$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: e+TTfVTwNBbGzV8Qk5/I2EronZE5Hy4DTaEoN/opPDc= Subject key identifier: 8C:F1:47:E4:95:E7:94:C1:67:91:45:08:F8:12:8A:EF:54:51:77:E6 Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 13 Signing time: Thu 19 Jun 2025 07:22:26 +0000 Manifest this update: Thu 19 Jun 2025 07:22:26 +0000 Manifest next update: Thu 26 Jun 2025 07:22:26 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: vSfmacCfweZFeIb39X40XMf63GbJ5/1Mm2CPKNmp9C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Jun 19 07:22:26 2025 GMT Not After : Jun 26 07:22:26 2025 GMT Subject: CN=6853bab2-6497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:24:72:b4:25:5b:3a:51:c7:b9:25:66:dc: 5d:0f:7f:8d:fd:8f:d8:36:06:76:32:21:c4:80:46: a6:07:59:c9:36:8d:36:dd:8f:96:1f:6b:e1:d0:7c: 81:af:22:20:06:33:9e:8f:77:45:9d:16:5b:d8:37: 13:4c:ff:af:1a:09:a6:d1:82:f7:c9:7c:0f:6a:22: 3e:7b:1e:76:f6:1e:38:bb:2c:5f:e7:9f:f3:de:60: 44:d4:3b:29:60:48:a0:ad:52:1a:d4:10:6d:ec:a6: db:f8:18:e3:d4:0c:5e:4c:63:ef:f9:02:aa:ee:cf: 41:82:11:4f:5d:c0:7e:3c:82:f6:9e:36:04:e8:b4: 7f:13:50:b2:ac:4b:d2:24:b6:4e:73:29:36:74:ab: e4:09:c8:52:e8:6c:a0:7d:3f:f1:d1:9d:a4:c5:c5: d7:2a:b4:5f:61:df:30:c8:35:a5:78:0e:07:2f:8d: 74:1f:5c:db:ea:11:fe:9f:e6:10:0b:f4:88:b4:a2: 4b:c1:f9:93:3e:a0:d4:b6:73:90:c7:d5:20:cb:ac: c0:da:bd:89:af:7d:c8:d9:e5:cf:04:21:0d:19:90: fe:3e:1e:7e:31:9f:bf:33:b1:a1:1c:ed:7c:8e:fa: 37:c4:9f:c6:37:bd:61:50:1b:f1:39:13:8e:e5:8c: 6e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:47:E4:95:E7:94:C1:67:91:45:08:F8:12:8A:EF:54:51:77:E6 X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b9:70:1c:4f:1a:1b:06:94:da:e2:dc:f5:0e:4b:99:68:98: 88:8d:97:e2:15:d2:e0:1d:16:92:ce:14:b0:55:41:59:63:55: 93:8b:5e:8f:54:0f:38:1a:3b:85:98:e8:86:be:18:0c:01:ff: a5:e4:c9:9c:06:5c:59:8f:08:77:b1:50:1d:12:96:ef:08:7c: 05:15:54:80:f1:a0:19:db:fe:b7:55:8d:63:08:c1:50:e1:3b: 49:68:ec:c9:93:c8:e7:d2:f7:22:16:2c:ce:d5:ee:25:c0:c2: db:02:67:8e:cf:ac:03:1b:7d:a2:54:87:eb:07:0d:3c:c6:7e: 4d:1a:f8:e2:83:79:dc:ed:18:ca:b4:40:1a:df:7e:38:3e:88: 94:74:4b:61:46:66:df:48:ab:29:22:ce:9d:60:a6:a5:02:eb: 24:6d:2f:8e:f5:c1:5a:97:66:97:47:c8:98:d6:d3:a3:18:0e: 4b:08:91:b2:6b:53:a9:7a:f3:d7:fd:fe:1f:33:08:bd:77:a7: 91:ec:4a:9e:d9:b8:32:12:68:e9:87:5f:dd:cc:3f:20:b4:d2: e9:c7:1d:be:6d:9c:d5:ae:4e:a9:03:8e:fa:e8:b2:e1:af:d5: ce:b8:74:d5:d2:4c:72:0c:47:05:fb:c2:87:00:79:51:c5:4d: 24:0b:17:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTA2MTkwNzIyMjZaFw0yNTA2MjYwNzIyMjZaMBgxFjAUBgNV BAMTDTY4NTNiYWIyLTY0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRLyRytCVbOlHHuSVm3F0Pf439j9g2BnYyIcSARqYHWck2jTbdj5Yfa+HQfIGv IiAGM56Pd0WdFlvYNxNM/68aCabRgvfJfA9qIj57Hnb2Hji7LF/nn/PeYETUOylg SKCtUhrUEG3sptv4GOPUDF5MY+/5Aqruz0GCEU9dwH48gvaeNgTotH8TULKsS9Ik tk5zKTZ0q+QJyFLobKB9P/HRnaTFxdcqtF9h3zDINaV4DgcvjXQfXNvqEf6f5hAL 9Ii0okvB+ZM+oNS2c5DH1SDLrMDavYmvfcjZ5c8EIQ0ZkP4+Hn4xn78zsaEc7XyO +jfEn8Y3vWFQG/E5E47ljG4BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjPFH5JXn lMFnkUUI+BKK71RRd+YwHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALa5cBxPGhsGlNri3PUOS5lomIiNl+IV0uAdFpLOFLBVQVljVZOLXo9U DzgaO4WY6Ia+GAwB/6XkyZwGXFmPCHexUB0Slu8IfAUVVIDxoBnb/rdVjWMIwVDh O0lo7MmTyOfS9yIWLM7V7iXAwtsCZ47PrAMbfaJUh+sHDTzGfk0a+OKDedztGMq0 QBrffjg+iJR0S2FGZt9Iqykizp1gpqUC6yRtL471wVqXZpdHyJjW06MYDksIkbJr U6l689f9/h8zCL13p5HsSp7ZuDISaOmHX93MPyC00unHHb5tnNWuTqkDjvrosuGv 1c64dNXSTHIMRwX7wocAeVHFTSQLF5w= -----END CERTIFICATE-----Generated at Fri Jun 20 16:38:58 2025 by rpki-client