$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: Y2RhMxqEBImvoY+l02DZqC7hfMbEStbEi7nlko71c/o= Subject key identifier: 7D:28:35:2B:05:5C:70:BF:C7:4B:7B:D0:6E:C6:D5:1A:EA:FE:37:F2 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 9F Signing time: Fri 13 Jun 2025 05:09:42 +0000 Manifest this update: Fri 13 Jun 2025 05:09:41 +0000 Manifest next update: Fri 20 Jun 2025 05:09:41 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: NonUgd7h7kXeFjWoRHzHf61LOyBiDaNqI4WCNJAQxck=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Jun 13 05:09:41 2025 GMT Not After : Jun 20 05:09:41 2025 GMT Subject: CN=684bb296-0d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:89:89:10:c7:ad:0a:91:8d:24:3d:27:d0: 80:f3:be:ba:73:c5:90:0c:ea:05:43:d8:62:41:6c: bf:67:23:b4:9d:62:d1:07:57:87:52:6f:2e:b3:53: 96:bf:93:8c:0a:e0:e6:5b:ea:af:52:4f:df:33:c8: 19:df:b7:16:65:95:cb:66:8d:6b:b8:60:62:1d:4d: dc:ce:34:dc:67:aa:e6:e9:4b:a1:54:c7:45:50:0b: 95:c9:78:c4:ee:2f:12:93:f6:6c:65:56:b9:7f:64: 06:fe:4f:23:1e:93:3f:24:fe:57:21:6e:cb:1d:29: f2:03:fe:58:12:71:b1:75:22:27:25:4c:3f:1e:a8: 71:c9:5e:c9:cc:f3:77:9d:9f:be:26:0b:c9:32:34: b0:63:0d:d6:36:e2:d1:e1:3a:2c:ac:3c:c6:a7:66: bd:e8:28:16:60:d0:f2:47:39:e0:ba:c6:4e:93:80: 01:ae:d4:5e:5f:9d:bb:71:ab:e7:58:ec:4d:fb:9a: 5d:e7:7e:ae:be:bf:8f:6e:7e:34:38:55:67:85:09: 19:f8:a3:7d:65:70:a5:ca:31:4b:b1:52:2d:b0:cb: 58:92:0a:b9:23:79:7c:ac:a0:23:3e:84:b7:ee:54: c7:bc:16:eb:c9:3c:82:a0:aa:31:67:1b:7b:50:c1: 84:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:35:2B:05:5C:70:BF:C7:4B:7B:D0:6E:C6:D5:1A:EA:FE:37:F2 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:98:e1:65:a7:66:92:ad:3c:fb:86:3a:07:0b:f3:28:ff:7c: 46:77:22:a0:8f:74:d7:b7:85:33:cb:11:12:06:f8:f2:82:33: 5e:b2:8b:d6:4a:47:c6:e7:52:9f:7e:d7:28:f5:c1:59:50:47: d9:e4:fd:c8:a6:3d:c6:f8:a4:7a:e2:ee:20:28:a2:15:51:fe: 79:6f:e7:0a:b0:e3:c3:c3:52:8d:48:3b:61:4a:c0:96:a0:a9: 2b:be:1b:c7:cb:d7:18:39:15:92:7a:bc:c0:63:fe:3a:6a:a1: 56:50:33:d9:19:06:bb:e9:22:65:71:60:1e:ee:cb:4f:e8:e1: 1a:d1:2d:78:93:05:f4:04:6f:b8:45:45:8c:03:43:b3:d0:fb: 9d:4b:b1:93:df:f6:68:33:ba:2b:60:20:3e:7d:ef:a2:ea:f6: e1:03:d8:1f:05:a7:76:2d:85:28:80:e6:b6:24:cb:ab:66:78: 0b:46:d2:3c:6c:6b:4d:a8:bf:3a:c2:c2:ab:f1:f1:dc:25:c7: 48:75:ef:02:9f:47:ab:2b:1f:c4:09:1a:ff:a8:0c:00:a6:71: 21:ed:02:6e:05:2a:b5:6f:cd:99:cf:67:6a:ac:3a:96:75:8b: d3:da:fe:e3:ae:3e:73:dd:51:96:2d:bc:8c:e1:ef:5f:2a:17: 5c:c1:c0:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUwNjEzMDUwOTQxWhcNMjUwNjIwMDUwOTQxWjAYMRYwFAYD VQQDEw02ODRiYjI5Ni0wZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9GJiRDHrQqRjSQ9J9CA8766c8WQDOoFQ9hiQWy/ZyO0nWLRB1eHUm8us1OW v5OMCuDmW+qvUk/fM8gZ37cWZZXLZo1ruGBiHU3czjTcZ6rm6UuhVMdFUAuVyXjE 7i8Sk/ZsZVa5f2QG/k8jHpM/JP5XIW7LHSnyA/5YEnGxdSInJUw/HqhxyV7JzPN3 nZ++JgvJMjSwYw3WNuLR4TosrDzGp2a96CgWYNDyRzngusZOk4ABrtReX527cavn WOxN+5pd536uvr+Pbn40OFVnhQkZ+KN9ZXClyjFLsVItsMtYkgq5I3l8rKAjPoS3 7lTHvBbryTyCoKoxZxt7UMGEiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0oNSsF XHC/x0t70G7G1Rrq/jfyMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDmOFlp2aSrTz7hjoHC/Mo/3xGdyKgj3TXt4UzyxESBvjygjNesovW SkfG51Kfftco9cFZUEfZ5P3Ipj3G+KR64u4gKKIVUf55b+cKsOPDw1KNSDthSsCW oKkrvhvHy9cYORWSerzAY/46aqFWUDPZGQa76SJlcWAe7stP6OEa0S14kwX0BG+4 RUWMA0Oz0PudS7GT3/ZoM7orYCA+fe+i6vbhA9gfBad2LYUogOa2JMurZngLRtI8 bGtNqL86wsKr8fHcJcdIde8Cn0erKx/ECRr/qAwApnEh7QJuBSq1b82Zz2dqrDqW dYvT2v7jrj5z3VGWLbyM4e9fKhdcwcBl -----END CERTIFICATE-----Generated at Sat Jun 14 18:59:44 2025 by rpki-client