$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: BP28fp83HT8qFPpvwQ7gV+VCmTCEcYHFKgSmlH8IYvY= Subject key identifier: 3C:96:EA:C7:95:AE:AB:22:CE:C5:B2:FD:A0:00:90:8D:BF:F6:31:95 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 0209 Signing time: Thu 19 Jun 2025 01:53:07 +0000 Manifest this update: Thu 19 Jun 2025 01:53:07 +0000 Manifest next update: Thu 26 Jun 2025 01:53:07 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: 0cOfljnEKHkuQ6njjzRrOy3I+HD8HlyiGwTg3G58AqQ=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mhhqfIxRoBjhuINkZ3XIMhFtJRPA+gdmIPhSIee7DFc=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: gcq2OURWYuZ9mt7r/ew2O7bw4Is8Oj5yrAJBkVF7NPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Jun 19 01:53:07 2025 GMT Not After : Jun 26 01:53:07 2025 GMT Subject: CN=68536d83-5f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:ce:d4:c1:dc:09:54:b1:49:e1:3f:69:8e: 05:dd:d2:00:9b:cb:3d:6e:cd:2c:45:28:f9:a7:d8: f7:b7:a1:e2:c5:1f:e3:69:6b:ee:67:3e:fb:b0:8f: 93:9e:ff:ea:96:b5:7d:2e:85:4c:1e:3e:ec:06:e2: 5a:24:3a:b7:b6:63:94:c2:3c:31:1b:03:b9:4e:e9: 67:77:60:ad:4a:c1:34:40:89:9d:3e:a2:23:2b:f6: 7a:c5:96:c0:46:bc:b6:22:28:fa:a0:12:bf:89:ff: 63:27:6c:8d:88:f4:09:36:2e:15:ef:93:4b:07:36: 79:ca:44:7b:46:9a:3a:f5:32:48:f7:90:80:df:16: fe:16:84:5a:36:2b:b1:46:06:9c:65:9f:1f:26:f8: a5:95:b1:8b:2f:3c:09:ab:2a:22:c0:28:17:53:46: ce:0e:1e:86:36:87:0e:79:93:85:c6:e0:13:bd:49: 6a:94:18:87:52:8f:8a:6b:65:80:00:8b:01:54:94: 21:92:2b:db:e7:42:ba:12:7a:bb:1c:d3:e9:8e:71: 19:b6:09:3d:73:fd:09:43:9c:37:d2:6b:90:32:08: 8b:bd:bb:4f:39:1e:10:be:96:50:14:91:2b:24:8c: 16:10:75:49:bb:5e:02:a7:63:a5:33:4e:d1:25:57: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:EA:C7:95:AE:AB:22:CE:C5:B2:FD:A0:00:90:8D:BF:F6:31:95 X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2e:08:1a:3e:84:f8:9e:52:f7:66:6b:a1:c1:c7:a7:56:a9: d2:f8:17:d6:fc:53:be:4f:90:33:ca:d8:8d:21:5d:c1:03:dd: 7a:68:dd:59:61:b7:1f:1a:d1:91:6a:35:74:1e:5a:48:0c:22: d4:37:53:56:b1:b4:d0:13:f7:ff:d4:c5:bb:78:e6:96:47:c6: 81:3a:29:4e:03:ea:bc:3d:c2:28:57:7d:0c:39:ac:a4:d8:ae: d3:ec:a1:41:a2:1b:ce:91:53:18:30:91:51:af:50:78:2e:72: 12:b3:e9:64:67:2b:57:98:48:3a:ae:5c:57:8d:11:ac:85:a3: 70:68:4b:59:8d:5d:8c:a0:39:74:96:8f:e7:43:b4:f9:6a:c7: a2:83:eb:3b:8f:c0:21:30:2e:0e:5e:b1:c9:fd:0d:a7:d7:52: 62:d5:0f:eb:7d:ae:d4:79:79:df:3f:8d:ec:07:b1:b6:a4:7a: be:3b:25:23:c9:4f:72:f5:ce:5d:34:55:f5:bb:a7:c3:b2:9e: 44:82:d0:9b:33:c3:b9:05:3c:ed:5a:e3:9f:f0:c5:39:e2:40: 8c:c0:e1:eb:c2:a3:a4:9e:f0:16:52:5f:b1:97:ef:a1:06:b9: 34:67:ae:86:e2:ac:3a:3a:9b:69:bc:cc:56:c9:e7:db:3b:55: ef:dd:ce:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjUwNjE5MDE1MzA3WhcNMjUwNjI2MDE1MzA3WjAYMRYwFAYD VQQDEw02ODUzNmQ4My01ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE3O1MHcCVSxSeE/aY4F3dIAm8s9bs0sRSj5p9j3t6HixR/jaWvuZz77sI+T nv/qlrV9LoVMHj7sBuJaJDq3tmOUwjwxGwO5Tulnd2CtSsE0QImdPqIjK/Z6xZbA Rry2Iij6oBK/if9jJ2yNiPQJNi4V75NLBzZ5ykR7Rpo69TJI95CA3xb+FoRaNiux RgacZZ8fJvillbGLLzwJqyoiwCgXU0bODh6GNocOeZOFxuATvUlqlBiHUo+Ka2WA AIsBVJQhkivb50K6Enq7HNPpjnEZtgk9c/0JQ5w30muQMgiLvbtPOR4QvpZQFJEr JIwWEHVJu14Cp2OlM07RJVcyuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyW6seV rqsizsWy/aAAkI2/9jGVMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiLggaPoT4nlL3ZmuhwcenVqnS+BfW/FO+T5AzytiNIV3BA916aN1Z YbcfGtGRajV0HlpIDCLUN1NWsbTQE/f/1MW7eOaWR8aBOilOA+q8PcIoV30MOayk 2K7T7KFBohvOkVMYMJFRr1B4LnISs+lkZytXmEg6rlxXjRGshaNwaEtZjV2MoDl0 lo/nQ7T5aseig+s7j8AhMC4OXrHJ/Q2n11Ji1Q/rfa7UeXnfP43sB7G2pHq+OyUj yU9y9c5dNFX1u6fDsp5EgtCbM8O5BTztWuOf8MU54kCMwOHrwqOknvAWUl+xl++h Brk0Z66G4qw6OptpvMxWyefbO1Xv3c5z -----END CERTIFICATE-----Generated at Thu Jun 19 14:25:14 2025 by rpki-client