$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json) Hash identifier: BI6iidUCvwWi62N9jFocK8060s+FEby3rnHLPWPzVAQ= Subject key identifier: 6C:86:CB:EF:7A:7D:54:B3:AB:93:8E:81:D0:FB:0F:66:CD:1F:06:AF Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft Manifest number: 01FC Signing time: Thu 03 Jul 2025 02:35:12 +0000 Manifest this update: Thu 03 Jul 2025 02:35:12 +0000 Manifest next update: Thu 10 Jul 2025 02:35:12 +0000 Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: Vtr20/CAx4stESZJ7O8SGKB4bqcYN9cwSXzeAHNar1g=) 2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=) 3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=) 4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Validity Not Before: Jul 3 02:35:12 2025 GMT Not After : Jul 10 02:35:12 2025 GMT Subject: CN=6865ec60-819d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:5a:b1:06:24:c1:c2:ee:25:54:6b:82:56: d6:e9:21:b8:16:f4:83:cc:a6:e9:c4:ab:9f:07:19: 4d:ec:0d:e4:05:cc:78:3a:42:ba:52:32:d7:03:34: 08:c8:05:c2:ac:5a:c2:2f:d5:ae:e2:53:88:75:c4: 4b:40:5c:d7:8b:a3:2a:c6:f7:e9:a6:fa:3a:ce:00: 1c:bb:09:c6:e4:35:5b:96:fd:89:0a:d1:90:7d:b8: 5b:27:6b:8c:e5:05:34:3e:90:33:3a:32:17:6e:f8: dd:a7:18:56:11:56:65:97:7a:2b:10:78:2e:21:1d: f5:87:d0:22:63:6b:b2:fd:8b:1b:8d:a3:11:00:cb: 0d:92:8c:5c:73:0d:f1:7a:d3:c7:6e:28:ca:2d:e1: a3:c3:1c:a9:62:a0:53:70:f1:30:95:3f:db:3b:71: 20:82:c8:02:9b:19:39:16:f9:92:06:88:a7:52:79: f2:54:2a:8e:b3:62:34:6e:49:b9:84:f7:4d:d9:c5: 8b:a5:45:fe:86:d2:03:7c:fb:9b:5d:26:52:73:e0: a5:0b:99:a7:80:4f:9d:ea:5a:f8:ce:5a:bb:8b:e6: cf:e1:43:eb:bf:b0:46:e6:cf:01:1a:a1:47:01:a4: 0b:5e:ef:2a:7f:54:3f:18:a9:b0:8a:04:69:a2:1c: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:86:CB:EF:7A:7D:54:B3:AB:93:8E:81:D0:FB:0F:66:CD:1F:06:AF X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6c:7d:0b:49:11:58:79:7a:05:83:56:96:f9:89:77:6e:3e: 2b:7c:d4:46:09:f5:81:b1:51:9f:4a:32:45:5e:9b:46:12:21: 6a:17:67:39:4b:e9:c6:b6:12:76:f6:53:07:b4:54:ec:74:1f: 29:8b:5f:b1:8b:6a:d4:ed:b3:ad:94:b6:21:1c:eb:51:82:15: 95:a6:02:f2:4d:b6:9e:04:77:87:2f:83:ad:3e:05:15:5e:64: 6d:19:60:8e:56:fd:94:8f:d6:d6:1f:23:ee:98:d1:e8:8a:81: 83:8d:cd:73:d0:2e:a5:0f:b0:8c:d0:e6:4d:44:ab:37:1d:64: cf:ab:de:3c:15:ef:de:d7:90:d0:9b:07:d9:05:b6:b5:5d:72: 80:9e:f1:50:08:a5:a9:15:44:06:39:93:9d:3c:f8:bf:1b:67: 9c:4f:fa:fe:47:0c:e6:bf:62:b7:14:fb:83:4a:de:9c:c9:13: c1:76:94:38:3e:ac:f2:86:45:1d:51:47:be:73:a7:c9:be:f3: b0:e0:83:4f:8d:b1:22:33:58:44:7b:0c:bb:86:51:81:ca:eb: 45:8f:c6:03:c5:38:f0:f4:62:5d:3d:51:8e:03:c2:54:21:2d: 8b:1f:33:8d:5f:f1:79:4c:29:46:3d:39:76:bc:45:9d:00:9b: e7:06:44:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjUwNzAzMDIzNTEyWhcNMjUwNzEwMDIzNTEyWjAYMRYwFAYD VQQDEw02ODY1ZWM2MC04MTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnxasQYkwcLuJVRrglbW6SG4FvSDzKbpxKufBxlN7A3kBcx4OkK6UjLXAzQI yAXCrFrCL9Wu4lOIdcRLQFzXi6Mqxvfppvo6zgAcuwnG5DVblv2JCtGQfbhbJ2uM 5QU0PpAzOjIXbvjdpxhWEVZll3orEHguIR31h9AiY2uy/YsbjaMRAMsNkoxccw3x etPHbijKLeGjwxypYqBTcPEwlT/bO3EggsgCmxk5FvmSBoinUnnyVCqOs2I0bkm5 hPdN2cWLpUX+htIDfPubXSZSc+ClC5mngE+d6lr4zlq7i+bP4UPrv7BG5s8BGqFH AaQLXu8qf1Q/GKmwigRpohxdUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyGy+96 fVSzq5OOgdD7D2bNHwavMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcbH0LSRFYeXoFg1aW+Yl3bj4rfNRGCfWBsVGfSjJFXptGEiFqF2c5 S+nGthJ29lMHtFTsdB8pi1+xi2rU7bOtlLYhHOtRghWVpgLyTbaeBHeHL4OtPgUV XmRtGWCOVv2Uj9bWHyPumNHoioGDjc1z0C6lD7CM0OZNRKs3HWTPq948Fe/e15DQ mwfZBba1XXKAnvFQCKWpFUQGOZOdPPi/G2ecT/r+Rwzmv2K3FPuDSt6cyRPBdpQ4 PqzyhkUdUUe+c6fJvvOw4INPjbEiM1hEewy7hlGByutFj8YDxTjw9GJdPVGOA8JU IS2LHzONX/F5TClGPTl2vEWdAJvnBkSl -----END CERTIFICATE-----Generated at Thu Jul 3 05:59:12 2025 by rpki-client