$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: T2Jms7cPQZYOS3xCSnXOUVtq2vzEA3oB8NZtH3J3tRE= Subject key identifier: 73:CE:26:C2:A1:13:A6:B4:F0:9D:91:85:12:13:D6:95:CC:C9:FF:AA Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 43 Signing time: Fri 13 Jun 2025 06:20:38 +0000 Manifest this update: Fri 13 Jun 2025 06:20:37 +0000 Manifest next update: Fri 20 Jun 2025 06:20:37 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: EzbGnLu6b0vhYU1Nr/tHJYi/Ytyu3QwDDCo/L2BMfFY=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Jun 13 06:20:37 2025 GMT Not After : Jun 20 06:20:37 2025 GMT Subject: CN=684bc336-a40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:08:c6:4b:79:0d:19:b1:b7:2d:d2:33:a7:bd: 6d:55:38:5c:0d:6a:2f:fc:68:09:60:8e:58:4b:bf: b2:8e:27:90:62:e6:5c:bd:d7:dc:db:14:95:ed:ab: 12:df:cf:0f:a6:46:c9:0b:b5:ce:f1:a5:54:50:80: b5:85:4d:39:b0:6c:ff:bb:cb:19:1f:60:a8:f3:31: f1:dc:f6:52:c8:13:ed:1a:df:3c:b1:6f:d3:0d:8d: e1:67:89:dd:51:9d:2d:f4:f2:4d:3d:3e:32:4d:d4: 61:2d:0d:de:93:2f:d7:4b:1b:3f:f8:fa:0c:0d:c8: 98:08:95:ec:6a:45:30:8d:14:77:b7:45:ca:d3:2d: 28:06:5c:c3:41:d6:41:95:03:09:75:7f:e8:67:17: e8:0c:c5:0c:ba:8a:95:0b:a2:27:59:e3:e9:5b:b7: d7:f1:52:c1:21:6a:e3:91:5d:a5:83:9d:2f:12:8a: 5a:91:c4:38:45:b4:05:c0:23:19:e1:20:76:e6:57: 38:36:6c:e8:3f:47:bf:32:11:4c:5d:91:ba:55:da: a4:9e:5e:94:ab:2d:e8:ba:19:23:dc:71:ae:9d:7a: c1:c7:00:00:f5:96:c1:28:d8:6a:f6:b4:79:d6:23: 6a:b8:6c:5a:48:fe:63:c1:b6:49:2f:ba:4a:32:64: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CE:26:C2:A1:13:A6:B4:F0:9D:91:85:12:13:D6:95:CC:C9:FF:AA X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:aa:e1:f3:47:4d:73:4b:5e:25:b4:cd:e8:7b:8b:2d:f1:0f: ba:f8:79:44:94:4e:31:89:2c:73:8c:96:71:b0:8a:fa:c6:54: ce:0c:6f:e6:83:61:d6:43:ef:3c:3a:07:f4:3b:69:19:91:a0: 47:cb:67:5c:e7:cf:4e:31:fb:1b:52:2d:d0:5f:f0:7b:25:fc: ff:7f:63:b9:e7:99:62:81:1a:f6:a7:d8:46:de:3c:aa:10:17: 4b:82:ac:73:2c:54:a2:04:b5:2f:40:72:b5:76:b7:aa:15:bf: b1:af:a1:64:92:80:c5:a1:0a:c6:04:d5:85:80:db:8f:04:34: f6:72:42:5f:c5:08:5c:29:d2:fd:08:eb:a0:f4:33:c7:e0:d1: e8:58:22:6f:79:0d:17:d4:47:ec:95:2b:72:ca:2e:15:ab:bb: 00:ee:5d:6c:18:8b:13:a8:50:5c:6a:12:25:a6:e0:0d:21:d2: 92:f9:67:43:a8:22:dd:e4:d1:db:46:7e:a5:ec:91:14:75:7f: 41:00:59:00:3d:15:5d:2c:60:df:9a:67:fa:01:2f:5d:e2:29: 18:f0:a1:d9:c2:7d:77:dc:55:96:1b:df:4d:f8:32:2c:fa:c8: 7b:6c:9e:10:f6:54:8b:8e:04:16:82:8b:e6:3d:84:66:28:1b: d4:ff:60:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTA2MTMwNjIwMzdaFw0yNTA2MjAwNjIwMzdaMBgxFjAUBgNV BAMTDTY4NGJjMzM2LWE0MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3CMZLeQ0Zsbct0jOnvW1VOFwNai/8aAlgjlhLv7KOJ5Bi5ly919zbFJXtqxLf zw+mRskLtc7xpVRQgLWFTTmwbP+7yxkfYKjzMfHc9lLIE+0a3zyxb9MNjeFnid1R nS308k09PjJN1GEtDd6TL9dLGz/4+gwNyJgIlexqRTCNFHe3RcrTLSgGXMNB1kGV Awl1f+hnF+gMxQy6ipULoidZ4+lbt9fxUsEhauORXaWDnS8SilqRxDhFtAXAIxnh IHbmVzg2bOg/R78yEUxdkbpV2qSeXpSrLei6GSPcca6desHHAAD1lsEo2Gr2tHnW I2q4bFpI/mPBtkkvukoyZAajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc84mwqET prTwnZGFEhPWlczJ/6owHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOq4fNHTXNLXiW0zeh7iy3xD7r4eUSUTjGJLHOMlnGwivrGVM4Mb+aD YdZD7zw6B/Q7aRmRoEfLZ1znz04x+xtSLdBf8Hsl/P9/Y7nnmWKBGvan2EbePKoQ F0uCrHMsVKIEtS9AcrV2t6oVv7GvoWSSgMWhCsYE1YWA248ENPZyQl/FCFwp0v0I 66D0M8fg0ehYIm95DRfUR+yVK3LKLhWruwDuXWwYixOoUFxqEiWm4A0h0pL5Z0Oo It3k0dtGfqXskRR1f0EAWQA9FV0sYN+aZ/oBL13iKRjwodnCfXfcVZYb3034Miz6 yHtsnhD2VIuOBBaCi+Y9hGYoG9T/YHk= -----END CERTIFICATE-----Generated at Sat Jun 14 19:07:40 2025 by rpki-client