$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json) Hash identifier: +5hn3csWZ+tDudriwFhS9EaiK9S/YJ1//kiZVNaLZq0= Subject key identifier: 55:B9:01:82:39:5D:A0:EF:F2:E1:F9:79:17:43:30:0D:54:30:A7:72 Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft Manifest number: 89 Signing time: Thu 19 Jun 2025 05:53:13 +0000 Manifest this update: Thu 19 Jun 2025 05:53:12 +0000 Manifest next update: Thu 26 Jun 2025 05:53:12 +0000 Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: ONguC3Dx6so008Ccy9ixOoJaB2bQUvZJ8vuN9X3kzLU=) 2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Validity Not Before: Jun 19 05:53:12 2025 GMT Not After : Jun 26 05:53:12 2025 GMT Subject: CN=6853a5c8-cf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:68:c4:6f:01:30:93:0d:49:0b:7d:3f:b6: 1c:8f:75:28:7c:4c:25:ff:b5:fe:eb:c5:70:ee:80: 82:8c:16:77:10:fc:4b:f8:12:28:4f:73:c0:fd:98: b0:ee:cb:b2:82:2c:43:5b:97:93:e4:51:3c:5d:b4: d5:41:06:d3:d4:cd:fd:0c:0f:74:10:5c:5c:e4:c7: be:c6:cf:8d:06:5c:49:65:eb:9a:f6:c8:dc:c8:41: 0f:be:8b:f9:45:4e:69:f2:22:77:8f:6f:ec:21:f2: f0:e0:2e:12:48:2b:c4:34:80:48:5c:07:ec:ba:49: a1:d9:9f:5f:48:1a:80:90:4a:a4:d0:6e:21:30:c4: f4:77:a2:73:96:d5:7b:01:3b:d2:0a:5e:03:d6:40: c5:16:44:30:2c:f8:0d:51:42:b7:ce:28:af:31:45: 01:1f:fd:43:cb:02:8e:7f:5f:15:df:78:89:dd:b6: c3:b0:6e:0d:e8:7f:f4:e4:5c:f8:38:c5:71:2d:32: 36:1f:f8:39:db:fa:ad:78:63:ee:b0:2e:1f:2d:72: 2e:40:0b:07:d9:95:a7:b3:9b:e3:1b:66:12:e2:00: 8c:aa:90:28:62:7b:37:a6:5a:9e:2c:e6:96:ce:ef: f1:38:30:85:af:14:00:ef:8f:d8:8e:45:8f:34:e3: 2c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B9:01:82:39:5D:A0:EF:F2:E1:F9:79:17:43:30:0D:54:30:A7:72 X509v3 Authority Key Identifier: keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f0:92:ed:e7:76:11:67:0e:ac:d8:7e:34:1c:95:6b:ea:be: 32:cc:36:dc:27:dc:33:8f:13:08:17:ec:b0:d5:16:cc:e9:3a: e0:3d:91:79:0e:40:a4:59:19:3a:5a:c0:ee:c8:00:36:c5:9a: 91:a7:69:c0:62:63:da:e6:76:14:e3:ba:6d:fc:6d:f2:46:35: 98:5d:02:8c:10:a8:4a:99:2b:b4:d3:f6:fc:07:63:99:05:f7: 50:87:24:c0:49:6c:98:c6:bc:8b:0c:49:2e:14:72:d9:12:28: e7:72:c6:c8:fe:fb:6a:4c:e8:a4:fd:fc:7a:90:03:d4:89:ae: 0d:ec:c2:ef:14:0a:9d:4f:fe:d4:24:04:5c:d9:a4:d2:97:91: ef:0a:86:73:3b:7f:27:51:96:f8:52:a1:53:df:9e:dd:2f:43: 85:57:0e:da:ee:6d:48:b9:67:5d:41:e1:8d:84:ee:62:57:22: da:22:d8:2a:56:80:d5:33:e3:a9:c8:81:0a:d1:b4:1c:0c:02: 5a:72:fc:15:71:be:37:6d:fc:68:ed:7c:62:4c:01:92:3d:c3: a0:3b:e3:f4:8e:dd:d4:b0:36:fa:46:cd:51:c4:54:59:ea:2c: 31:c9:b3:db:3d:66:34:92:a3:1d:f6:17:f4:57:b2:49:5f:0f: b8:93:29:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1 RjE2M0FFNDMwHhcNMjUwNjE5MDU1MzEyWhcNMjUwNjI2MDU1MzEyWjAYMRYwFAYD VQQDEw02ODUzYTVjOC1jZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArERoxG8BMJMNSQt9P7Ycj3UofEwl/7X+68Vw7oCCjBZ3EPxL+BIoT3PA/Ziw 7suygixDW5eT5FE8XbTVQQbT1M39DA90EFxc5Me+xs+NBlxJZeua9sjcyEEPvov5 RU5p8iJ3j2/sIfLw4C4SSCvENIBIXAfsukmh2Z9fSBqAkEqk0G4hMMT0d6JzltV7 ATvSCl4D1kDFFkQwLPgNUUK3ziivMUUBH/1DywKOf18V33iJ3bbDsG4N6H/05Fz4 OMVxLTI2H/g52/qteGPusC4fLXIuQAsH2ZWns5vjG2YS4gCMqpAoYns3plqeLOaW zu/xODCFrxQA74/YjkWPNOMscwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW5AYI5 XaDv8uH5eRdDMA1UMKdyMB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm MUFiYklESTJaWnhmRmpya00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT8JLt53YRZw6s2H40HJVr6r4yzDbcJ9wzjxMIF+yw1RbM6TrgPZF5 DkCkWRk6WsDuyAA2xZqRp2nAYmPa5nYU47pt/G3yRjWYXQKMEKhKmSu00/b8B2OZ BfdQhyTASWyYxryLDEkuFHLZEijncsbI/vtqTOik/fx6kAPUia4N7MLvFAqdT/7U JARc2aTSl5HvCoZzO38nUZb4UqFT357dL0OFVw7a7m1IuWddQeGNhO5iVyLaItgq VoDVM+OpyIEK0bQcDAJacvwVcb43bfxo7XxiTAGSPcOgO+P0jt3UsDb6Rs1RxFRZ 6iwxybPbPWY0kqMd9hf0V7JJXw+4kymj -----END CERTIFICATE-----Generated at Thu Jun 19 11:07:56 2025 by rpki-client