$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json) Hash identifier: v0/MfHovNqVmM4eJVvExlZn8HQkz+C/7ef+BHavcSoc= Subject key identifier: 5A:1A:61:8E:B8:FE:53:27:F5:E6:8A:F1:6B:65:DC:C8:83:49:18:AA Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft Manifest number: 012F Signing time: Fri 13 Jun 2025 03:31:34 +0000 Manifest this update: Fri 13 Jun 2025 03:31:33 +0000 Manifest next update: Fri 20 Jun 2025 03:31:33 +0000 Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: 8z1r6VVW+DirmA0HHO/jx2YmJHu+FxDO8vcmyl2+5QM=) 2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: v+Dp0K1hdXxl3OPWO8uxhWsiC5bQl5Ff5tXnCdcq4MU=) 3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: aBvIA0eeQ14OUWSBauC6xUgN/Yota75Po8HtX8rLsaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Validity Not Before: Jun 13 03:31:33 2025 GMT Not After : Jun 20 03:31:33 2025 GMT Subject: CN=684b9b95-326e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:6f:1c:9a:e8:6a:9b:65:ce:28:98:68:47: 2b:41:e4:e2:3b:56:8f:a0:1d:c3:e5:13:20:29:68: 0e:98:3b:e8:53:7f:2c:db:e9:fa:b2:8a:4c:05:1c: 4f:ae:8c:ed:4e:a3:39:f9:be:f3:60:22:71:cc:b9: 90:52:a3:09:f7:bc:ce:32:75:57:87:3c:42:ad:82: 62:0e:96:62:05:a3:32:36:6f:8f:1e:01:4d:5b:bc: 0b:54:57:1c:16:c7:4b:cc:17:67:e5:90:f5:4c:c9: 7c:e5:6b:72:a5:b3:80:14:a3:0d:a9:c5:cb:bc:0e: 9c:9c:b6:db:85:17:a7:42:a8:55:54:60:38:74:2a: 42:31:23:74:57:d9:2c:49:87:e6:78:6a:42:d1:b0: 9c:7c:b8:90:f0:09:df:7f:d6:91:dc:9d:e0:d8:ef: 7b:34:4d:80:1a:02:30:c3:6e:61:40:65:3a:96:5e: dc:2f:6b:8f:d6:78:dc:35:85:86:14:2a:dd:0d:e0: 78:e6:7d:2a:3f:6e:6a:d5:0e:54:a1:9b:eb:e9:76: fc:ed:b2:18:83:01:61:d4:de:9c:f7:3a:5d:99:d8: 55:80:d3:13:c0:71:4b:f9:e1:e4:be:0e:8d:7e:ce: fd:2f:46:6d:d3:ab:2b:aa:08:0b:4e:14:8e:7a:d0: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1A:61:8E:B8:FE:53:27:F5:E6:8A:F1:6B:65:DC:C8:83:49:18:AA X509v3 Authority Key Identifier: keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9f:c0:06:7e:15:ae:f7:bc:1f:97:df:f5:e3:02:5d:86:21: e8:df:e4:27:0a:c1:f6:c7:7b:44:21:08:43:63:e3:8c:5b:e8: 5e:f9:27:37:44:19:6e:6c:28:53:3a:1a:62:15:9f:fa:53:62: b7:05:41:e1:dd:8a:e2:67:50:ac:3f:56:4b:40:fb:0c:f1:f0: 74:11:18:e4:88:8e:a1:89:3f:c7:ea:04:4c:35:b3:e8:69:8c: 78:47:9d:89:6c:1f:93:99:c8:5b:23:95:06:1e:9b:f0:2f:26: 69:56:98:43:c7:bf:33:d6:5e:d2:32:b6:1c:ad:40:40:eb:19: 0e:6c:f6:63:ca:f5:3e:40:7d:4e:2a:1e:48:20:3a:1b:aa:30: 96:66:1d:ea:af:ef:01:0a:f1:ee:44:1e:c4:6d:b2:7b:5f:d0: c4:69:7f:c0:9a:73:f5:75:eb:e5:79:7e:8c:43:66:f7:bc:24: fe:92:f7:12:ab:80:df:1d:63:7f:a9:8b:cb:bb:b6:38:e5:d7: 59:31:7b:d0:ca:e6:c9:21:58:3f:35:4f:48:2c:5b:7e:40:df: 2f:56:2b:81:d8:29:05:2f:ab:a9:84:3d:cc:42:a8:ce:b4:49: b8:55:3d:ec:98:c1:e2:af:33:68:f6:2c:46:ef:d5:32:f6:45: 9c:95:d4:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQTUxMTAvBgNVBAUTKDhDRENFNTc4QTIzOUU1OENFN0ZFNzY4M0JCNDc2OUY5 REM1NTIyQkEwHhcNMjUwNjEzMDMzMTMzWhcNMjUwNjIwMDMzMTMzWjAYMRYwFAYD VQQDEw02ODRiOWI5NS0zMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgJvHJroaptlziiYaEcrQeTiO1aPoB3D5RMgKWgOmDvoU38s2+n6sopMBRxP roztTqM5+b7zYCJxzLmQUqMJ97zOMnVXhzxCrYJiDpZiBaMyNm+PHgFNW7wLVFcc FsdLzBdn5ZD1TMl85WtypbOAFKMNqcXLvA6cnLbbhRenQqhVVGA4dCpCMSN0V9ks SYfmeGpC0bCcfLiQ8Anff9aR3J3g2O97NE2AGgIww25hQGU6ll7cL2uP1njcNYWG FCrdDeB45n0qP25q1Q5UoZvr6Xb87bIYgwFh1N6c9zpdmdhVgNMTwHFL+eHkvg6N fs79L0Zt06srqggLThSOetBWAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoaYY64 /lMn9eaK8Wtl3MiDSRiqMB8GA1UdIwQYMBaAFIzc5XiiOeWM5/52g7tHafncVSK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBNS9BMUMwNEQwQTc2 Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZem5fbmFEdTBkcC1keFZJ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vklyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBNS9BMUMwNEQwQTc2Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZ em5fbmFEdTBkcC1keFZJcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZn8AGfhWu97wfl9/14wJdhiHo3+QnCsH2x3tEIQhDY+OMW+he+Sc3 RBlubChTOhpiFZ/6U2K3BUHh3YriZ1CsP1ZLQPsM8fB0ERjkiI6hiT/H6gRMNbPo aYx4R52JbB+TmchbI5UGHpvwLyZpVphDx78z1l7SMrYcrUBA6xkObPZjyvU+QH1O Kh5IIDobqjCWZh3qr+8BCvHuRB7EbbJ7X9DEaX/AmnP1devleX6MQ2b3vCT+kvcS q4DfHWN/qYvLu7Y45ddZMXvQyubJIVg/NU9ILFt+QN8vViuB2CkFL6uphD3MQqjO tEm4VT3smMHirzNo9ixG79Uy9kWcldQ6 -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:18 2025 by rpki-client