$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: UprGZIr6r9C8Q5Yl3BfFaISHagDkQLQ55DMJusPwWw8= Subject key identifier: 4B:CE:AB:FC:9D:19:F7:3E:90:5C:D6:C3:FC:D7:E1:3A:AD:B8:BF:CF Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 0288 Signing time: Tue 17 Jun 2025 01:11:38 +0000 Manifest this update: Tue 17 Jun 2025 01:11:38 +0000 Manifest next update: Tue 24 Jun 2025 01:11:38 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: Z0/m4VeSPo6E+QAdhh0VpAypSZo7Va0xTXDDlRuJB88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Jun 17 01:11:38 2025 GMT Not After : Jun 24 01:11:38 2025 GMT Subject: CN=6850c0ca-d97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:9e:6e:f2:3c:8a:95:e7:48:a5:ac:24:73: e2:3a:77:fc:b7:3c:f8:32:58:3d:ce:ac:a6:09:db: de:12:87:47:e1:46:e8:df:35:7f:54:f9:68:ba:71: b7:c7:8d:d2:a8:bc:95:fc:2b:c7:de:d9:36:62:4c: b9:00:6f:d2:af:bb:e5:4e:6d:de:0c:50:c1:0b:e2: eb:9c:c7:60:92:7c:d2:ad:55:cf:bf:15:1e:0d:59: 94:ba:61:d0:85:c4:2c:0b:7c:43:e2:7c:6f:f9:d1: 38:29:7c:b6:42:24:d6:4b:b1:2b:bf:af:9d:01:9b: e5:20:a4:19:d3:00:d9:49:ec:ef:3e:c0:51:44:f0: a9:83:96:e9:01:2d:66:12:30:9e:2e:a8:19:3c:79: 3e:de:b9:d9:fc:f5:29:68:70:73:9e:6a:b0:2a:b5: 69:4a:fc:f3:c8:14:c2:86:64:29:bb:87:c4:c2:38: 0d:d0:f1:21:7a:16:d3:d6:79:03:f4:01:79:31:f3: 1c:ae:ae:62:de:fb:88:11:a1:d1:00:02:e3:4a:9e: 3c:8b:89:8c:d6:ad:79:7f:c7:cd:af:1f:d8:0d:79: 15:63:48:96:a0:37:4d:f9:08:eb:d6:32:e1:56:e9: e2:bc:a9:6a:b7:76:0b:93:9b:ce:92:63:66:b7:cc: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CE:AB:FC:9D:19:F7:3E:90:5C:D6:C3:FC:D7:E1:3A:AD:B8:BF:CF X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f3:3f:2c:bc:30:a8:0e:26:7d:78:93:3a:8f:83:d6:98:98: 85:47:8f:77:76:6f:8b:f5:fb:de:c5:29:7e:70:ef:57:65:86: 4e:7e:57:fb:c7:c1:3d:76:95:d7:b6:1a:57:fc:0a:85:be:f2: 98:01:ba:4a:75:7d:79:0d:d9:57:86:25:2a:d4:0e:56:d7:ad: 95:49:a6:f0:19:97:49:78:4f:4f:e6:a2:29:20:93:2f:96:b3: a6:9f:db:27:57:02:ef:a4:12:6c:8f:35:26:6e:c2:38:77:c8: 0f:4e:f1:22:cb:9e:08:fa:2c:e7:34:29:f8:81:87:f1:7b:ea: fe:52:1f:8e:9d:a8:11:bb:95:9c:c0:d7:63:d3:46:d8:a0:03: c1:17:fa:77:a7:1a:1d:a0:90:1d:58:81:72:38:05:de:1c:cc: 12:f8:15:77:5e:27:ae:75:69:e4:31:0d:46:70:ea:7c:ee:50: a7:41:fb:f9:fe:8e:00:0c:41:99:18:65:7b:0d:a8:bf:be:22: b6:1e:93:63:a7:b3:ae:9b:55:58:7a:4f:a9:51:2b:4d:1f:35: a7:00:e3:c1:a0:2e:e3:b5:58:08:1f:ec:19:20:4c:32:76:98: 5d:22:c2:e0:a1:e3:cf:5e:cf:d0:f2:ba:b5:8a:de:7d:69:92: d4:7b:64:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUwNjE3MDExMTM4WhcNMjUwNjI0MDExMTM4WjAYMRYwFAYD VQQDEw02ODUwYzBjYS1kOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXuebvI8ipXnSKWsJHPiOnf8tzz4Mlg9zqymCdveEodH4Ubo3zV/VPlounG3 x43SqLyV/CvH3tk2Yky5AG/Sr7vlTm3eDFDBC+LrnMdgknzSrVXPvxUeDVmUumHQ hcQsC3xD4nxv+dE4KXy2QiTWS7Erv6+dAZvlIKQZ0wDZSezvPsBRRPCpg5bpAS1m EjCeLqgZPHk+3rnZ/PUpaHBznmqwKrVpSvzzyBTChmQpu4fEwjgN0PEhehbT1nkD 9AF5MfMcrq5i3vuIEaHRAALjSp48i4mM1q15f8fNrx/YDXkVY0iWoDdN+Qjr1jLh VunivKlqt3YLk5vOkmNmt8yy6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvOq/yd Gfc+kFzWw/zX4TqtuL/PMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn8z8svDCoDiZ9eJM6j4PWmJiFR493dm+L9fvexSl+cO9XZYZOflf7 x8E9dpXXthpX/AqFvvKYAbpKdX15DdlXhiUq1A5W162VSabwGZdJeE9P5qIpIJMv lrOmn9snVwLvpBJsjzUmbsI4d8gPTvEiy54I+iznNCn4gYfxe+r+Uh+OnagRu5Wc wNdj00bYoAPBF/p3pxodoJAdWIFyOAXeHMwS+BV3XieudWnkMQ1GcOp87lCnQfv5 /o4ADEGZGGV7Dai/viK2HpNjp7Oum1VYek+pUStNHzWnAOPBoC7jtVgIH+wZIEwy dphdIsLgoePPXs/Q8rq1it59aZLUe2Rs -----END CERTIFICATE-----Generated at Tue Jun 17 10:24:01 2025 by rpki-client