:98:0F:55:71:FC:BB:2E:30:51 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 01E0 Signing time: Fri 13 Jun 2025 01:44:18 +0000 Manifest this update: Fri 13 Jun 2025 01:44:17 +0000 Manifest next update: Fri 20 Jun 2025 01:44:17 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: ngc+xQf5njEkZspbfowCsYYCII5nof3Myw0P0NZ6Ai8=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Jun 13 01:44:17 2025 GMT Not After : Jun 20 01:44:17 2025 GMT Subject: CN=684b8271-778d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:8a:5b:24:9b:58:5c:21:cb:9c:4c:4d:c6: af:90:be:59:31:c9:52:ad:a6:04:c1:88:5c:d5:dd: dc:4a:b9:9b:cf:ab:a6:8a:6c:16:93:a0:2f:89:dd: 01:67:18:9c:92:a2:9e:fa:cc:09:26:d2:5c:53:84: 1f:a5:51:76:74:5e:71:7a:5f:87:f0:f9:ac:00:b2: f8:11:f0:34:5c:95:e5:6e:65:36:fb:21:4b:03:1b: 7e:33:2f:7d:a1:26:7a:6f:75:7c:88:2b:99:97:b0: 62:fa:fe:d5:e9:f0:13:30:32:09:f0:2f:8f:65:46: fc:e7:33:41:93:73:e7:c3:c5:7b:df:ab:d0:0e:27: 62:62:ff:73:41:39:28:a9:fa:fd:04:b1:31:06:c5: 2d:b2:fb:27:e4:19:c0:0c:ae:ef:2b:29:33:34:fe: 1f:a6:a6:a2:d5:fc:10:5f:14:7a:0c:dd:7d:64:e9: a0:e3:e5:15:f8:6e:df:26:1c:75:c7:d6:cc:53:f0: 40:b5:e5:94:fb:ba:34:3e:71:cd:40:cb:9e:32:a9: a4:65:39:e1:a7:6c:40:5a:90:c7:59:c0:0d:35:36: b6:8d:38:d3:91:e9:4e:43:32:9c:86:df:15:dd:42: 47:f1:d0:1d:9b:3e:f7:42:f6:30:db:d4:03:00:93: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E6:45:C8:42:2E:E2:B3:22:75:1B:98:0F:55:71:FC:BB:2E:30:51 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d1:2a:03:5f:6b:5e:3f:58:e6:ab:ad:05:71:e9:d8:8a:a0: 4f:a3:c0:f0:18:06:99:60:38:02:2b:58:8a:e8:76:10:92:25: 98:8f:a5:a0:ab:f3:04:74:d0:1c:64:cd:33:d3:c6:04:68:52: 6b:9b:5e:5d:a6:51:78:53:66:61:e6:c6:83:e4:77:de:c8:a0: 83:54:1f:3d:7f:37:4f:77:1e:80:5b:f6:01:c7:6b:93:d7:59: af:d3:f2:80:88:1d:c5:55:39:d7:7d:ee:89:fd:aa:d3:ee:a4: 81:78:56:69:b4:93:1c:7f:6e:8c:40:6c:98:3a:47:07:56:16: 5b:6d:98:4e:c4:57:1c:e1:0d:11:b6:62:c1:3d:cd:6f:7c:f6: d2:8c:f5:2f:70:08:65:1b:46:d1:80:61:cc:59:d0:e4:42:d0: 80:26:20:24:ef:29:9c:29:0e:44:dd:94:6f:b8:a0:5b:91:86: 0f:c9:aa:1f:99:61:71:5f:f3:3f:72:a5:e4:aa:c0:09:25:47: 90:12:71:a6:71:6b:42:fc:3e:be:44:de:0c:8e:e0:34:a6:89: f4:1b:5f:a2:7d:7b:fb:95:32:6f:7c:24:9d:5a:87:43:7d:50: 5c:67:c2:ab:fd:ae:9d:2a:90:a1:a1:20:d2:59:da:75:11:71: 70:8d:3a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjUwNjEzMDE0NDE3WhcNMjUwNjIwMDE0NDE3WjAYMRYwFAYD VQQDEw02ODRiODI3MS03NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYGKWySbWFwhy5xMTcavkL5ZMclSraYEwYhc1d3cSrmbz6umimwWk6Avid0B ZxickqKe+swJJtJcU4QfpVF2dF5xel+H8PmsALL4EfA0XJXlbmU2+yFLAxt+My99 oSZ6b3V8iCuZl7Bi+v7V6fATMDIJ8C+PZUb85zNBk3Pnw8V736vQDidiYv9zQTko qfr9BLExBsUtsvsn5BnADK7vKykzNP4fpqai1fwQXxR6DN19ZOmg4+UV+G7fJhx1 x9bMU/BAteWU+7o0PnHNQMueMqmkZTnhp2xAWpDHWcANNTa2jTjTkelOQzKcht8V 3UJH8dAdmz73QvYw29QDAJOXCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXmRchC LuKzInUbmA9Vcfy7LjBRMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB10SoDX2teP1jmq60FcenYiqBPo8DwGAaZYDgCK1iK6HYQkiWYj6Wg q/MEdNAcZM0z08YEaFJrm15dplF4U2Zh5saD5HfeyKCDVB89fzdPdx6AW/YBx2uT 11mv0/KAiB3FVTnXfe6J/arT7qSBeFZptJMcf26MQGyYOkcHVhZbbZhOxFcc4Q0R tmLBPc1vfPbSjPUvcAhlG0bRgGHMWdDkQtCAJiAk7ymcKQ5E3ZRvuKBbkYYPyaof mWFxX/M/cqXkqsAJJUeQEnGmcWtC/D6+RN4MjuA0pon0G1+ifXv7lTJvfCSdWodD fVBcZ8Kr/a6dKpChoSDSWdp1EXFwjTqA -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:33 2025 by rpki-client