$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: nzFuE2Pg2LUL3NsaBa19w0RsIoyYthSlUjxFUkp8XBI= Subject key identifier: 6B:E7:E5:FC:90:BA:98:3B:F5:1E:1A:9A:E0:9F:FF:0F:0C:F1:50:37 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 08C5 Signing time: Mon 16 Jun 2025 20:17:02 +0000 Manifest this update: Mon 16 Jun 2025 20:17:01 +0000 Manifest next update: Mon 23 Jun 2025 20:17:01 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: tVj4ruhCSAw3ShKm8DqpXtE+DHx+MDKJmhVZqL3bgOE=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Jun 16 20:17:01 2025 GMT Not After : Jun 23 20:17:01 2025 GMT Subject: CN=68507bbd-db88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:6c:cc:ba:b4:cd:25:56:72:c3:72:ad:2c: e2:f5:1b:57:62:7a:d9:66:f8:a5:18:63:cc:10:c2: d4:c6:09:43:bb:80:01:09:f2:a5:b6:16:fc:86:96: 9d:8a:b7:e3:32:4c:2e:10:a4:64:e1:0e:36:4a:2b: e2:1f:98:70:04:75:6e:2e:2d:c6:df:9c:ba:2f:dd: f9:f6:6b:0a:54:bb:8f:29:63:63:ad:ca:cf:71:5a: 94:ae:f7:43:6b:89:17:07:d7:b4:87:27:8a:f2:34: 89:a7:4e:df:58:8e:5e:e7:84:01:54:8c:aa:49:f4: bd:09:5a:b0:de:dd:6c:91:80:27:23:41:d3:60:b0: ae:64:46:d0:c0:4c:d2:ad:ec:7a:28:2c:05:d1:2f: 66:79:ec:e2:01:5b:c6:07:7f:35:fc:6a:70:24:d5: 3c:d0:9b:0a:fa:a9:b2:4d:c2:d5:64:8d:b5:d0:b0: 31:b4:21:ff:af:d7:cf:a8:b1:2c:86:4d:5c:9b:4f: 2d:2d:9e:a2:1b:46:3e:f9:3b:c1:e3:66:3b:63:06: 40:78:50:93:9f:f0:18:9a:85:64:fe:23:59:24:b7: 3e:da:a5:02:3a:3a:0e:c9:f0:a4:4e:41:a2:93:d9: 57:17:72:a5:66:c2:5e:d1:84:96:89:05:ff:4a:1c: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E7:E5:FC:90:BA:98:3B:F5:1E:1A:9A:E0:9F:FF:0F:0C:F1:50:37 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:61:aa:6d:a7:b0:ae:d1:ee:6f:f1:b4:d4:c6:06:bd:b4:4c: 2e:74:8b:55:b3:5f:72:97:a9:b9:83:f4:01:59:fc:ae:9b:c8: 16:64:c8:65:e1:ca:a6:50:9d:b4:2c:cb:34:7f:ee:6a:3b:60: 08:ef:93:96:d3:05:1d:fc:a3:5f:f9:5b:29:75:b7:c6:e8:78: 69:2d:c4:45:fc:89:90:5e:0e:9d:06:e3:19:43:30:ac:8f:29: ea:63:e3:3d:8f:1c:88:71:5a:d3:8a:e4:58:d3:09:68:d4:4f: 74:f6:3a:2c:86:eb:bc:6f:74:76:5b:44:5a:05:21:b8:1f:ec: 5d:bf:69:b6:64:23:a8:63:8a:6f:58:88:79:a6:25:ef:ea:df: 71:84:44:11:46:91:aa:73:28:a2:92:e6:12:13:5f:b4:9b:06: 6e:2d:66:f4:1b:c1:95:07:e6:98:aa:e9:94:9a:b5:e4:9a:35: ef:e9:cb:a1:08:a7:6e:e6:84:f2:52:99:69:37:f3:24:ab:02: 91:d0:9d:d5:3a:f8:0f:31:11:db:b9:a7:4c:16:e2:42:63:e8: 0a:51:79:5a:f9:c9:e0:e6:33:e4:48:8f:55:d7:c2:78:c0:4c: 37:21:72:50:76:9d:30:fa:dd:c7:12:dc:24:e4:8e:ad:fc:06: d5:8b:2b:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUwNjE2MjAxNzAxWhcNMjUwNjIzMjAxNzAxWjAYMRYwFAYD VQQDEw02ODUwN2JiZC1kYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfhszLq0zSVWcsNyrSzi9RtXYnrZZvilGGPMEMLUxglDu4ABCfKlthb8hpad irfjMkwuEKRk4Q42SiviH5hwBHVuLi3G35y6L9359msKVLuPKWNjrcrPcVqUrvdD a4kXB9e0hyeK8jSJp07fWI5e54QBVIyqSfS9CVqw3t1skYAnI0HTYLCuZEbQwEzS rex6KCwF0S9meeziAVvGB381/GpwJNU80JsK+qmyTcLVZI210LAxtCH/r9fPqLEs hk1cm08tLZ6iG0Y++TvB42Y7YwZAeFCTn/AYmoVk/iNZJLc+2qUCOjoOyfCkTkGi k9lXF3KlZsJe0YSWiQX/ShzfnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvn5fyQ upg79R4amuCf/w8M8VA3MB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwYaptp7Cu0e5v8bTUxga9tEwudItVs19yl6m5g/QBWfyum8gWZMhl 4cqmUJ20LMs0f+5qO2AI75OW0wUd/KNf+VspdbfG6HhpLcRF/ImQXg6dBuMZQzCs jynqY+M9jxyIcVrTiuRY0wlo1E909joshuu8b3R2W0RaBSG4H+xdv2m2ZCOoY4pv WIh5piXv6t9xhEQRRpGqcyiikuYSE1+0mwZuLWb0G8GVB+aYqumUmrXkmjXv6cuh CKdu5oTyUplpN/MkqwKR0J3VOvgPMRHbuadMFuJCY+gKUXla+cng5jPkSI9V18J4 wEw3IXJQdp0w+t3HEtwk5I6t/AbViyuY -----END CERTIFICATE-----Generated at Wed Jun 18 08:22:12 2025 by rpki-client