$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json) Hash identifier: Krjmu2asH+rGv9IRcZ835bbcJZXgj9IjyOx+n0yESlY= Subject key identifier: AE:47:11:C7:F2:88:D4:44:92:E6:51:AC:71:AD:38:74:60:D5:4D:6A Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1BDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft Manifest number: 1BD0 Signing time: Sat 14 Jun 2025 16:11:41 +0000 Manifest this update: Sat 14 Jun 2025 16:11:40 +0000 Manifest next update: Sat 21 Jun 2025 16:11:40 +0000 Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: Q2RXRItowGdud3svL7QZtcZI0+ZyS0Aozzk+zJDGX8k=) 2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: adZvd/ecrn/69jFBmaF8532OMU/h1NSuA6iJnPKo2nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7130 (0x1bda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: Jun 14 16:11:40 2025 GMT Not After : Jun 21 16:11:40 2025 GMT Subject: CN=684d9f3c-0d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:40:9f:2b:cb:a8:97:ec:ee:fd:b4:bc:7f: 37:32:af:00:6a:b8:66:ce:fe:c5:3f:5d:25:4e:34: 31:70:6b:82:f6:4a:a1:6a:25:b6:cb:e0:58:22:4f: a1:9a:fe:20:3f:df:0e:8e:13:e3:e8:23:1e:2c:d0: d8:eb:9a:6b:c6:df:4d:37:c9:1a:6a:d6:03:03:59: 50:38:b9:c4:da:f2:01:39:96:72:58:87:6c:a1:c7: cd:70:9a:1b:af:50:ca:63:73:25:5e:5c:88:d8:83: 7c:f3:c1:1c:f9:1e:70:03:62:c5:72:23:7a:74:12: 7a:3d:67:40:46:00:d8:30:e9:aa:fe:7c:63:3a:bc: 4c:0d:cb:18:d2:c2:f2:bd:13:ff:8d:eb:18:33:6b: 2a:05:08:e0:af:94:1b:96:c8:c4:b8:ea:b4:b2:f7: ff:bb:65:4e:e3:0a:d8:f5:6d:12:3f:a5:07:19:ff: a2:d0:85:aa:58:c6:7a:be:42:49:34:65:82:82:d4: 6a:82:13:cc:e9:5b:48:7f:2a:5f:e8:c4:8c:be:46: d1:99:55:ed:f2:bb:1c:b8:ad:62:5d:8e:3a:f4:89: 08:32:cd:66:c3:a8:2b:f4:44:de:55:fc:c3:c4:28: 4f:1e:2c:f7:3e:46:32:4d:b8:37:55:14:74:93:8a: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:47:11:C7:F2:88:D4:44:92:E6:51:AC:71:AD:38:74:60:D5:4D:6A X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1b:ce:1f:ba:ab:48:51:53:9d:14:cc:29:ae:51:e1:a9:00: 53:ed:5a:51:83:44:9b:ac:2f:03:11:20:97:06:50:75:55:9e: ae:12:d7:76:89:16:b1:46:0f:f2:4c:fd:01:86:b5:23:82:9b: b0:7f:29:03:5e:0e:87:ab:3e:16:4b:4b:c1:a1:0c:89:ac:95: 7e:3e:ef:57:c4:75:e0:fb:55:10:48:fc:4c:e1:13:4e:5b:43: df:91:c9:42:69:fd:07:27:5f:5e:6b:02:39:53:8b:79:43:df: f6:96:10:c9:31:ee:1d:0b:5f:20:77:38:2a:ee:83:eb:dd:34: dd:e1:e9:3b:80:24:4a:dc:41:39:ed:15:b4:f8:62:2d:81:85: 1f:d2:55:63:eb:8a:47:8d:58:33:9c:af:6b:1e:f3:55:7b:31: ab:e7:92:81:e7:86:6a:e3:91:14:20:a0:6a:1b:e1:1c:e7:81: a2:6d:20:b9:0b:f9:91:d4:a9:2e:c0:7a:12:cb:6a:64:61:17: a9:3e:15:a3:73:f1:2f:03:6b:c0:41:4f:e3:6c:51:99:7a:a4: 76:32:c3:1f:03:e0:bc:89:a0:d7:b2:43:2a:65:c3:1f:79:40: d3:45:5d:9e:fd:31:ee:c5:f6:58:b4:b9:e3:e1:60:ef:b6:bd: 5f:bd:61:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjUwNjE0MTYxMTQwWhcNMjUwNjIxMTYxMTQwWjAYMRYwFAYD VQQDEw02ODRkOWYzYy0wZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsdAnyvLqJfs7v20vH83Mq8Aarhmzv7FP10lTjQxcGuC9kqhaiW2y+BYIk+h mv4gP98OjhPj6CMeLNDY65prxt9NN8kaatYDA1lQOLnE2vIBOZZyWIdsocfNcJob r1DKY3MlXlyI2IN888Ec+R5wA2LFciN6dBJ6PWdARgDYMOmq/nxjOrxMDcsY0sLy vRP/jesYM2sqBQjgr5QblsjEuOq0svf/u2VO4wrY9W0SP6UHGf+i0IWqWMZ6vkJJ NGWCgtRqghPM6VtIfypf6MSMvkbRmVXt8rscuK1iXY469IkIMs1mw6gr9ETeVfzD xChPHiz3PkYyTbg3VRR0k4rYFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5HEcfy iNREkuZRrHGtOHRg1U1qMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEG84fuqtIUVOdFMwprlHhqQBT7VpRg0SbrC8DESCXBlB1VZ6uEtd2 iRaxRg/yTP0BhrUjgpuwfykDXg6Hqz4WS0vBoQyJrJV+Pu9XxHXg+1UQSPxM4RNO W0PfkclCaf0HJ19eawI5U4t5Q9/2lhDJMe4dC18gdzgq7oPr3TTd4ek7gCRK3EE5 7RW0+GItgYUf0lVj64pHjVgznK9rHvNVezGr55KB54Zq45EUIKBqG+Ec54GibSC5 C/mR1KkuwHoSy2pkYRepPhWjc/EvA2vAQU/jbFGZeqR2MsMfA+C8iaDXskMqZcMf eUDTRV2e/THuxfZYtLnj4WDvtr1fvWEu -----END CERTIFICATE-----Generated at Sat Jun 14 18:50:34 2025 by rpki-client