$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: d0HNfsj2t5JIjVWUFh0O+hpSM8VGHOKv5yDUSc0C88I= Subject key identifier: 93:72:63:B6:70:B4:D5:C6:5A:F7:52:3D:34:D0:0D:E0:B5:CD:01:52 Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 13D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 13CE Signing time: Sat 14 Jun 2025 16:53:55 +0000 Manifest this update: Sat 14 Jun 2025 16:53:54 +0000 Manifest next update: Sat 21 Jun 2025 16:53:54 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: AYX16IzeeagefUIzSuc3BRwOU9fnAmWgi6MzEYqpCNw=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 4zJ9/i0D6qT42odGNdGTQH8LvSwP3oB1L9xGXSlqgko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5078 (0x13d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Validity Not Before: Jun 14 16:53:54 2025 GMT Not After : Jun 21 16:53:54 2025 GMT Subject: CN=684da923-2b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:fa:3e:f7:a7:3b:9b:87:ff:0a:ef:db:1a: c6:a4:a8:07:07:08:95:64:bb:b0:e9:db:4d:33:c5: 0d:ea:51:b1:01:23:af:87:d1:70:1d:12:c5:d3:50: ff:a3:39:2c:2a:b4:96:7f:a9:ad:f0:41:00:3a:f1: 46:97:da:4a:f3:34:b1:9f:61:15:00:01:7a:ca:6c: ac:4d:fd:05:18:19:da:52:98:c1:93:70:9b:0d:13: 84:c9:ea:6b:ed:80:13:d4:5e:6f:f2:0d:88:0c:66: 1f:62:b8:00:ed:fc:d6:07:3d:df:f1:23:5b:37:db: d4:e9:eb:7f:95:24:3e:ca:11:c7:c5:60:b9:4a:f2: 32:0a:e4:a5:36:0c:d7:43:7e:14:7a:17:e2:41:3a: 1b:71:21:96:55:c6:91:2c:fe:af:b3:74:84:9c:d1: 32:92:e0:63:a9:10:b0:ff:a8:18:84:c3:df:b1:13: 8c:28:98:0d:ce:60:97:87:75:63:f7:07:0e:6f:db: 34:50:42:68:de:02:1a:11:71:06:7a:d4:7a:f8:b8: b8:7c:ed:61:d9:63:02:91:65:7f:66:f5:94:9d:4c: de:45:8d:1f:4e:72:89:69:32:95:c4:9a:79:5a:69: 8f:d7:8c:02:01:fc:9a:b2:0e:73:b7:31:75:5a:73: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:72:63:B6:70:B4:D5:C6:5A:F7:52:3D:34:D0:0D:E0:B5:CD:01:52 X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:34:6d:8b:f4:ea:36:6d:69:f6:e0:bc:06:d7:35:2f:a9:7a: d8:28:d4:d5:51:71:48:40:e6:70:95:63:c6:06:3a:36:3e:9c: 0f:05:1a:ef:4f:e6:c7:55:0e:fc:9c:3e:3d:8c:12:b2:62:5c: 83:08:1c:3c:b1:0f:9d:76:e7:30:59:7a:9a:d6:3d:10:23:e8: 3b:57:26:22:fc:0f:81:3f:48:c9:14:bd:a3:ff:4c:13:fa:0e: 6f:99:9d:81:63:bf:3e:38:29:f3:30:48:43:a5:2b:01:7a:f3: 22:e4:14:2c:04:2f:78:8f:67:3f:76:45:9e:2c:e8:7c:5e:3a: 72:4d:5e:ab:b7:7c:04:82:4c:40:74:a8:bc:46:2f:f7:6e:82: 0f:85:62:d9:fd:76:84:61:0f:9c:d9:df:dd:a9:9b:43:a6:54: 53:2d:72:40:9b:11:3a:8c:c3:ac:91:c2:d5:75:ea:71:46:50: b7:73:af:07:61:c6:19:4c:2d:f3:64:69:96:04:42:95:d9:1e: 7b:b8:16:16:95:eb:17:54:45:a2:f0:d6:47:cf:cb:a7:a7:04: 96:99:72:cd:b7:c1:c2:e7:06:b0:62:ed:66:85:17:b6:28:42: c3:af:9a:8e:c6:c9:b1:e8:c1:8a:52:49:91:ff:b6:ce:6c:f8: 8f:37:c3:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjUwNjE0MTY1MzU0WhcNMjUwNjIxMTY1MzU0WjAYMRYwFAYD VQQDEw02ODRkYTkyMy0yYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5P6PvenO5uH/wrv2xrGpKgHBwiVZLuw6dtNM8UN6lGxASOvh9FwHRLF01D/ ozksKrSWf6mt8EEAOvFGl9pK8zSxn2EVAAF6ymysTf0FGBnaUpjBk3CbDROEyepr 7YAT1F5v8g2IDGYfYrgA7fzWBz3f8SNbN9vU6et/lSQ+yhHHxWC5SvIyCuSlNgzX Q34UehfiQTobcSGWVcaRLP6vs3SEnNEykuBjqRCw/6gYhMPfsROMKJgNzmCXh3Vj 9wcOb9s0UEJo3gIaEXEGetR6+Li4fO1h2WMCkWV/ZvWUnUzeRY0fTnKJaTKVxJp5 WmmP14wCAfyasg5ztzF1WnPawwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNyY7Zw tNXGWvdSPTTQDeC1zQFSMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwNG2L9Oo2bWn24LwG1zUvqXrYKNTVUXFIQOZwlWPGBjo2PpwPBRrv T+bHVQ78nD49jBKyYlyDCBw8sQ+dducwWXqa1j0QI+g7VyYi/A+BP0jJFL2j/0wT +g5vmZ2BY78+OCnzMEhDpSsBevMi5BQsBC94j2c/dkWeLOh8XjpyTV6rt3wEgkxA dKi8Ri/3boIPhWLZ/XaEYQ+c2d/dqZtDplRTLXJAmxE6jMOskcLVdepxRlC3c68H YcYZTC3zZGmWBEKV2R57uBYWlesXVEWi8NZHz8unpwSWmXLNt8HC5wawYu1mhRe2 KELDr5qOxsmx6MGKUkmR/7bObPiPN8MX -----END CERTIFICATE-----Generated at Sat Jun 14 19:24:17 2025 by rpki-client