$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: 56nqdd0FnL9f2GHFdj5CGDUQQrucOD6U6d3czBCUlLo= Subject key identifier: 72:B7:90:FE:2D:1B:EB:D8:87:31:A3:4D:84:2E:35:0C:F6:3E:D2:3D Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 046B Signing time: Wed 18 Jun 2025 23:58:36 +0000 Manifest this update: Wed 18 Jun 2025 23:58:36 +0000 Manifest next update: Wed 25 Jun 2025 23:58:36 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: OPZXKngMl/55vev8SuKIQFUh05H0oZYtyE1pHbaU9/I=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Jun 18 23:58:36 2025 GMT Not After : Jun 25 23:58:36 2025 GMT Subject: CN=685352ac-eaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:79:85:a3:b4:b2:4d:a8:44:6e:77:dd:7f:98: a4:ed:ec:39:34:5d:48:78:70:dc:ab:6f:5e:7d:97: c4:a9:dd:95:14:cb:c6:70:50:94:dc:bd:d3:4e:d3: 28:5b:38:7e:f7:e8:db:db:7f:e4:1f:db:0d:d3:4e: e4:eb:8c:5c:c6:85:4e:eb:ab:bb:a5:f7:23:ad:7e: e4:dd:b3:db:72:70:1c:e3:7c:e5:e1:5d:6c:2e:c5: 40:ce:4b:c0:b3:e2:cf:35:53:e8:0e:ba:97:a0:4e: c6:c3:be:32:2e:c7:8c:6e:ed:0b:df:0f:a8:f0:bf: 6d:f1:e4:3c:40:b7:2e:2c:d9:09:c2:1a:9d:01:58: f1:6d:32:16:62:e0:8b:1a:77:95:32:90:5e:50:97: 6e:52:9c:77:5f:cd:49:e1:f2:b8:3c:2e:e5:18:0e: 98:d2:96:2b:de:fd:01:61:86:13:97:ba:e6:04:60: a5:e9:4e:7c:66:6c:18:7b:c9:62:cf:db:5f:97:59: 00:86:5f:9d:f3:1d:63:5d:43:76:19:89:f3:69:00: 5c:d5:3d:3a:8d:ac:36:70:a7:29:bf:45:2c:c6:ea: 44:99:80:dc:50:d0:8e:e7:32:a7:1f:c1:8b:06:72: 7e:f2:70:ca:75:d4:44:b6:2c:aa:42:00:ee:d1:04: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B7:90:FE:2D:1B:EB:D8:87:31:A3:4D:84:2E:35:0C:F6:3E:D2:3D X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:60:06:3d:bc:a9:d9:85:02:cf:6f:af:87:b4:1c:ec:bb:3a: 7e:41:84:7b:54:92:2c:3e:4a:15:d0:16:b4:2f:03:e4:5a:1a: 99:3b:ca:7a:9e:fb:29:39:6e:e6:e9:c1:03:45:4a:e3:4f:e8: 8d:a3:ed:bd:a6:61:8c:a2:e5:71:c8:06:d6:06:95:0d:de:0b: 72:36:5b:2f:92:99:b5:fc:be:0a:24:6c:10:c6:64:4f:9b:81: c4:0e:e2:cd:4a:c4:15:37:c3:98:89:7f:15:e1:6f:4d:12:9a: 19:a8:54:f1:96:5d:15:e9:a5:a1:9a:ac:ac:ec:af:a6:1e:ec: 89:8f:1e:3e:ff:be:8a:06:d7:7a:49:b1:d1:5d:38:86:d0:b6: 11:2b:2b:a9:af:dd:69:d8:8a:ff:68:ec:eb:b9:f0:d3:a7:96: 01:d0:23:8b:dd:99:82:97:58:fe:11:20:96:2b:49:7e:28:af: de:aa:38:9f:83:10:30:70:e1:d2:fd:b7:a8:96:e3:f9:26:8d: 75:4d:33:9a:c3:75:7b:c7:d4:e6:40:cf:bc:56:c1:86:74:b6: 7b:33:11:29:ac:53:92:b8:26:43:b9:a7:3f:63:aa:8b:b1:a0: 17:d2:73:e8:3f:7e:03:29:65:39:fa:26:4a:a4:97:c6:bc:44: b6:a8:6a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjUwNjE4MjM1ODM2WhcNMjUwNjI1MjM1ODM2WjAYMRYwFAYD VQQDEw02ODUzNTJhYy1lYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HmFo7SyTahEbnfdf5ik7ew5NF1IeHDcq29efZfEqd2VFMvGcFCU3L3TTtMo Wzh+9+jb23/kH9sN007k64xcxoVO66u7pfcjrX7k3bPbcnAc43zl4V1sLsVAzkvA s+LPNVPoDrqXoE7Gw74yLseMbu0L3w+o8L9t8eQ8QLcuLNkJwhqdAVjxbTIWYuCL GneVMpBeUJduUpx3X81J4fK4PC7lGA6Y0pYr3v0BYYYTl7rmBGCl6U58ZmwYe8li z9tfl1kAhl+d8x1jXUN2GYnzaQBc1T06jaw2cKcpv0UsxupEmYDcUNCO5zKnH8GL BnJ+8nDKddREtiyqQgDu0QRIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK3kP4t G+vYhzGjTYQuNQz2PtI9MB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+YAY9vKnZhQLPb6+HtBzsuzp+QYR7VJIsPkoV0Ba0LwPkWhqZO8p6 nvspOW7m6cEDRUrjT+iNo+29pmGMouVxyAbWBpUN3gtyNlsvkpm1/L4KJGwQxmRP m4HEDuLNSsQVN8OYiX8V4W9NEpoZqFTxll0V6aWhmqys7K+mHuyJjx4+/76KBtd6 SbHRXTiG0LYRKyupr91p2Ir/aOzrufDTp5YB0COL3ZmCl1j+ESCWK0l+KK/eqjif gxAwcOHS/beoluP5Jo11TTOaw3V7x9TmQM+8VsGGdLZ7MxEprFOSuCZDuac/Y6qL saAX0nPoP34DKWU5+iZKpJfGvES2qGoE -----END CERTIFICATE-----Generated at Fri Jun 20 07:18:13 2025 by rpki-client