$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft File: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json) Hash identifier: rmpFCEbSniyfuEuZi+jnEBVMAhOKQPyM/fkkYd0xq90= Subject key identifier: 97:10:AA:6B:16:59:C2:B3:93:45:E5:E6:F8:AA:99:8A:2E:72:67:7F Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft Manifest number: 04BA Signing time: Sat 14 Jun 2025 23:39:31 +0000 Manifest this update: Sat 14 Jun 2025 23:39:30 +0000 Manifest next update: Sat 21 Jun 2025 23:39:30 +0000 Files and hashes: 1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: OBHepvCl/LWC3Fz4ot1MMqv40HkLvOFP0vgPZldhKHQ=) 2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Validity Not Before: Jun 14 23:39:30 2025 GMT Not After : Jun 21 23:39:30 2025 GMT Subject: CN=684e0833-4052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:ca:5e:68:ab:46:57:7b:d0:03:ce:6d:81: 82:70:b9:3c:d5:71:33:09:b0:c3:96:59:2e:b2:96: 37:69:ba:0c:f7:f0:c6:c6:28:4d:cc:8e:cc:92:16: 12:32:4e:3f:61:38:5d:c5:1f:d2:61:5b:c4:cf:18: 4e:c6:a5:fb:e4:fc:1a:ba:0e:5a:dd:c6:6a:b1:8f: 09:4f:90:ab:38:22:9d:d1:9f:f8:c1:e5:21:b4:83: 03:d5:9a:db:d9:81:d3:48:29:dc:f9:44:dd:b6:a4: 93:0b:98:ac:40:0a:4a:a9:b4:d1:de:34:a7:53:3f: fd:87:62:4f:92:82:88:71:fb:31:d5:ec:cd:a6:53: 51:f8:18:c7:71:a9:8c:2b:bb:c3:e9:80:5a:6c:1e: ff:c0:1b:6f:f3:3e:df:01:4e:87:25:a9:a2:61:ed: 74:d1:73:95:6f:13:6b:a5:fb:84:8c:78:7b:df:86: 51:b7:b7:24:7f:4d:18:f5:da:89:3a:dc:9f:72:02: f0:fc:b0:77:28:7d:46:d2:20:b5:2e:f5:63:2e:f4: 90:4d:46:a7:95:71:ca:4a:72:94:19:82:59:0f:bf: 22:5c:9c:38:dc:63:b3:9c:96:71:93:7a:cb:f6:e6: 91:83:00:33:27:6d:48:8b:2f:36:b1:d2:17:98:8f: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:10:AA:6B:16:59:C2:B3:93:45:E5:E6:F8:AA:99:8A:2E:72:67:7F X509v3 Authority Key Identifier: keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:2a:a4:1b:0e:8b:ba:7b:74:45:ea:80:f5:49:75:ff:5c:2f: 89:03:2c:7a:12:3c:8e:b2:34:4a:77:49:b9:da:10:83:d2:8b: 2a:50:ca:a4:15:64:0d:46:8c:c6:c7:a4:70:8b:e6:06:ae:f1: 29:be:4b:10:e2:ae:fa:b6:ea:9f:2d:6f:51:10:43:e6:94:9d: 40:f9:05:d4:25:00:c0:76:15:62:0b:11:d1:c4:9d:30:47:09: 13:26:bc:7a:02:9d:df:54:9e:fe:89:ef:cb:67:00:46:3d:e9: af:44:9c:b3:d3:36:27:82:bd:a1:01:2d:79:8b:e0:fc:c7:e5: 54:91:90:ae:ef:5b:d5:90:50:8c:ad:ee:05:8f:28:d4:cf:a2: 76:ef:e6:50:2e:6c:89:0b:49:c8:97:c5:46:41:70:06:d9:a0: df:e4:ac:a9:62:30:ee:32:ab:dd:ca:d0:51:4b:3d:d3:73:88: 93:29:07:85:6e:d2:45:ae:b5:5b:11:0e:a8:ba:d3:90:fe:37: 5c:a2:86:3f:bf:1a:bb:cf:47:30:5e:88:b1:13:eb:bd:6e:f1: 01:f1:0c:46:8c:64:95:4c:a0:30:61:73:17:1a:cb:98:cf:08: d3:8b:7e:20:4e:6f:9a:ce:25:2f:c8:82:af:80:d0:2d:d0:75: dd:9e:fc:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5NUQxMTAvBgNVBAUTKDI3MkY5RkRGMzAxNDU0RUI2QzgxRjMwMTZDMjA1QUY0 NDNDQUJENUMwHhcNMjUwNjE0MjMzOTMwWhcNMjUwNjIxMjMzOTMwWjAYMRYwFAYD VQQDEw02ODRlMDgzMy00MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPHKXmirRld70APObYGCcLk81XEzCbDDllkuspY3aboM9/DGxihNzI7MkhYS Mk4/YThdxR/SYVvEzxhOxqX75Pwaug5a3cZqsY8JT5CrOCKd0Z/4weUhtIMD1Zrb 2YHTSCnc+UTdtqSTC5isQApKqbTR3jSnUz/9h2JPkoKIcfsx1ezNplNR+BjHcamM K7vD6YBabB7/wBtv8z7fAU6HJamiYe100XOVbxNrpfuEjHh734ZRt7ckf00Y9dqJ OtyfcgLw/LB3KH1G0iC1LvVjLvSQTUanlXHKSnKUGYJZD78iXJw43GOznJZxk3rL 9uaRgwAzJ21Iiy82sdIXmI8tTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcQqmsW WcKzk0Xl5viqmYoucmd/MB8GA1UdIwQYMBaAFCcvn98wFFTrbIHzAWwgWvRDyr1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDk1RC84REUyRTRCQTMy NjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZPdHNnZk1CYkNCYTlFUEt2 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5LWYzekFVVk90c2dmTUJiQ0JhOUVQS3ZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDk1RC84REUyRTRCQTMyNjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZP dHNnZk1CYkNCYTlFUEt2VncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpKqQbDou6e3RF6oD1SXX/XC+JAyx6EjyOsjRKd0m52hCD0osqUMqk FWQNRozGx6Rwi+YGrvEpvksQ4q76tuqfLW9REEPmlJ1A+QXUJQDAdhViCxHRxJ0w RwkTJrx6Ap3fVJ7+ie/LZwBGPemvRJyz0zYngr2hAS15i+D8x+VUkZCu71vVkFCM re4FjyjUz6J27+ZQLmyJC0nIl8VGQXAG2aDf5KypYjDuMqvdytBRSz3Tc4iTKQeF btJFrrVbEQ6outOQ/jdcooY/vxq7z0cwXoixE+u9bvEB8QxGjGSVTKAwYXMXGsuY zwjTi34gTm+aziUvyIKvgNAt0HXdnvz2 -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:01 2025 by rpki-client