$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: u0cgd/8k5HUlvrRmSXkifw+4+9e+4j1PSj4jDDlR9Ik= Subject key identifier: E6:A6:BB:4E:16:75:A8:43:3A:6D:8A:80:96:AC:5E:8F:92:D4:D6:6A Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0C3A Signing time: Wed 02 Jul 2025 18:49:21 +0000 Manifest this update: Wed 02 Jul 2025 18:49:21 +0000 Manifest next update: Wed 09 Jul 2025 18:49:21 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: z84crYdbgYErKalLeIVPzRxPx73UClGXUP9jvRRJIz8=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Jul 2 18:49:21 2025 GMT Not After : Jul 9 18:49:21 2025 GMT Subject: CN=68657f31-e38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:2a:01:19:1a:84:e9:7e:c1:c4:0a:b9:df: a8:9e:4d:1f:05:71:4d:72:e8:73:50:74:fa:88:6c: 62:ba:46:2b:40:1b:20:c5:8e:86:6f:57:47:8f:a0: 8a:0b:9c:32:ce:80:bb:1c:06:80:25:2a:e8:d7:29: 31:73:13:84:da:e5:94:34:f3:32:e2:d1:b8:23:f6: 1f:3a:54:96:13:0d:2d:78:8e:fe:69:68:be:24:9e: 52:2b:14:c4:0e:27:1c:46:2d:d2:8b:72:fc:05:56: 30:94:df:68:08:f9:cc:fa:38:4e:7b:45:85:ff:2d: 5f:c3:c0:8f:fe:9f:5a:57:62:79:08:23:68:af:2f: d2:0a:3f:f3:db:5a:bf:1f:c0:56:cb:39:71:a9:a8: 44:7a:d0:82:00:89:a3:0a:4d:67:b1:53:b3:db:19: 70:19:b4:b9:de:81:3b:d4:21:6e:bb:e9:81:b2:c7: f2:8e:3d:68:b7:d5:ca:8f:7a:04:31:14:26:74:27: 54:b6:36:0e:3e:76:17:42:d6:52:a4:3a:5b:1c:f2: 0a:c6:56:64:54:ae:b4:dd:43:2c:6b:76:fe:79:d4: 44:8a:7b:9e:ef:0a:e1:3c:b1:3a:12:4c:5b:d6:b9: 3e:a7:64:3e:d4:a1:06:02:a8:88:da:99:e3:ff:68: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A6:BB:4E:16:75:A8:43:3A:6D:8A:80:96:AC:5E:8F:92:D4:D6:6A X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c6:89:a2:fa:05:01:19:65:8b:a4:71:02:43:20:cb:08:42: 41:89:98:68:08:18:65:85:8d:8b:36:15:67:48:aa:bf:2a:82: 2d:34:14:f4:c9:cb:cc:d7:87:8c:11:07:dd:6e:a7:b2:7c:69: 24:eb:3b:f4:1c:28:9b:62:7f:7d:08:5a:e6:6b:e0:73:b6:96: df:24:cd:ce:f6:e7:e1:23:1b:a1:ef:fd:61:3e:af:76:61:a3: a9:33:e1:33:d9:2a:bf:6c:e5:fb:85:00:00:2b:39:54:37:74: f4:72:bd:de:bd:9d:5c:e0:00:5a:8e:f1:58:a0:75:08:83:e6: d3:dc:a8:4b:ba:7b:13:2f:c9:db:33:5f:94:a5:25:fd:1c:8d: b8:02:52:d8:3e:dd:27:c8:ed:d9:5a:23:ae:6d:e1:75:86:d8: ec:7e:df:20:5d:6e:f1:98:9c:5b:26:81:34:26:a8:cc:5a:12: 6f:fe:42:04:fb:f4:7b:8f:f4:17:c8:5f:93:86:f2:e8:ff:d6: b7:da:d8:22:ec:de:97:b3:72:a9:50:3e:66:ec:bf:24:53:a4: 6c:84:8b:83:9a:b2:50:2d:57:41:5f:78:58:1f:b1:d5:fa:6a: bd:e7:28:b0:2b:ae:cd:f8:ac:46:af:3d:1a:04:b5:37:1e:84: 53:15:ec:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwNzAyMTg0OTIxWhcNMjUwNzA5MTg0OTIxWjAYMRYwFAYD VQQDEw02ODY1N2YzMS1lMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgwqARkahOl+wcQKud+onk0fBXFNcuhzUHT6iGxiukYrQBsgxY6Gb1dHj6CK C5wyzoC7HAaAJSro1ykxcxOE2uWUNPMy4tG4I/YfOlSWEw0teI7+aWi+JJ5SKxTE DiccRi3Si3L8BVYwlN9oCPnM+jhOe0WF/y1fw8CP/p9aV2J5CCNory/SCj/z21q/ H8BWyzlxqahEetCCAImjCk1nsVOz2xlwGbS53oE71CFuu+mBssfyjj1ot9XKj3oE MRQmdCdUtjYOPnYXQtZSpDpbHPIKxlZkVK603UMsa3b+edREinue7wrhPLE6Ekxb 1rk+p2Q+1KEGAqiI2pnj/2ikpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOamu04W dahDOm2KgJasXo+S1NZqMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0xomi+gUBGWWLpHECQyDLCEJBiZhoCBhlhY2LNhVnSKq/KoItNBT0 ycvM14eMEQfdbqeyfGkk6zv0HCibYn99CFrma+BztpbfJM3O9ufhIxuh7/1hPq92 YaOpM+Ez2Sq/bOX7hQAAKzlUN3T0cr3evZ1c4ABajvFYoHUIg+bT3KhLunsTL8nb M1+UpSX9HI24AlLYPt0nyO3ZWiOubeF1htjsft8gXW7xmJxbJoE0JqjMWhJv/kIE +/R7j/QXyF+ThvLo/9a32tgi7N6Xs3KpUD5m7L8kU6RshIuDmrJQLVdBX3hYH7HV +mq95yiwK67N+KxGrz0aBLU3HoRTFeyw -----END CERTIFICATE-----Generated at Thu Jul 3 05:08:28 2025 by rpki-client