$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: YI7Z80EIQvlQAAdv5SnbYsEQ5N7rh32SmDukmZaD2pw= Subject key identifier: DD:8D:6F:F6:B8:20:41:F2:9B:40:80:FE:D2:2E:E1:CC:0D:17:22:8A Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: D2 Signing time: Thu 19 Jun 2025 05:07:38 +0000 Manifest this update: Thu 19 Jun 2025 05:07:37 +0000 Manifest next update: Thu 26 Jun 2025 05:07:37 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: bkePpVdLlYxefNsW3B+d5eaS/QDB7SewsvRt1dAzvGc=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: fl+IoRPDWf9s2ZcrS7/FMHfvwNKoBXCzQH5GQ7VA1jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: Jun 19 05:07:37 2025 GMT Not After : Jun 26 05:07:37 2025 GMT Subject: CN=68539b1a-0cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:e5:ae:c2:5c:97:2f:ce:ff:94:ab:98:37: 66:ed:9d:b1:c9:7f:a8:20:ef:02:8f:6c:d0:09:93: 32:d2:34:38:3c:61:a1:05:a9:1f:a0:fa:a5:b5:af: a7:5c:dd:7d:7b:88:bd:72:1d:fe:58:97:34:eb:b1: ae:c1:6b:78:d2:52:bc:c9:1c:24:e8:c4:0f:f3:dd: 95:8d:af:d4:d5:4d:bc:21:60:90:da:21:35:c9:54: bf:0d:cb:af:d1:78:49:14:85:2c:3a:36:28:df:6a: 23:22:8d:1f:58:de:64:26:92:b6:37:e0:8b:4f:c0: 0f:f1:1b:75:95:8c:c9:c0:43:df:0e:14:d5:6e:41: 01:22:63:30:3d:db:f3:ea:b9:1e:e3:da:35:da:35: db:88:a1:82:dd:05:1c:b2:cf:6e:8b:6b:be:3f:37: cc:a3:41:d5:70:ac:85:d3:bd:17:a0:a7:99:04:fa: 62:fb:9d:c8:59:2b:84:ac:91:7b:e9:37:6a:6d:cd: 4f:24:d5:d4:0b:46:bb:c1:a4:4a:49:85:e9:c1:54: 7c:aa:d3:92:bc:4b:7e:c0:11:62:35:8c:ad:3b:d5: e1:53:c3:f7:a9:ae:ce:d7:75:9d:52:a9:17:b2:25: 7c:ca:8b:43:cc:85:8b:b0:4e:7b:6b:57:af:59:ef: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8D:6F:F6:B8:20:41:F2:9B:40:80:FE:D2:2E:E1:CC:0D:17:22:8A X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d1:e3:70:9a:33:e9:18:51:66:37:4e:85:1b:7b:9b:3c:45: e7:67:a7:9e:a7:34:62:dc:c2:6b:ec:04:c2:1b:17:e0:2e:90: 5d:c2:f2:b5:7a:d1:6d:85:c5:40:f5:92:01:01:b5:c2:c7:5c: e1:cc:de:2d:d0:42:aa:70:29:d5:c2:50:f4:c0:e2:4c:f8:28: 9f:42:e9:c9:96:14:58:80:54:79:ae:0d:b5:de:d0:dd:fe:21: 23:64:3f:09:95:7f:fe:86:9a:39:85:97:03:54:cf:ce:a5:c0: bc:d1:31:c3:e6:98:b4:61:1e:2f:dc:8c:be:16:03:96:81:91: 45:4b:93:af:8a:29:b4:7f:e7:67:65:6a:64:8a:12:7f:e9:f8: 26:1c:be:23:52:9a:37:a6:00:44:88:39:bd:ac:0c:fd:53:79: c9:ef:5e:f9:ac:88:f9:8e:a2:a1:99:80:3a:c8:42:cf:71:6e: f8:bf:a1:b9:7f:37:ad:80:53:3d:b6:54:5d:5a:0b:6d:ab:e9: 90:71:cb:00:fe:7d:00:52:f2:6e:da:3c:fb:f8:95:70:b6:3d: 1e:e1:c2:17:53:cd:8a:f0:dc:e3:5f:e5:f4:dc:62:5a:73:02: 63:42:77:af:6b:ec:de:af:dd:4b:f7:7d:85:06:91:4c:57:ba: c3:b9:7c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUwNjE5MDUwNzM3WhcNMjUwNjI2MDUwNzM3WjAYMRYwFAYD VQQDEw02ODUzOWIxYS0wY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7C/lrsJcly/O/5SrmDdm7Z2xyX+oIO8Cj2zQCZMy0jQ4PGGhBakfoPqlta+n XN19e4i9ch3+WJc067GuwWt40lK8yRwk6MQP892Vja/U1U28IWCQ2iE1yVS/Dcuv 0XhJFIUsOjYo32ojIo0fWN5kJpK2N+CLT8AP8Rt1lYzJwEPfDhTVbkEBImMwPdvz 6rke49o12jXbiKGC3QUcss9ui2u+PzfMo0HVcKyF070XoKeZBPpi+53IWSuErJF7 6Tdqbc1PJNXUC0a7waRKSYXpwVR8qtOSvEt+wBFiNYytO9XhU8P3qa7O13WdUqkX siV8yotDzIWLsE57a1evWe/7+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2Nb/a4 IEHym0CA/tIu4cwNFyKKMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE0eNwmjPpGFFmN06FG3ubPEXnZ6eepzRi3MJr7ATCGxfgLpBdwvK1 etFthcVA9ZIBAbXCx1zhzN4t0EKqcCnVwlD0wOJM+CifQunJlhRYgFR5rg213tDd /iEjZD8JlX/+hpo5hZcDVM/OpcC80THD5pi0YR4v3Iy+FgOWgZFFS5Oviim0f+dn ZWpkihJ/6fgmHL4jUpo3pgBEiDm9rAz9U3nJ7175rIj5jqKhmYA6yELPcW74v6G5 fzetgFM9tlRdWgttq+mQccsA/n0AUvJu2jz7+JVwtj0e4cIXU82K8NzjX+X03GJa cwJjQneva+zer91L932FBpFMV7rDuXwm -----END CERTIFICATE-----Generated at Fri Jun 20 11:31:40 2025 by rpki-client