$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: IfYhQomZ4bBlji3OsmRkGIkR2WeffD24IClOWR2VIbw= Subject key identifier: E5:0E:C4:06:4B:04:05:FF:01:88:7E:16:3A:BE:92:14:95:47:F2:33 Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: 8F Signing time: Sat 21 Jun 2025 05:33:10 +0000 Manifest this update: Sat 21 Jun 2025 05:33:09 +0000 Manifest next update: Sat 28 Jun 2025 05:33:09 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: 7VLpbL9d6DxAf3a7ejyyTs22WrqHZwHJy9VLW5Z+u74=) 2: B0D54166830311EFBF66FC21C4F9AE02.roa (hash: tZx4V13WdS1YqkwOo/f+c5fdIh0lni7XzhM0Rn3v6tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 05:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Jun 21 05:33:09 2025 GMT Not After : Jun 28 05:33:09 2025 GMT Subject: CN=68564416-5c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:3b:d6:6b:a6:55:23:2a:6d:25:4a:72:f7: 51:d5:4d:90:0c:81:ac:b5:7e:8a:17:f7:a7:89:4b: 6d:97:9d:e6:23:a0:b9:79:eb:a9:fd:05:3c:50:56: 3b:8f:aa:a1:29:e7:4d:99:c6:0e:35:b5:6f:b3:ab: 11:b7:4e:68:6d:8f:6d:0f:1b:e9:ea:84:d2:fc:9d: 04:ef:fd:fe:51:09:c5:08:30:81:be:1c:55:0b:7a: fe:5b:9c:34:da:b7:14:f5:90:ca:bc:ff:f9:a0:d1: ee:83:87:9a:1f:42:63:d4:a6:85:55:a4:f8:97:a6: e2:69:ea:b6:6c:4f:e2:53:28:20:a9:3f:6e:72:83: bd:43:dd:08:17:4e:e6:74:49:c2:dd:90:80:a5:79: eb:48:99:cd:95:49:d5:b2:be:e0:83:66:8d:26:f3: 21:68:92:bc:8a:b1:85:9f:73:dd:d4:ea:34:bf:c4: e3:b2:af:9f:4e:e3:af:b7:ed:62:2d:82:89:bf:88: 11:95:87:77:b4:3c:af:0f:9a:c2:32:78:7c:61:c2: 7c:ce:f1:03:86:dc:75:2b:e3:ee:20:e6:b1:0a:61: cd:d7:29:f5:d7:ec:9c:72:09:14:fa:67:5d:af:97: 4e:5c:a3:6d:ef:9d:b7:5b:c8:20:a1:5d:62:75:ae: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:C4:06:4B:04:05:FF:01:88:7E:16:3A:BE:92:14:95:47:F2:33 X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b3:d2:bb:5b:14:73:4b:8b:ec:ad:ee:5d:9d:35:7b:7f:4e: 18:f9:4d:9b:c1:f4:9e:d0:74:72:89:8d:0f:cf:20:4f:e8:5b: 03:a5:2b:99:8d:d9:d8:64:72:93:45:a3:56:d4:cd:4b:71:5a: 3b:5d:2b:19:19:6b:62:94:8a:ad:61:51:99:c9:d9:fc:71:df: a1:ab:bf:b5:9b:9b:c0:99:ac:d6:16:b8:dc:5f:c8:3c:53:e7: 5d:6d:a9:07:c2:6d:c3:97:44:ba:6e:5a:0f:9c:34:24:b1:17: 52:8d:ea:f6:f8:07:6e:4a:5d:3e:e4:e3:74:a4:e7:06:84:e8: 33:e3:e7:ca:d9:99:36:6a:82:80:2f:15:22:41:d8:75:72:e6: d7:e3:2d:d1:5a:2f:3b:2a:a2:dc:30:de:99:76:bc:a1:8f:01: 7d:23:56:47:95:92:d2:79:d5:00:ce:4f:8e:d9:60:39:48:4e: 2f:56:18:f5:7a:99:8d:b9:b0:0a:86:1a:cb:06:6d:36:f3:fb: 92:3e:ee:f0:3a:e2:74:08:68:56:21:19:db:0e:b8:45:b5:8e: 51:8d:9d:25:2c:b7:d0:d1:ed:a8:ce:68:3c:fc:2f:40:26:7b: 36:1d:1c:d7:59:66:a5:b9:15:fa:04:19:4f:db:b1:d5:93:6c: e1:be:e3:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjUwNjIxMDUzMzA5WhcNMjUwNjI4MDUzMzA5WjAYMRYwFAYD VQQDEw02ODU2NDQxNi01YzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ts71mumVSMqbSVKcvdR1U2QDIGstX6KF/eniUttl53mI6C5eeup/QU8UFY7 j6qhKedNmcYONbVvs6sRt05obY9tDxvp6oTS/J0E7/3+UQnFCDCBvhxVC3r+W5w0 2rcU9ZDKvP/5oNHug4eaH0Jj1KaFVaT4l6biaeq2bE/iUyggqT9ucoO9Q90IF07m dEnC3ZCApXnrSJnNlUnVsr7gg2aNJvMhaJK8irGFn3Pd1Oo0v8Tjsq+fTuOvt+1i LYKJv4gRlYd3tDyvD5rCMnh8YcJ8zvEDhtx1K+PuIOaxCmHN1yn11+yccgkU+mdd r5dOXKNt7523W8ggoV1ida7glQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUOxAZL BAX/AYh+Fjq+khSVR/IzMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzs9K7WxRzS4vsre5dnTV7f04Y+U2bwfSe0HRyiY0PzyBP6FsDpSuZ jdnYZHKTRaNW1M1LcVo7XSsZGWtilIqtYVGZydn8cd+hq7+1m5vAmazWFrjcX8g8 U+ddbakHwm3Dl0S6bloPnDQksRdSjer2+AduSl0+5ON0pOcGhOgz4+fK2Zk2aoKA LxUiQdh1cubX4y3RWi87KqLcMN6ZdryhjwF9I1ZHlZLSedUAzk+O2WA5SE4vVhj1 epmNubAKhhrLBm028/uSPu7wOuJ0CGhWIRnbDrhFtY5RjZ0lLLfQ0e2ozmg8/C9A Jns2HRzXWWaluRX6BBlP27HVk2zhvuMY -----END CERTIFICATE-----Generated at Sat Jun 21 20:38:43 2025 by rpki-client