$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: Qa/lMiMCOgWMOob5dNgNA2GQOVDbYteVJAxfHwGDoLM= Subject key identifier: 58:D1:C4:65:95:E4:68:3A:78:59:47:9D:B7:C5:CD:4E:7D:AE:AD:D4 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 0A53 Signing time: Sat 14 Jun 2025 19:37:28 +0000 Manifest this update: Sat 14 Jun 2025 19:37:28 +0000 Manifest next update: Sat 21 Jun 2025 19:37:28 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: F2VSpAJOBktvZUedGLmU6dCZpQVPZaGHUYEYybgkmyg=) 2: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: 9yUs2nKXPHCpJS0mrHo2Ggq8ympf47XQx/Xh9xer3UE=) 3: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: Yqq1lSs0wPeM1q20JA/ItyHg0apHcnbKTMncp1/GYDE=) 4: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: 068N8IEWl9KU9macKHjuazaF7bz9gnL8QBjCVoEygRE=) 5: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: kpR0s/alzHJxJv4b8Y4mih9UUNQwPIfKSjlw3hDfeWQ=) 6: F4FCC41E648311EC88370386C4F9AE02.roa (hash: b4ZFTEPGE9Eys204eUqpF+7p489cvPKvRjplNeXr+vk=) 7: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 33Lt9iacdoAJt5PFtlWSBj+z9HbFVVUjpu5jsfW7jp4=) 8: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: 3CHVCYcA7uR6YYnaviE1S/TMYRhsJjcvlmAm4mTQrmQ=) 9: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: ICd6VVGw9xVz+wcPqJ3UVJmdStRmzwwWVF/J8p4R2lY=) 10: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: 5cDMbBqP2e/j21s9fqpqtIuoXCOWr6gs9WfTIXKzVRM=) 11: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: UrtD2u9UWUKzFTykNRG+n6MNvw96LFxtDU8P+JeQejM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Jun 14 19:37:28 2025 GMT Not After : Jun 21 19:37:28 2025 GMT Subject: CN=684dcf78-4cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:02:91:8d:fd:70:cf:e5:6e:e8:87:bb:6b: 10:ba:15:7b:6d:fb:66:fc:8a:db:b0:cf:c3:2c:e4: 92:5c:e9:65:00:e5:98:a8:73:5d:cd:bf:45:fa:48: 7e:bc:ae:9e:20:54:c6:cc:e8:4d:86:58:ab:6c:38: 22:9f:76:5a:f6:7f:b7:46:cc:ac:24:0e:89:d3:c1: 9b:6e:0f:07:05:ca:bd:94:75:72:c9:2e:1d:25:cd: 99:28:97:00:be:0f:5d:1d:6f:c9:cf:54:ac:c8:fd: 6f:90:b7:48:cc:75:7d:74:5b:49:0d:17:87:95:1c: 99:0b:93:8e:d0:68:65:6b:b2:cb:f1:47:bb:06:e1: 2e:a7:58:68:8e:20:ce:01:cc:55:03:d0:9c:66:f7: e3:27:78:71:8b:31:61:bc:56:9a:8b:b3:70:c4:4e: 9b:35:ed:c3:55:a1:40:b0:47:2d:ca:bf:53:8f:34: 52:b2:7a:42:42:a7:a3:74:37:22:12:78:15:83:5e: 3f:12:f0:3f:9f:e0:2b:3c:c7:69:70:35:72:83:70: fd:18:d4:20:4e:55:b9:86:d1:4f:a1:14:fa:af:46: 65:0b:38:4d:5e:94:a9:38:6e:b3:8b:5a:3d:25:e0: e0:fc:f3:9f:a0:ad:30:72:61:1d:3f:02:42:4f:98: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D1:C4:65:95:E4:68:3A:78:59:47:9D:B7:C5:CD:4E:7D:AE:AD:D4 X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4d:e2:60:5f:03:70:26:3b:d0:10:ca:91:9e:cb:e8:8d:b7: 7d:0b:1e:a1:89:1a:bd:cd:c6:f8:8a:05:13:64:cd:54:46:d8: 5a:69:a8:5f:24:be:a8:ab:52:9d:b8:b1:54:e3:04:99:96:48: 5d:4d:dc:79:99:d3:0c:d7:a4:57:03:07:36:5a:af:7b:f1:fc: cc:65:9b:70:03:44:4f:a1:e7:4f:97:67:69:42:b1:f1:b9:ad: f7:ac:63:bd:3e:49:5e:28:8a:f3:13:d4:b4:a1:b2:e9:1c:2b: ba:8d:93:24:a0:80:29:cb:4b:39:de:fc:f4:b5:3e:aa:9e:4a: ac:19:06:51:ed:5e:64:4a:24:ce:11:af:4e:be:12:c7:d5:6a: 34:9c:e9:96:d9:7b:2a:16:2e:a9:4e:d3:bd:da:ed:95:73:1e: b5:27:63:fd:5d:51:2f:6e:10:1b:2c:47:e6:19:30:ba:ad:0f: 98:f9:96:f1:42:ab:34:a0:f9:e0:9a:c4:f9:e4:0a:6c:39:26: 5d:b7:e6:cc:09:1c:08:23:2a:0e:c0:8f:84:8b:95:54:0d:bb: 53:7c:17:9d:73:da:ff:5c:6e:79:50:cb:f3:7f:c1:f0:64:55: 9a:7c:de:59:23:b6:1e:24:32:8e:ef:26:d6:9c:8f:6a:24:6d: 9b:37:9e:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjUwNjE0MTkzNzI4WhcNMjUwNjIxMTkzNzI4WjAYMRYwFAYD VQQDEw02ODRkY2Y3OC00Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2wCkY39cM/lbuiHu2sQuhV7bftm/IrbsM/DLOSSXOllAOWYqHNdzb9F+kh+ vK6eIFTGzOhNhlirbDgin3Za9n+3RsysJA6J08Gbbg8HBcq9lHVyyS4dJc2ZKJcA vg9dHW/Jz1SsyP1vkLdIzHV9dFtJDReHlRyZC5OO0Ghla7LL8Ue7BuEup1hojiDO AcxVA9CcZvfjJ3hxizFhvFaai7NwxE6bNe3DVaFAsEctyr9TjzRSsnpCQqejdDci EngVg14/EvA/n+ArPMdpcDVyg3D9GNQgTlW5htFPoRT6r0ZlCzhNXpSpOG6zi1o9 JeDg/POfoK0wcmEdPwJCT5j8iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjRxGWV 5Gg6eFlHnbfFzU59rq3UMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBTeJgXwNwJjvQEMqRnsvojbd9Cx6hiRq9zcb4igUTZM1URthaaahf JL6oq1KduLFU4wSZlkhdTdx5mdMM16RXAwc2Wq978fzMZZtwA0RPoedPl2dpQrHx ua33rGO9PkleKIrzE9S0obLpHCu6jZMkoIApy0s53vz0tT6qnkqsGQZR7V5kSiTO Ea9OvhLH1Wo0nOmW2XsqFi6pTtO92u2Vcx61J2P9XVEvbhAbLEfmGTC6rQ+Y+Zbx Qqs0oPngmsT55ApsOSZdt+bMCRwIIyoOwI+Ei5VUDbtTfBedc9r/XG55UMvzf8Hw ZFWafN5ZI7YeJDKO7ybWnI9qJG2bN57k -----END CERTIFICATE-----Generated at Mon Jun 16 05:37:34 2025 by rpki-client