$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: YK4Oek02UkHClc4uVCeSCos8IZziuFnddSaTNlbdNIY= Subject key identifier: 2C:69:E2:AB:A2:E0:3F:19:B4:D7:BA:B8:B2:2B:8F:90:E0:AC:EC:E1 Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0C43 Signing time: Mon 16 Jun 2025 18:28:49 +0000 Manifest this update: Mon 16 Jun 2025 18:28:49 +0000 Manifest next update: Mon 23 Jun 2025 18:28:49 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: k9lbkX2VXCHP+Cw45AKYGsCPzpzY8LvhEmCSXrI6iGQ=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: Ze8Yanp+k5PHmh85OnFiLG44bNuhfOzahNgejKqhDtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: Jun 16 18:28:49 2025 GMT Not After : Jun 23 18:28:49 2025 GMT Subject: CN=68506261-cff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:9b:5e:6f:24:d2:f8:83:5c:a1:ab:64:01: f9:e7:8f:83:6a:0d:16:24:c5:bb:0f:83:e8:1c:6c: 8f:54:e1:3c:33:02:cc:52:f4:10:af:22:34:4f:10: e2:67:2a:b8:5c:2c:b6:ff:c7:00:21:5c:ae:86:be: d0:f6:82:b9:b1:2f:04:ca:ee:88:1c:85:a7:f7:66: 05:6b:b8:d2:4d:df:56:1e:54:2b:f2:6f:ff:4e:7c: b2:d8:0f:05:bd:f4:88:92:0b:0d:4e:b6:9f:cf:6a: a2:40:b8:ee:96:00:9d:c8:ec:01:9f:87:7f:5a:ca: fe:06:f9:91:ee:cc:34:b3:dc:5f:a7:84:0f:7f:90: 45:45:75:e8:84:d3:df:13:f0:cf:c9:17:1b:4a:10: ea:26:b2:5e:f1:dd:cd:b5:7d:5b:65:87:28:96:d3: 54:66:29:9b:28:25:00:79:59:ec:eb:53:55:ed:0b: 66:1c:a3:71:6c:6d:25:10:f6:b3:c3:73:5a:84:a7: 20:be:c5:79:53:3c:6e:27:55:8a:3f:8a:44:fa:ff: dc:98:94:20:9c:a1:6c:db:60:c2:3f:e7:04:1d:ee: 0b:d7:e2:d2:84:aa:9d:a8:8b:f8:34:ab:35:0b:bd: 07:1b:e5:0f:ce:31:9a:36:86:41:9b:11:ba:e9:41: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:69:E2:AB:A2:E0:3F:19:B4:D7:BA:B8:B2:2B:8F:90:E0:AC:EC:E1 X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:6d:58:bd:aa:35:52:ce:0e:5c:05:8a:ec:41:47:6a:c5:eb: 59:0c:fd:1a:96:fc:cf:0e:02:dd:a9:48:c8:a9:69:f4:da:9f: e6:98:9d:f8:7e:d1:85:3b:39:74:b8:b5:79:69:fe:7d:c6:d7: 05:12:ca:f3:3b:8a:5d:a6:f4:29:e9:2e:ba:3b:02:80:ce:70: f7:ef:bd:59:4f:80:51:c4:61:9a:60:a2:8f:21:a8:83:7b:d6: 51:23:fa:f3:86:96:04:20:c1:5a:58:f0:c0:d6:a3:2e:fe:93: 89:98:db:b9:0f:7b:25:e3:b7:18:be:04:66:6c:5f:f0:a3:13: 86:93:20:3c:6b:ac:22:c9:01:32:da:4e:a7:d8:d9:a3:05:26: 30:e3:12:92:54:bd:30:41:6b:dd:3d:64:b4:e1:1d:7d:c6:21: 34:8b:55:b7:17:b4:e0:da:85:1c:51:66:a3:ac:fb:84:4f:12: 70:80:f8:80:fb:13:5a:15:79:9f:bf:7b:ba:d1:f1:8a:cb:b0: 59:3a:c5:24:d0:c5:51:9b:55:fe:91:43:d5:b0:63:c1:72:62: b6:29:71:2b:af:6a:9f:c0:5d:fa:a7:2f:78:60:73:53:f8:d0: e9:04:d5:dd:b0:01:83:dd:c9:30:77:7a:6c:95:1d:c0:49:e3: 8f:91:71:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjUwNjE2MTgyODQ5WhcNMjUwNjIzMTgyODQ5WjAYMRYwFAYD VQQDEw02ODUwNjI2MS1jZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBabXm8k0viDXKGrZAH554+Dag0WJMW7D4PoHGyPVOE8MwLMUvQQryI0TxDi Zyq4XCy2/8cAIVyuhr7Q9oK5sS8Eyu6IHIWn92YFa7jSTd9WHlQr8m//Tnyy2A8F vfSIkgsNTrafz2qiQLjulgCdyOwBn4d/Wsr+BvmR7sw0s9xfp4QPf5BFRXXohNPf E/DPyRcbShDqJrJe8d3NtX1bZYcoltNUZimbKCUAeVns61NV7QtmHKNxbG0lEPaz w3NahKcgvsV5UzxuJ1WKP4pE+v/cmJQgnKFs22DCP+cEHe4L1+LShKqdqIv4NKs1 C70HG+UPzjGaNoZBmxG66UEImQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxp4qui 4D8ZtNe6uLIrj5DgrOzhMB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7bVi9qjVSzg5cBYrsQUdqxetZDP0alvzPDgLdqUjIqWn02p/mmJ34 ftGFOzl0uLV5af59xtcFEsrzO4pdpvQp6S66OwKAznD3771ZT4BRxGGaYKKPIaiD e9ZRI/rzhpYEIMFaWPDA1qMu/pOJmNu5D3sl47cYvgRmbF/woxOGkyA8a6wiyQEy 2k6n2NmjBSYw4xKSVL0wQWvdPWS04R19xiE0i1W3F7Tg2oUcUWajrPuETxJwgPiA +xNaFXmfv3u60fGKy7BZOsUk0MVRm1X+kUPVsGPBcmK2KXErr2qfwF36py94YHNT +NDpBNXdsAGD3ckwd3pslR3ASeOPkXFY -----END CERTIFICATE-----Generated at Tue Jun 17 09:00:27 2025 by rpki-client