$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: jS5ihcf/V7TrI5ak1y3pEMoAr1gZ5PDNh1MRk5Mqh6Y= Subject key identifier: 0C:D5:55:78:0E:96:14:5F:7A:64:35:3E:90:33:CF:24:FB:89:29:E2 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: AA Signing time: Fri 13 Jun 2025 05:03:00 +0000 Manifest this update: Fri 13 Jun 2025 05:03:00 +0000 Manifest next update: Fri 20 Jun 2025 05:03:00 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: IKzd1h2nkKcYxiMSF7UGvRVz2d7X9Qi0SnLnYO9qHsA=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Jun 13 05:03:00 2025 GMT Not After : Jun 20 05:03:00 2025 GMT Subject: CN=684bb104-9bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:08:8f:35:34:3c:b9:2d:74:54:d8:43:f4: a5:80:9e:b7:b1:c7:fb:1b:2f:0b:c8:9b:9b:18:2e: 7f:2e:3b:7a:38:82:58:17:02:98:fe:45:86:ee:92: 9d:99:ab:a4:92:90:3f:65:d2:c6:7e:65:b3:76:4e: f1:dd:92:8a:f7:56:5d:fe:03:76:9c:7c:29:94:b7: 09:60:87:82:39:a6:9d:f4:f8:5c:29:49:18:90:e7: 3b:dd:89:ec:15:8a:d0:7f:0e:8d:f4:91:e6:3b:65: 25:ca:f5:fb:99:a8:80:57:04:06:87:d2:a1:87:6e: 61:71:22:7e:fb:fd:4e:b6:d7:d0:26:6d:7a:0e:62: da:55:7e:31:4a:6d:53:0b:9d:ea:d4:ad:59:e7:5b: 3e:34:99:14:6c:53:1b:19:28:30:de:34:25:bf:95: f1:14:22:0c:bf:af:bb:a3:1b:81:93:83:29:5c:f7: bf:fc:3e:d7:11:42:2b:52:28:63:48:0d:d9:93:e3: 08:22:27:7b:f9:4e:70:8a:ff:40:45:0e:0e:29:0c: f2:27:34:35:bc:b9:7b:f3:75:96:e7:65:ac:c0:c8: 3c:6e:5f:a8:47:3c:6d:a2:82:f7:96:ae:21:38:91: 8d:dd:50:e8:a3:30:4c:8a:c0:ab:4b:1e:0d:14:6a: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:55:78:0E:96:14:5F:7A:64:35:3E:90:33:CF:24:FB:89:29:E2 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:71:4b:85:ae:2a:99:e8:d8:36:3f:7c:ac:8a:e9:f9:31:27: e2:ae:7e:79:07:b4:85:21:bf:71:71:ec:12:0b:5e:17:a8:a8: 3b:41:02:ec:c2:67:92:22:27:20:7e:34:d5:14:ae:cf:da:b0: f9:78:54:99:82:58:45:c8:26:07:cc:9e:c1:d4:a7:60:92:1c: 41:14:c8:db:a3:09:ba:c1:3e:dd:66:2e:c1:1d:22:01:39:c8: 19:a4:c9:6a:b8:a8:00:d0:20:34:20:20:d4:8d:d6:dc:3f:8d: 1d:24:60:3d:72:7a:72:6e:62:06:2a:1b:d1:98:e8:6c:d2:24: 1e:da:2f:8b:00:5e:3b:ee:a8:bd:5c:5b:bb:c2:12:53:8a:35: e7:3a:19:3a:4b:6b:8d:36:46:02:4a:b3:a3:bc:fd:a8:89:09: 6d:98:5d:92:ac:8a:b1:a9:62:9e:ff:95:44:98:fe:99:7b:ec: ca:df:54:5c:5f:48:a7:2e:a9:b2:bf:18:02:7c:74:ed:64:61: e4:d7:9f:69:24:44:e3:21:9f:b9:fa:46:7c:80:72:de:4e:b0: e6:1b:e6:40:50:47:d2:fc:96:6c:1d:f4:a1:fb:ef:24:f7:93: 7a:63:21:83:93:66:20:1b:d5:24:d5:80:8a:3b:d6:58:da:61: 8b:f2:05:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUwNjEzMDUwMzAwWhcNMjUwNjIwMDUwMzAwWjAYMRYwFAYD VQQDEw02ODRiYjEwNC05YmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAEIjzU0PLktdFTYQ/SlgJ63scf7Gy8LyJubGC5/Ljt6OIJYFwKY/kWG7pKd maukkpA/ZdLGfmWzdk7x3ZKK91Zd/gN2nHwplLcJYIeCOaad9PhcKUkYkOc73Yns FYrQfw6N9JHmO2UlyvX7maiAVwQGh9Khh25hcSJ++/1OttfQJm16DmLaVX4xSm1T C53q1K1Z51s+NJkUbFMbGSgw3jQlv5XxFCIMv6+7oxuBk4MpXPe//D7XEUIrUihj SA3Zk+MIIid7+U5wiv9ARQ4OKQzyJzQ1vLl783WW52WswMg8bl+oRzxtooL3lq4h OJGN3VDoozBMisCrSx4NFGoJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzVVXgO lhRfemQ1PpAzzyT7iSniMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChcUuFriqZ6Ng2P3ysiun5MSfirn55B7SFIb9xcewSC14XqKg7QQLs wmeSIicgfjTVFK7P2rD5eFSZglhFyCYHzJ7B1KdgkhxBFMjbowm6wT7dZi7BHSIB OcgZpMlquKgA0CA0ICDUjdbcP40dJGA9cnpybmIGKhvRmOhs0iQe2i+LAF477qi9 XFu7whJTijXnOhk6S2uNNkYCSrOjvP2oiQltmF2SrIqxqWKe/5VEmP6Ze+zK31Rc X0inLqmyvxgCfHTtZGHk159pJETjIZ+5+kZ8gHLeTrDmG+ZAUEfS/JZsHfSh++8k 95N6YyGDk2YgG9Uk1YCKO9ZY2mGL8gXG -----END CERTIFICATE-----Generated at Sat Jun 14 18:41:17 2025 by rpki-client