$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft File: jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json) Hash identifier: Km4zra1qWDGvawQrWH+RtkMCHfV/1MdhcOPj/s7RZ4E= Subject key identifier: 77:DB:4B:16:72:C5:C8:88:59:21:50:D2:A7:B6:04:45:70:5C:AA:B9 Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B Certificate issuer: /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft Manifest number: F9 Signing time: Thu 03 Jul 2025 05:22:44 +0000 Manifest this update: Thu 03 Jul 2025 05:22:44 +0000 Manifest next update: Thu 10 Jul 2025 05:22:44 +0000 Files and hashes: 1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: CGR1QiwMKFziZi+iPahtfnI9UIt+WLAJ7A1iUTZT+2U=) 2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: /HUgZFHQdOKqVGsoyIo8SC7cdtj7Z66CHfzRpJ6gBOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Validity Not Before: Jul 3 05:22:44 2025 GMT Not After : Jul 10 05:22:44 2025 GMT Subject: CN=686613a4-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:e5:91:03:60:a5:0d:8f:7d:de:93:2c:71: 18:93:ae:a9:1d:68:32:6f:c0:11:22:e8:d1:4e:50: a8:c6:d7:da:11:e9:59:db:c0:46:78:4e:4c:8b:ae: c6:d7:43:8c:a9:e6:45:53:64:6d:8b:27:a6:6b:5e: 8a:02:0f:f2:9f:be:ca:08:69:03:40:48:9f:1f:9b: 7b:35:4b:72:58:42:ad:cc:9b:55:12:8d:0e:66:49: 21:41:9d:66:db:05:4b:df:97:a6:cc:68:89:c7:e4: 1d:60:84:45:bb:d6:8d:1f:76:5b:6b:ed:70:9c:cf: a1:c1:b4:41:28:03:f9:f4:cc:b3:05:79:14:e7:22: 81:72:11:b3:7a:eb:f1:6b:dc:7c:cc:30:37:8b:f0: 72:29:71:19:b8:cb:6f:88:ad:32:40:28:f7:00:c0: ad:ab:7f:a5:5c:6b:28:45:f9:53:6d:b0:94:1a:04: 3a:c0:ac:6d:32:f6:45:f9:b6:a5:e0:7d:4f:69:4b: 2f:b1:2f:5c:eb:75:4f:7f:1f:f7:ca:d7:e6:a7:42: a4:3b:b5:3e:a3:73:f5:02:9a:b8:75:16:20:06:15: 23:bc:d3:70:22:cd:58:e0:27:87:9d:6a:9b:40:62: ca:c2:d7:a9:c2:c3:f1:02:cb:6c:7b:35:96:cc:4d: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DB:4B:16:72:C5:C8:88:59:21:50:D2:A7:B6:04:45:70:5C:AA:B9 X509v3 Authority Key Identifier: keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:f6:9b:1f:6b:c6:5a:db:ff:2e:45:16:ef:b9:e0:b8:ec: 3e:4d:2a:45:eb:6c:98:4d:38:9d:55:18:4e:8b:c0:0d:ad:34: 12:e7:de:df:cf:6a:3d:e7:ee:40:46:3a:10:a0:b9:fa:b0:2d: 7d:0b:56:0f:25:a9:b1:1d:c4:2e:d8:d0:ea:87:65:da:9d:09: 7b:93:61:98:15:0d:9a:51:d8:a6:be:b8:d3:9b:88:9a:b5:29: eb:42:7a:2f:6e:0f:c2:7c:0f:f9:09:6a:a1:5f:06:e4:95:16: 18:2d:ff:89:9d:ea:b5:bb:fa:60:fe:aa:bf:ff:9c:dc:c1:11: d5:ae:69:e3:75:2c:58:e6:a2:26:c4:a7:e8:12:39:8d:57:a1: 4a:86:10:e6:6d:bc:fb:a8:69:b0:ac:c3:01:88:97:67:2c:e7: ef:87:26:c7:70:21:f6:59:3c:0a:36:31:f0:13:f6:04:2b:a4: 5b:8c:61:7b:f6:e8:66:11:4b:70:2c:73:b3:25:99:01:b3:2c: ff:f4:7a:59:59:28:13:1f:53:04:a4:fe:e9:87:8c:34:85:a4: c0:79:57:3c:82:db:40:1b:cd:8d:d2:62:53:d8:8e:07:84:61: 4a:7d:a6:95:48:a6:a4:03:e9:4b:f3:21:b3:06:e1:07:a7:ca: 29:25:15:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVDQTQxMTAvBgNVBAUTKDhDMUMxNERDMTY3NERCQjY4QjQ5NDMwMTU4N0IzRDJG OThFRDcwMUIwHhcNMjUwNzAzMDUyMjQ0WhcNMjUwNzEwMDUyMjQ0WjAYMRYwFAYD VQQDEw02ODY2MTNhNC1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YHlkQNgpQ2Pfd6TLHEYk66pHWgyb8ARIujRTlCoxtfaEelZ28BGeE5Mi67G 10OMqeZFU2Rtiyema16KAg/yn77KCGkDQEifH5t7NUtyWEKtzJtVEo0OZkkhQZ1m 2wVL35emzGiJx+QdYIRFu9aNH3Zba+1wnM+hwbRBKAP59MyzBXkU5yKBchGzeuvx a9x8zDA3i/ByKXEZuMtviK0yQCj3AMCtq3+lXGsoRflTbbCUGgQ6wKxtMvZF+bal 4H1PaUsvsS9c63VPfx/3ytfmp0KkO7U+o3P1Apq4dRYgBhUjvNNwIs1Y4CeHnWqb QGLKwtepwsPxAstsezWWzE1z6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfbSxZy xciIWSFQ0qe2BEVwXKq5MB8GA1UdIwQYMBaAFIwcFNwWdNu2i0lDAVh7PS+Y7XAb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUNBNC80ODVGMzM2QURD RUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3YUxTVU1CV0hzOUw1anRj QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUNBNC80ODVGMzM2QURDRUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3 YUxTVU1CV0hzOUw1anRjQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4EvabH2vGWtv/LkUW77nguOw+TSpF62yYTTidVRhOi8ANrTQS597f z2o95+5ARjoQoLn6sC19C1YPJamxHcQu2NDqh2XanQl7k2GYFQ2aUdimvrjTm4ia tSnrQnovbg/CfA/5CWqhXwbklRYYLf+Jneq1u/pg/qq//5zcwRHVrmnjdSxY5qIm xKfoEjmNV6FKhhDmbbz7qGmwrMMBiJdnLOfvhybHcCH2WTwKNjHwE/YEK6RbjGF7 9uhmEUtwLHOzJZkBsyz/9HpZWSgTH1MEpP7ph4w0haTAeVc8gttAG82N0mJT2I4H hGFKfaaVSKakA+lL8yGzBuEHp8opJRUM -----END CERTIFICATE-----Generated at Thu Jul 3 15:31:59 2025 by rpki-client