$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft File: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft (raw, json) Hash identifier: HyMjIXOKgIf8bYWrTC8M6jiN/uKK/gxjaQoMhxnNsG0= Subject key identifier: 5C:BC:5C:4F:EB:9A:43:18:31:0F:BE:38:7A:56:94:88:D7:67:E1:91 Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F Certificate issuer: /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft Manifest number: 0329 Signing time: Sat 21 Jun 2025 00:49:51 +0000 Manifest this update: Sat 21 Jun 2025 00:49:50 +0000 Manifest next update: Sat 28 Jun 2025 00:49:50 +0000 Files and hashes: 1: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl (hash: J9afNUnu5rhfRsqbUQT946OjgTYmvqxLcQtt5iAiwrk=) 2: 9157BBDACD0611EC9D520C1DC4F9AE02.roa (hash: YtkawvfO7yeuU6y5W4AKOD+xrJidxM5yq8UxdQskunc=) 3: 0E3C1B3E7F9B11EFB3A18650C4F9AE02.roa (hash: NTWtz3XRI466vgMgJNYPHPV7KaEaKes8YjQ4ENseuEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 00:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918223E, serialNumber=8E7E4A03582039E461ECED910008C9827362359F Validity Not Before: Jun 21 00:49:50 2025 GMT Not After : Jun 28 00:49:50 2025 GMT Subject: CN=685601ae-5202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:e7:49:20:2d:25:10:76:cb:9f:69:ce:59: e1:9a:9d:5b:0e:fc:b8:98:22:1d:61:0a:6a:93:f2: e6:c7:52:d2:7e:fa:cd:2a:3c:94:3b:fb:3a:b2:0a: 15:19:70:f8:ca:a4:a4:87:94:6e:fb:85:5f:a4:9e: a0:f5:eb:bf:fa:1e:36:3e:e4:a5:33:fd:36:41:a8: 7c:2b:df:0b:c9:75:55:f7:76:a2:7a:f5:c7:78:7e: 9f:9c:84:eb:20:e0:cd:83:04:d3:1e:02:fb:fd:c9: 9a:c0:9d:b6:f2:22:4f:cc:8a:e5:ac:0f:30:ae:17: 5c:7a:b9:4c:28:08:95:5e:ea:49:45:94:4f:2f:b1: 44:5e:c3:72:8c:9e:e6:d4:ea:42:1e:53:0f:c4:30: b8:b9:62:da:37:cc:4e:07:9b:9a:85:7f:95:a9:89: 07:cf:8c:6f:a2:d2:5e:46:9e:97:69:ee:e2:d3:cf: c5:3f:64:c1:0a:ba:aa:33:fe:93:8c:fb:fa:94:3c: ab:ed:92:f9:a2:00:2c:e1:e2:9b:89:ce:05:20:23: c5:91:fd:91:da:84:05:c0:f6:94:6b:bd:69:8a:0a: 20:15:90:35:1f:8f:56:4e:39:08:d1:05:62:2c:e9: f7:20:53:f1:50:05:ab:81:53:94:44:95:24:6c:91: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:5C:4F:EB:9A:43:18:31:0F:BE:38:7A:56:94:88:D7:67:E1:91 X509v3 Authority Key Identifier: keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7a:70:b4:11:a1:c8:89:d9:85:34:8a:a4:e2:73:af:6b:26: ba:21:2b:75:8c:6c:5c:f7:77:41:9e:ec:f6:4b:20:f9:9a:4d: 50:f0:2d:b5:8b:ec:d2:6f:16:cf:66:2a:76:ef:90:ca:be:be: 67:82:f8:d4:f6:56:7b:54:8e:3d:2a:a0:39:50:eb:82:32:45: 3c:01:c7:0f:96:b9:05:79:f4:fd:5a:75:ea:75:4c:47:04:da: 0c:97:51:96:09:75:6b:81:19:5c:0f:fa:5b:5a:8e:2f:b1:a0: 4b:db:48:78:94:1a:85:22:d8:91:0b:97:01:aa:e3:20:e1:dd: da:b0:7b:cb:bc:25:a0:ac:77:b4:75:a3:bd:52:fb:df:fa:dd: ed:92:fe:b5:5e:d3:f9:8d:37:34:0d:19:0b:88:84:fe:c4:6a: dc:41:b3:ee:e1:85:16:3e:4a:38:42:8a:2a:6c:de:35:ff:3f: ff:ba:46:7a:e6:4f:57:a8:c5:af:8a:d2:f5:a7:26:19:ff:f5: a6:f4:10:9f:9c:65:cd:29:21:4a:fd:9d:70:34:4a:aa:56:d6: 62:4e:bc:64:9f:c4:bc:0c:aa:49:c2:60:99:5a:92:9a:c9:7b: a2:12:c5:90:62:f1:a8:65:35:91:1a:7f:e4:d5:c3:f0:bc:22: 8e:c5:01:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyM0UxMTAvBgNVBAUTKDhFN0U0QTAzNTgyMDM5RTQ2MUVDRUQ5MTAwMDhDOTgy NzM2MjM1OUYwHhcNMjUwNjIxMDA0OTUwWhcNMjUwNjI4MDA0OTUwWjAYMRYwFAYD VQQDEw02ODU2MDFhZS01MjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RTnSSAtJRB2y59pzlnhmp1bDvy4mCIdYQpqk/Lmx1LSfvrNKjyUO/s6sgoV GXD4yqSkh5Ru+4VfpJ6g9eu/+h42PuSlM/02Qah8K98LyXVV93aievXHeH6fnITr IODNgwTTHgL7/cmawJ228iJPzIrlrA8wrhdcerlMKAiVXupJRZRPL7FEXsNyjJ7m 1OpCHlMPxDC4uWLaN8xOB5uahX+VqYkHz4xvotJeRp6Xae7i08/FP2TBCrqqM/6T jPv6lDyr7ZL5ogAs4eKbic4FICPFkf2R2oQFwPaUa71pigogFZA1H49WTjkI0QVi LOn3IFPxUAWrgVOURJUkbJF5hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy8XE/r mkMYMQ++OHpWlIjXZ+GRMB8GA1UdIwQYMBaAFI5+SgNYIDnkYeztkQAIyYJzYjWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjIzRS81RjZCM0E1RUNE MDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09lUmg3TzJSQUFqSmduTmlO WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puNUtBMWdnT2VSaDdPMlJBQWpKZ25OaU5aOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjIzRS81RjZCM0E1RUNEMDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09l Umg3TzJSQUFqSmduTmlOWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfenC0EaHIidmFNIqk4nOvaya6ISt1jGxc93dBnuz2SyD5mk1Q8C21 i+zSbxbPZip275DKvr5ngvjU9lZ7VI49KqA5UOuCMkU8AccPlrkFefT9WnXqdUxH BNoMl1GWCXVrgRlcD/pbWo4vsaBL20h4lBqFItiRC5cBquMg4d3asHvLvCWgrHe0 daO9Uvvf+t3tkv61XtP5jTc0DRkLiIT+xGrcQbPu4YUWPko4QooqbN41/z//ukZ6 5k9XqMWvitL1pyYZ//Wm9BCfnGXNKSFK/Z1wNEqqVtZiTrxkn8S8DKpJwmCZWpKa yXuiEsWQYvGoZTWRGn/k1cPwvCKOxQFq -----END CERTIFICATE-----Generated at Sun Jun 22 09:00:31 2025 by rpki-client