$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft File: jcAuucfBcJwTt0jXBDtY9DW_qXI.mft (raw, json) Hash identifier: leDK8cGJVnY9Z2WAy/ZGSiyU0HM5k0cdBbYb9FPK9mU= Subject key identifier: 4E:3B:F1:65:33:1E:49:F4:54:CD:A2:1C:01:1B:F5:9F:C2:13:6D:7A Authority key identifier: 8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 Certificate issuer: /CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Certificate serial: 0DE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft Manifest number: 364F Signing time: Wed 02 Jul 2025 16:05:48 +0000 Manifest this update: Wed 02 Jul 2025 16:05:48 +0000 Manifest next update: Wed 09 Jul 2025 16:05:48 +0000 Files and hashes: 1: jcAuucfBcJwTt0jXBDtY9DW_qXI.crl (hash: tuYcQYsbFlJBCArZV5b1goJ8OqAgpKKYorsQCYKbSOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3561 (0xde9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Validity Not Before: Jul 2 16:05:48 2025 GMT Not After : Jul 9 16:05:48 2025 GMT Subject: CN=686558dc-fd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:d4:66:f0:0b:11:53:09:1a:c0:f1:15:b0: 32:d5:0a:3c:cf:07:cb:a0:74:32:d3:f7:0b:c5:2d: 9e:10:50:65:92:c2:df:a3:ad:bc:42:24:06:2f:4e: fb:fa:fd:26:eb:99:48:71:c0:6d:78:e9:f0:ce:84: 6a:a5:69:99:70:2f:c2:a7:60:b3:bf:2e:4d:e7:7a: 62:ce:2e:69:5e:8c:ab:66:23:55:93:cf:a7:98:10: 7b:81:b5:71:c2:7a:c0:ba:33:23:5e:4e:47:01:dc: 88:ef:d9:9a:27:f1:05:1d:0a:6c:e3:78:c6:ef:f8: 65:d4:aa:cc:2b:6c:12:7f:93:6a:6f:fa:c4:ed:6d: fa:1f:40:73:cf:be:1c:46:d7:30:be:7c:57:4e:e8: b8:8c:03:3d:87:98:19:05:3e:cd:0a:71:b6:59:4c: 43:2a:7f:be:e9:f4:7e:9f:08:bb:cd:ad:de:00:40: e6:36:4a:79:ef:19:06:3a:a8:f7:5d:53:76:ba:25: 8f:4a:fd:d6:62:7c:54:ec:f6:f6:8c:87:a7:43:fc: 5a:c9:e5:d6:73:cd:5d:7e:0c:80:9a:1f:e9:eb:0a: 38:b3:09:5d:b1:58:d8:72:5e:d4:dd:35:ff:5a:9c: e1:97:7b:4f:3b:59:30:78:e0:92:bc:46:be:4e:22: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3B:F1:65:33:1E:49:F4:54:CD:A2:1C:01:1B:F5:9F:C2:13:6D:7A X509v3 Authority Key Identifier: keyid:8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:0e:55:8d:a6:3d:49:4b:1b:63:57:d0:72:21:3a:85:cd:2c: 8c:64:22:1e:5a:3b:8a:49:4a:ed:a7:79:ff:66:b2:7d:e3:d9: 45:d0:a7:38:f4:16:46:2a:92:8a:d1:f9:64:5a:8e:ee:3f:e3: bf:32:9c:d9:ff:7c:b6:30:86:26:3d:ca:4c:3e:ce:fd:ad:e7: bc:3f:3c:8a:c6:51:f9:1e:00:6d:78:c4:10:f4:1e:50:ca:31: 19:a9:a3:7b:34:67:b1:43:82:1b:8f:b8:92:46:bb:12:ef:5f: ff:48:a1:3e:e9:bb:27:1d:50:82:dd:6a:08:96:0a:0e:ef:0f: b2:c3:6d:33:48:a5:5d:87:46:86:ca:a5:26:02:b6:17:83:c4: 4c:ac:be:fe:40:a6:a5:bd:c7:f7:6d:17:6b:50:95:d0:6f:eb: b9:c3:8e:52:d2:b2:85:ab:bf:6f:f7:20:26:4c:2e:2a:f0:d4: d3:1e:cf:a3:96:be:67:b1:35:e7:8f:db:66:99:ff:f5:14:81: 1d:18:c3:61:8c:30:94:82:5b:eb:b4:b9:26:18:8c:03:43:40: 72:a1:c5:4e:59:31:75:c3:47:09:f9:72:6a:40:27:45:28:c6: c8:d0:2d:a1:4e:56:c7:7c:f8:28:a5:8b:cd:86:3a:3f:46:36: e2:59:0e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDhEQzAyRUI5QzdDMTcwOUMxM0I3NDhENzA0M0I1OEY0 MzVCRkE5NzIwHhcNMjUwNzAyMTYwNTQ4WhcNMjUwNzA5MTYwNTQ4WjAYMRYwFAYD VQQDEw02ODY1NThkYy1mZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlY7UZvALEVMJGsDxFbAy1Qo8zwfLoHQy0/cLxS2eEFBlksLfo628QiQGL077 +v0m65lIccBteOnwzoRqpWmZcC/Cp2Czvy5N53pizi5pXoyrZiNVk8+nmBB7gbVx wnrAujMjXk5HAdyI79maJ/EFHQps43jG7/hl1KrMK2wSf5Nqb/rE7W36H0Bzz74c RtcwvnxXTui4jAM9h5gZBT7NCnG2WUxDKn++6fR+nwi7za3eAEDmNkp57xkGOqj3 XVN2uiWPSv3WYnxU7Pb2jIenQ/xayeXWc81dfgyAmh/p6wo4swldsVjYcl7U3TX/ Wpzhl3tPO1kweOCSvEa+TiK0+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE478WUz Hkn0VM2iHAEb9Z/CE216MB8GA1UdIwQYMBaAFI3ALrnHwXCcE7dI1wQ7WPQ1v6ly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNKd1R0MGpYQkR0WTlEV19x WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjQXV1Y2ZCY0p3VHQwalhCRHRZOURXX3FYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNK d1R0MGpYQkR0WTlEV19xWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJDlWNpj1JSxtjV9ByITqFzSyMZCIeWjuKSUrtp3n/ZrJ949lF0Kc4 9BZGKpKK0flkWo7uP+O/MpzZ/3y2MIYmPcpMPs79ree8PzyKxlH5HgBteMQQ9B5Q yjEZqaN7NGexQ4Ibj7iSRrsS71//SKE+6bsnHVCC3WoIlgoO7w+yw20zSKVdh0aG yqUmArYXg8RMrL7+QKalvcf3bRdrUJXQb+u5w45S0rKFq79v9yAmTC4q8NTTHs+j lr5nsTXnj9tmmf/1FIEdGMNhjDCUglvrtLkmGIwDQ0ByocVOWTF1w0cJ+XJqQCdF KMbI0C2hTlbHfPgopYvNhjo/RjbiWQ7D -----END CERTIFICATE-----Generated at Thu Jul 3 17:39:24 2025 by rpki-client