$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json) Hash identifier: 2C+6+lrrbiUW35Zp07NycRpgeIZwp8YWHs1m/caMM60= Subject key identifier: 63:56:CC:34:F1:E6:59:36:83:2C:52:32:59:00:C0:D4:E0:89:3F:9F Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 11FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft Manifest number: 11F6 Signing time: Sat 14 Jun 2025 17:06:20 +0000 Manifest this update: Sat 14 Jun 2025 17:06:20 +0000 Manifest next update: Sat 21 Jun 2025 17:06:20 +0000 Files and hashes: 1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: dGzu8vnB0eeH7RXDdzndlX9kWIB0eJB2DWpIoSpCpME=) 2: A295F860E71011E8899C3917C4F9AE02.roa (hash: MpKbuC4p+zIoKJkZfEG3DvMzDY6zY/kK40o2YHQcwMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4605 (0x11fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Jun 14 17:06:20 2025 GMT Not After : Jun 21 17:06:20 2025 GMT Subject: CN=684dac0c-6e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:30:0d:9e:8b:c4:03:e4:d2:32:6b:88:99: 65:67:bd:7a:21:10:6a:ce:5d:88:a8:2e:eb:41:34: 2c:b4:b5:8e:c0:37:08:fc:25:d2:19:d1:ec:f5:fc: b0:6a:09:c9:b3:a9:3b:26:99:7b:1a:90:ac:6d:02: cf:7d:90:26:71:45:fb:c0:1a:77:77:ff:43:5d:da: bd:67:5d:51:6c:50:30:85:de:13:38:4c:99:3b:82: 20:ba:ce:01:e7:f8:42:32:be:0c:6e:b3:02:4c:ed: 68:3a:04:50:18:4d:b1:e3:ef:ac:a4:88:5e:30:98: 30:37:bc:7e:7f:b1:cd:35:77:68:5a:f4:a6:9c:ca: 18:b5:97:f7:06:2e:eb:42:c3:fe:75:be:f6:49:25: 81:e3:19:b1:20:56:5f:84:c0:cc:f2:71:a7:6b:85: ee:32:8e:b6:a6:69:5c:af:d5:35:2f:f6:65:8b:7d: fb:27:c3:0c:bf:a4:2a:16:f1:51:78:02:14:de:33: 03:f3:f9:c9:8a:f1:6d:79:10:a0:b7:39:e4:ec:0b: ba:e0:11:3c:c1:54:bd:b2:81:84:1e:c4:c7:e8:73: 53:4c:9f:30:62:5f:f3:8a:2d:6b:c1:12:a6:bf:e6: 4d:4b:58:d8:87:6c:80:e8:83:47:11:00:21:42:e2: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:56:CC:34:F1:E6:59:36:83:2C:52:32:59:00:C0:D4:E0:89:3F:9F X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c1:5d:87:f4:e5:de:a2:ff:33:fe:26:94:e2:02:b7:d0:16: d0:0c:59:2e:62:5d:00:b4:7e:eb:9c:22:e4:f0:56:2b:1d:61: 6f:ce:f6:df:5f:a0:e3:19:c3:39:23:21:a5:77:7a:a4:da:7e: 01:e1:1d:dc:a6:b3:2d:77:4f:5a:bb:c1:66:a7:7a:4a:55:87: ea:24:f9:f9:d0:51:60:7c:eb:dd:84:31:dc:a0:64:47:13:67: 1c:12:a5:2f:d6:a2:5a:71:52:45:51:29:b1:94:98:4c:30:a1: b2:ec:d4:f8:8c:e6:48:b0:b2:67:4d:d1:45:43:12:a4:38:11: 0b:3c:75:ba:04:51:8d:31:59:04:73:66:11:08:1a:af:b6:18: 8b:f8:bc:84:f4:ea:4f:d4:2c:57:b3:b4:e7:df:bf:44:5f:be: 00:d1:27:02:19:2a:8b:e1:67:6e:6c:4e:06:de:7a:fb:79:b5: 77:d2:d1:77:26:8b:57:50:5b:90:f0:51:0a:3a:57:1e:37:82: 8e:50:47:47:c4:b8:e3:53:c9:86:28:44:fd:cd:91:be:f9:ae: 37:41:51:c6:bb:6d:a5:86:06:2c:b6:ed:9a:6c:a2:b4:09:e6: 34:e5:a5:fe:0a:90:3a:af:0d:4b:6f:a4:43:12:09:f1:3a:dc: 1a:50:76:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjUwNjE0MTcwNjIwWhcNMjUwNjIxMTcwNjIwWjAYMRYwFAYD VQQDEw02ODRkYWMwYy02ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dAwDZ6LxAPk0jJriJllZ716IRBqzl2IqC7rQTQstLWOwDcI/CXSGdHs9fyw agnJs6k7Jpl7GpCsbQLPfZAmcUX7wBp3d/9DXdq9Z11RbFAwhd4TOEyZO4Igus4B 5/hCMr4MbrMCTO1oOgRQGE2x4++spIheMJgwN7x+f7HNNXdoWvSmnMoYtZf3Bi7r QsP+db72SSWB4xmxIFZfhMDM8nGna4XuMo62pmlcr9U1L/Zli337J8MMv6QqFvFR eAIU3jMD8/nJivFteRCgtznk7Au64BE8wVS9soGEHsTH6HNTTJ8wYl/zii1rwRKm v+ZNS1jYh2yA6INHEQAhQuJMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNWzDTx 5lk2gyxSMlkAwNTgiT+fMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf Wi14ZlNsUTZJRHBUNDg1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWwV2H9OXeov8z/iaU4gK30BbQDFkuYl0AtH7rnCLk8FYrHWFvzvbf X6DjGcM5IyGld3qk2n4B4R3cprMtd09au8Fmp3pKVYfqJPn50FFgfOvdhDHcoGRH E2ccEqUv1qJacVJFUSmxlJhMMKGy7NT4jOZIsLJnTdFFQxKkOBELPHW6BFGNMVkE c2YRCBqvthiL+LyE9OpP1CxXs7Tn379EX74A0ScCGSqL4WdubE4G3nr7ebV30tF3 JotXUFuQ8FEKOlceN4KOUEdHxLjjU8mGKET9zZG++a43QVHGu22lhgYstu2abKK0 CeY05aX+CpA6rw1Lb6RDEgnxOtwaUHaf -----END CERTIFICATE-----Generated at Sat Jun 14 19:19:54 2025 by rpki-client