$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: +NRGt0Bo3EtmumUtMpb3PWX/kD6ulWVtVqSvP5WyX34= Subject key identifier: ED:BD:75:D2:AB:5E:AC:59:F7:D9:1C:CD:C2:A9:1D:B8:4F:11:14:86 Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0AD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0ABA Signing time: Wed 02 Jul 2025 19:44:07 +0000 Manifest this update: Wed 02 Jul 2025 19:44:07 +0000 Manifest next update: Wed 09 Jul 2025 19:44:07 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: NPHGdeP8mFBbdftH5SiEZe4NHszEkNKI+ZyC5KJGSbY=) 2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=) 3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=) 4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2769 (0xad1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Jul 2 19:44:07 2025 GMT Not After : Jul 9 19:44:07 2025 GMT Subject: CN=68658c07-d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:71:7c:d8:f6:9d:73:ee:84:70:06:c3:15: 1f:af:c2:98:23:f0:9b:82:13:cf:ac:fc:04:81:5c: 6e:f8:bb:55:ef:82:0f:1c:8a:b6:f2:6c:ff:28:a8: 43:48:b4:bb:ad:c3:dd:e1:db:7f:23:27:98:68:cf: 72:03:6e:85:62:10:2c:b5:81:18:ec:0a:e9:d5:8b: c4:db:57:3d:35:86:7c:3b:36:46:0b:c7:7a:86:93: e2:30:69:a2:27:38:31:0f:a5:63:49:fa:23:cd:42: 8b:fc:63:b9:88:5e:02:24:5b:6e:2a:f2:98:d0:6e: 02:a2:56:19:2a:a0:f7:49:c5:a9:c1:50:f6:25:53: 09:e3:41:da:db:01:7d:a5:73:17:c9:51:35:e6:c0: c9:0e:f7:7b:b3:2b:0d:c2:19:3c:c6:b7:05:a5:50: ea:b5:1f:72:61:51:8a:56:94:8c:58:27:7c:ee:f8: 2d:c8:8c:c0:f0:ff:3f:ab:04:c5:ad:29:72:da:f7: 87:ed:d5:58:98:a9:23:91:6e:50:e8:55:74:97:dc: 7f:e3:73:c8:a8:17:2e:89:a6:da:00:2b:65:7c:43: fe:83:bb:22:8c:76:60:bd:b8:e4:54:30:61:4b:31: a6:3e:3d:ba:ef:12:4f:ae:8f:b0:b6:36:bf:7c:a1: 26:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:75:D2:AB:5E:AC:59:F7:D9:1C:CD:C2:A9:1D:B8:4F:11:14:86 X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a2:c1:ec:e4:75:0d:73:cb:7d:f4:d4:21:c1:56:11:4e:fa: f1:07:63:fe:87:3c:e8:85:c4:43:68:c2:dd:06:5e:6b:04:a6: 76:d1:24:cd:14:ca:5b:74:2f:e5:ae:a2:93:c1:bc:81:93:09: b4:b5:b3:b4:d9:9c:c1:36:17:b5:38:d6:65:c6:76:ee:e5:50: fa:e1:2d:11:8c:96:c1:3b:27:37:aa:90:06:4f:8a:e0:d2:af: 45:35:ab:27:2c:15:f6:1d:56:37:6a:db:0f:14:8e:bb:47:5d: 50:85:4b:ef:ca:2c:f6:ce:ee:07:8e:0d:c4:3a:f0:28:c5:1e: 61:8d:79:15:72:71:b8:d7:29:82:e5:91:5b:2f:93:b3:ca:68: 76:90:6c:87:93:4c:b2:fe:c0:f5:5b:87:e4:38:21:97:dc:f8: 3c:1d:18:b5:57:46:bd:46:8c:97:1f:9a:69:12:a9:0e:0e:d0: 23:0d:b4:7b:f3:4f:db:05:f5:fd:12:d1:f0:e5:af:b2:0d:d1: 63:d4:fd:b9:fb:13:c5:84:7b:4f:8b:22:c0:0f:43:88:b7:28: de:9c:4b:95:35:a0:43:43:62:6e:6c:86:e3:ac:39:8e:ec:49: fb:ae:40:47:a0:80:08:f1:37:46:54:70:ec:80:68:1f:f6:7b: fd:2f:27:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjUwNzAyMTk0NDA3WhcNMjUwNzA5MTk0NDA3WjAYMRYwFAYD VQQDEw02ODY1OGMwNy1kNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s1xfNj2nXPuhHAGwxUfr8KYI/CbghPPrPwEgVxu+LtV74IPHIq28mz/KKhD SLS7rcPd4dt/IyeYaM9yA26FYhAstYEY7Arp1YvE21c9NYZ8OzZGC8d6hpPiMGmi JzgxD6VjSfojzUKL/GO5iF4CJFtuKvKY0G4ColYZKqD3ScWpwVD2JVMJ40Ha2wF9 pXMXyVE15sDJDvd7sysNwhk8xrcFpVDqtR9yYVGKVpSMWCd87vgtyIzA8P8/qwTF rSly2veH7dVYmKkjkW5Q6FV0l9x/43PIqBcuiabaACtlfEP+g7sijHZgvbjkVDBh SzGmPj267xJPro+wtja/fKEmWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO29ddKr XqxZ99kczcKpHbhPERSGMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACosHs5HUNc8t99NQhwVYRTvrxB2P+hzzohcRDaMLdBl5rBKZ20STN FMpbdC/lrqKTwbyBkwm0tbO02ZzBNhe1ONZlxnbu5VD64S0RjJbBOyc3qpAGT4rg 0q9FNasnLBX2HVY3atsPFI67R11QhUvvyiz2zu4Hjg3EOvAoxR5hjXkVcnG41ymC 5ZFbL5Ozymh2kGyHk0yy/sD1W4fkOCGX3Pg8HRi1V0a9RoyXH5ppEqkODtAjDbR7 80/bBfX9EtHw5a+yDdFj1P25+xPFhHtPiyLAD0OItyjenEuVNaBDQ2JubIbjrDmO 7En7rkBHoIAI8TdGVHDsgGgf9nv9LycK -----END CERTIFICATE-----Generated at Fri Jul 4 08:07:12 2025 by rpki-client