$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json) Hash identifier: UsavuyOUi5Bm6PSZXnU4Qm9gHTtKNRukn2EVjnD3JaA= Subject key identifier: 7D:BC:5C:6C:9F:88:F9:79:62:01:1C:B1:96:66:DF:27:41:1C:5F:2A Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft Manifest number: 0696 Signing time: Mon 16 Jun 2025 21:59:07 +0000 Manifest this update: Mon 16 Jun 2025 21:59:07 +0000 Manifest next update: Mon 23 Jun 2025 21:59:07 +0000 Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: uJlG2g7a+J+UwKQqpvOB/RbtR1teOMc16sxrS80isbE=) 2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: +e3HUlovKDRpOXqB7/PZlzff1isIhCZMYZe5Pc4VAfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Validity Not Before: Jun 16 21:59:07 2025 GMT Not After : Jun 23 21:59:07 2025 GMT Subject: CN=685093ab-3a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:a9:48:04:81:57:eb:04:60:dc:21:33:6b: 98:30:a3:95:c8:05:f1:b8:8b:7c:9b:8d:4f:78:69: 39:59:b5:ce:82:29:3a:58:5c:59:3f:da:d7:26:00: 3f:42:32:49:69:fa:ca:16:d5:8b:95:8a:56:2c:92: 4c:a4:22:1a:9c:ab:ce:bd:07:d7:10:95:a3:96:62: 5e:19:d1:36:f2:d2:4f:e6:ce:37:5e:75:2b:e2:26: ce:a6:79:2b:34:55:f3:e3:96:69:16:6d:04:63:74: 01:80:d7:af:aa:d4:3b:22:25:49:61:1f:f5:8b:c5: c1:2b:aa:36:55:84:2d:e0:a0:b4:a5:80:42:2a:20: b7:85:e6:ec:53:da:53:f5:c7:fa:61:6a:85:47:53: ee:51:cc:54:10:17:ac:b2:1c:88:74:9c:81:d6:2b: 8e:bc:fc:ab:87:11:36:4a:fd:b2:9c:6a:75:4b:f0: 92:16:2f:a6:32:c1:dd:b7:fb:9b:23:9e:8b:3f:c7: ab:1c:13:46:fa:71:a5:e2:d2:68:bc:d1:52:eb:b5: 33:0a:2f:6a:11:3a:76:8c:5b:df:5a:d4:41:10:81: de:85:e1:50:a4:37:2f:32:08:ed:11:a0:16:b4:e4: 3e:97:32:5e:70:dd:7c:09:c2:7c:d2:2f:bb:df:f4: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:5C:6C:9F:88:F9:79:62:01:1C:B1:96:66:DF:27:41:1C:5F:2A X509v3 Authority Key Identifier: keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:25:66:d7:a0:cb:06:93:2f:c8:51:3c:20:84:8a:2a:0c:eb: 82:b2:07:17:62:22:ba:4f:de:f0:4d:79:84:9b:9c:9f:b0:f4: ef:4e:6c:56:61:a8:45:0b:e5:2a:9a:cc:bc:76:c7:50:69:14: 0f:3d:1d:a5:61:92:0f:f9:bf:cc:a2:81:29:3e:52:d3:cb:97: bd:fc:3f:63:b2:88:ae:91:34:23:35:67:84:79:d2:d0:ed:24: 92:4f:4c:97:2a:b9:06:01:6f:86:ba:aa:5b:7b:e7:d4:f0:86: 9d:46:a3:1c:2f:7e:17:1c:44:ce:84:7c:c0:5e:d3:48:64:ce: d9:bc:71:61:d3:07:50:da:f3:4c:2b:2d:aa:8c:9b:6b:62:9a: c7:3d:06:66:0e:07:de:32:de:f4:e2:fd:59:c2:b0:c4:67:71: 49:f6:09:ea:75:e1:8b:39:af:0a:e8:c3:d7:9e:e7:8b:f4:a4: 0e:a1:a0:16:83:7a:f6:06:70:d2:bd:47:3b:5a:27:58:92:1e: 50:2c:42:b6:52:73:6b:ad:e8:18:d0:96:14:31:86:a4:ac:2b: 64:05:50:d1:bc:0c:b5:e0:db:14:4f:50:70:ce:d2:bc:54:ed: c6:d0:ed:58:c8:0c:72:4c:24:e8:49:29:e3:e2:68:6e:a4:ad: 07:63:48:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMjcxMTAvBgNVBAUTKDI2NTlDRUQxNTI3RDJDQUJEOEIyQzUzMDc1RUNDRDk0 RUQ3MUZFOTgwHhcNMjUwNjE2MjE1OTA3WhcNMjUwNjIzMjE1OTA3WjAYMRYwFAYD VQQDEw02ODUwOTNhYi0zYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PKpSASBV+sEYNwhM2uYMKOVyAXxuIt8m41PeGk5WbXOgik6WFxZP9rXJgA/ QjJJafrKFtWLlYpWLJJMpCIanKvOvQfXEJWjlmJeGdE28tJP5s43XnUr4ibOpnkr NFXz45ZpFm0EY3QBgNevqtQ7IiVJYR/1i8XBK6o2VYQt4KC0pYBCKiC3hebsU9pT 9cf6YWqFR1PuUcxUEBesshyIdJyB1iuOvPyrhxE2Sv2ynGp1S/CSFi+mMsHdt/ub I56LP8erHBNG+nGl4tJovNFS67UzCi9qETp2jFvfWtRBEIHeheFQpDcvMgjtEaAW tOQ+lzJecN18CcJ80i+73/S+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH28XGyf iPl5YgEcsZZm3ydBHF8qMB8GA1UdIwQYMBaAFCZZztFSfSyr2LLFMHXszZTtcf6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIyNy80RkNGNTY4RTdC MDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxLdllzc1V3ZGV6TmxPMXhf cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psbk8wVko5TEt2WXNzVXdkZXpObE8xeF9wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIyNy80RkNGNTY4RTdCMDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxL dllzc1V3ZGV6TmxPMXhfcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8JWbXoMsGky/IUTwghIoqDOuCsgcXYiK6T97wTXmEm5yfsPTvTmxW YahFC+Uqmsy8dsdQaRQPPR2lYZIP+b/MooEpPlLTy5e9/D9jsoiukTQjNWeEedLQ 7SSST0yXKrkGAW+Guqpbe+fU8IadRqMcL34XHETOhHzAXtNIZM7ZvHFh0wdQ2vNM Ky2qjJtrYprHPQZmDgfeMt704v1ZwrDEZ3FJ9gnqdeGLOa8K6MPXnueL9KQOoaAW g3r2BnDSvUc7WidYkh5QLEK2UnNrregY0JYUMYakrCtkBVDRvAy14NsUT1BwztK8 VO3G0O1YyAxyTCToSSnj4mhupK0HY0gW -----END CERTIFICATE-----Generated at Wed Jun 18 01:49:06 2025 by rpki-client