$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: uZcLNQ6+y/BVSfY1YskT09x+3Al/RFfaaVGc8ORoP2Q= Subject key identifier: 2C:28:6E:8E:10:DA:1A:B7:3F:B5:02:A5:83:C9:A2:13:7E:8F:57:DC Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 27 Signing time: Sun 15 Jun 2025 06:52:52 +0000 Manifest this update: Sun 15 Jun 2025 06:52:51 +0000 Manifest next update: Sun 22 Jun 2025 06:52:51 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: a4WafsZjrlO9yo6jF7iY6rn8rRQBuBKb77QVET5hMxg=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: Jun 15 06:52:51 2025 GMT Not After : Jun 22 06:52:51 2025 GMT Subject: CN=684e6dc3-a328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:39:e1:fc:3b:6b:0a:50:3f:99:5c:2b:47: 06:50:eb:fd:f0:ba:db:ee:62:58:06:8c:cb:1b:63: 28:57:1f:a2:b6:9e:c7:78:01:75:ff:d2:7d:06:1c: 46:a7:ef:31:4a:41:10:db:0a:8c:61:25:f3:97:bb: 0f:a9:9a:9c:50:9a:84:0d:dc:c8:9f:39:41:0a:84: 5d:4f:e1:cb:58:0f:d8:ba:2d:e7:83:5c:69:92:d1: 74:55:45:cc:cd:bf:41:ee:83:be:38:44:ea:b2:6a: 1c:07:67:02:c2:bb:53:6e:7b:5d:6b:01:b2:ee:47: 6e:f0:06:72:d4:04:34:ef:c8:a3:9d:a1:f3:56:ec: 47:1c:10:12:ae:13:57:95:21:f5:85:9a:ef:ff:40: 50:0f:ec:e3:b3:34:38:f5:97:d4:c6:6b:54:e3:dc: 55:40:33:ac:60:33:30:af:2e:e4:9e:ba:1d:50:a2: 81:32:cd:80:9f:df:44:8b:36:8b:f1:5e:c8:e8:41: 8d:55:b3:ff:e0:cf:c1:d2:47:ea:fb:9f:3d:43:42: 68:1c:74:2a:c0:6f:71:4a:43:69:b5:1c:65:88:16: b1:6d:e6:ae:6f:78:dd:bd:75:85:c9:09:c0:3d:47: 9a:ad:e8:1f:ee:f0:4c:ad:a0:8d:12:68:45:75:c0: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:28:6E:8E:10:DA:1A:B7:3F:B5:02:A5:83:C9:A2:13:7E:8F:57:DC X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:c8:5a:c3:ed:ef:82:ea:9b:41:8b:c6:58:7b:74:c1:14: 5c:de:b4:1e:27:a3:c1:c5:af:8b:e7:18:fc:be:86:4e:37:9f: cc:eb:df:80:a5:fa:11:40:99:ac:44:5d:49:47:f9:c4:d4:bf: 77:1b:0e:2c:e0:30:da:69:61:85:76:1c:2b:ad:0f:76:0c:d6: 51:44:e7:78:ce:1e:fc:3e:bd:cf:43:5b:9f:05:04:0f:e1:af: fd:48:0c:1f:56:8c:1a:a3:37:37:57:16:10:4d:2c:9d:06:c2: 55:f4:da:83:70:d4:8a:db:31:ae:a2:5c:42:ac:a4:b2:17:70: 74:69:f3:4c:a9:bf:dd:07:b7:4d:10:2c:46:9a:2f:be:17:43: 94:be:04:fe:37:6f:e8:c1:1a:6f:25:ad:14:9b:5f:90:29:94: 76:e2:25:b7:bf:f3:3f:b2:7c:7c:8f:a4:8f:c9:09:29:f1:53: bf:0f:c4:83:92:6e:88:11:b8:b9:4b:3f:55:b7:4e:6c:c0:75: 4c:5e:c8:c9:ff:30:8b:87:79:51:c3:be:43:f3:f0:60:a8:df: 46:4e:2a:a1:0a:3f:72:02:86:38:6b:3c:2c:5a:bf:1d:33:3a: ce:fb:77:44:eb:2c:d8:0f:e1:4b:97:11:8b:00:42:d8:bb:a1: 79:e3:66:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTA2MTUwNjUyNTFaFw0yNTA2MjIwNjUyNTFaMBgxFjAUBgNV BAMTDTY4NGU2ZGMzLWEzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGbTnh/DtrClA/mVwrRwZQ6/3wutvuYlgGjMsbYyhXH6K2nsd4AXX/0n0GHEan 7zFKQRDbCoxhJfOXuw+pmpxQmoQN3MifOUEKhF1P4ctYD9i6LeeDXGmS0XRVRczN v0Hug744ROqyahwHZwLCu1Nue11rAbLuR27wBnLUBDTvyKOdofNW7EccEBKuE1eV IfWFmu//QFAP7OOzNDj1l9TGa1Tj3FVAM6xgMzCvLuSeuh1QooEyzYCf30SLNovx XsjoQY1Vs//gz8HSR+r7nz1DQmgcdCrAb3FKQ2m1HGWIFrFt5q5veN29dYXJCcA9 R5qt6B/u8EytoI0SaEV1wEgpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULChujhDa Grc/tQKlg8miE36PV9wwHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGc6yFrD7e+C6ptBi8ZYe3TBFFzetB4no8HFr4vnGPy+hk43n8zr34Cl +hFAmaxEXUlH+cTUv3cbDizgMNppYYV2HCutD3YM1lFE53jOHvw+vc9DW58FBA/h r/1IDB9WjBqjNzdXFhBNLJ0GwlX02oNw1IrbMa6iXEKspLIXcHRp80ypv90Ht00Q LEaaL74XQ5S+BP43b+jBGm8lrRSbX5AplHbiJbe/8z+yfHyPpI/JCSnxU78PxIOS bogRuLlLP1W3TmzAdUxeyMn/MIuHeVHDvkPz8GCo30ZOKqEKP3IChjhrPCxavx0z Os77d0TrLNgP4UuXEYsAQti7oXnjZoc= -----END CERTIFICATE-----Generated at Sun Jun 15 09:30:23 2025 by rpki-client