$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json) Hash identifier: dJZk2YzCjNkKEgJ2jQjiVme/haQ6C20RL0KO87u9L7U= Subject key identifier: 31:3F:A4:86:B5:65:63:F9:E3:25:50:FD:FF:9C:27:8A:A6:D7:3C:BD Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft Manifest number: 0600 Signing time: Wed 02 Jul 2025 19:07:49 +0000 Manifest this update: Wed 02 Jul 2025 19:07:48 +0000 Manifest next update: Wed 09 Jul 2025 19:07:48 +0000 Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: mTRyt9Xe7tJFquPD6wtt3WIbYJRpz4Wg9zJzF+sH3dY=) 2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: w1O1ZsevC2HzFSEj/1IPY4lUEna5oDbCvbrv+EoKv3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Validity Not Before: Jul 2 19:07:48 2025 GMT Not After : Jul 9 19:07:48 2025 GMT Subject: CN=68658384-57a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:cf:d4:85:e0:e7:53:d6:1e:63:cf:cb:50: d7:a0:16:b9:89:7a:ff:4e:e5:25:aa:9c:28:c2:94: 1f:20:cc:8c:67:b8:72:c4:6f:3b:2e:2c:72:a2:e4: 5d:03:0a:05:a9:66:0f:80:c1:90:5f:ea:22:7e:5c: 9b:9b:72:42:00:2e:59:6c:bc:06:41:22:34:87:d9: 9b:ad:0a:ec:5a:33:a1:a5:81:5e:1c:99:d2:28:10: 30:e2:10:e8:0a:99:b5:66:5f:89:74:1c:ef:c3:a5: a8:1b:d9:e9:3d:9b:64:6e:09:f6:dc:48:40:e4:15: 35:83:06:cd:84:99:a3:a0:ff:82:74:6a:3e:a6:f6: 3a:7b:3f:19:08:e8:6e:69:ea:3c:9c:41:21:73:22: 79:b9:96:d7:26:01:7c:e1:c9:c9:dd:18:37:63:0f: 08:d8:b7:44:70:ec:f2:38:e6:2e:d3:42:66:3a:f5: c1:3d:54:8f:02:66:12:10:f7:8b:4a:fe:37:63:70: 0e:a5:d1:0b:a8:1d:b4:2a:c6:25:d1:7d:f9:3d:e5: 48:a0:a1:54:e9:4a:57:91:ba:19:c8:70:06:35:15: 8e:ef:51:01:43:bf:71:05:8c:47:33:9d:4b:e1:2d: ea:64:ca:2e:65:58:d3:b8:00:70:7f:86:4c:07:fc: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3F:A4:86:B5:65:63:F9:E3:25:50:FD:FF:9C:27:8A:A6:D7:3C:BD X509v3 Authority Key Identifier: keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d1:cd:7b:36:b3:e3:51:68:21:8d:07:e1:36:d8:6c:98:6c: ea:28:51:0d:f3:ad:36:00:4d:53:c8:61:be:c8:f1:40:f8:83: 13:6b:b8:f5:b0:c9:34:99:14:11:72:a7:e0:2d:e0:7d:ca:48: fe:40:e7:6f:45:1f:cd:17:a3:92:9c:b7:dd:e4:cd:50:53:bd: 4e:79:ff:41:9b:5a:a2:90:df:18:52:c0:df:55:5a:a5:1b:e1: 34:04:4b:ef:68:b5:3d:aa:6a:da:34:24:b6:f9:0e:62:7a:14: a3:1d:45:4e:1e:a2:d0:b3:5e:a4:da:f6:64:b8:5b:5e:85:27: 72:78:2b:7a:5e:65:b4:93:fe:7a:0e:c0:51:2f:47:55:b4:09: 89:8a:47:cd:9d:f4:29:d4:2a:ce:33:b7:4f:ab:e9:75:ad:65: 22:66:c3:50:11:96:36:18:18:7b:b5:d1:f1:b1:1b:1c:8b:7b: 34:83:08:ae:f2:8c:68:8a:04:df:a8:fe:a5:a9:3f:7c:53:19: bd:30:44:44:3c:99:6f:71:df:40:91:9c:5d:1d:8a:48:f5:e3: a1:bf:13:59:41:92:3b:16:8e:ba:f9:e3:93:88:c4:07:e6:d4: 90:f7:a5:76:e5:a6:87:fd:b2:a3:f9:ac:d1:f5:4c:1b:fc:f8: bc:c9:36:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE QThFNkQyNTYwHhcNMjUwNzAyMTkwNzQ4WhcNMjUwNzA5MTkwNzQ4WjAYMRYwFAYD VQQDEw02ODY1ODM4NC01N2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuErP1IXg51PWHmPPy1DXoBa5iXr/TuUlqpwowpQfIMyMZ7hyxG87LixyouRd AwoFqWYPgMGQX+oiflybm3JCAC5ZbLwGQSI0h9mbrQrsWjOhpYFeHJnSKBAw4hDo Cpm1Zl+JdBzvw6WoG9npPZtkbgn23EhA5BU1gwbNhJmjoP+CdGo+pvY6ez8ZCOhu aeo8nEEhcyJ5uZbXJgF84cnJ3Rg3Yw8I2LdEcOzyOOYu00JmOvXBPVSPAmYSEPeL Sv43Y3AOpdELqB20KsYl0X35PeVIoKFU6UpXkboZyHAGNRWO71EBQ79xBYxHM51L 4S3qZMouZVjTuABwf4ZMB/ycKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE/pIa1 ZWP54yVQ/f+cJ4qm1zy9MB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS84MzU1OUM3Q0IyMTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83 QTNGWDZ6bjViYnZham0wbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY0c17NrPjUWghjQfhNthsmGzqKFEN8602AE1TyGG+yPFA+IMTa7j1 sMk0mRQRcqfgLeB9ykj+QOdvRR/NF6OSnLfd5M1QU71Oef9Bm1qikN8YUsDfVVql G+E0BEvvaLU9qmraNCS2+Q5iehSjHUVOHqLQs16k2vZkuFtehSdyeCt6XmW0k/56 DsBRL0dVtAmJikfNnfQp1CrOM7dPq+l1rWUiZsNQEZY2GBh7tdHxsRsci3s0gwiu 8oxoigTfqP6lqT98Uxm9MEREPJlvcd9AkZxdHYpI9eOhvxNZQZI7Fo66+eOTiMQH 5tSQ96V25aaH/bKj+azR9Uwb/Pi8yTZZ -----END CERTIFICATE-----Generated at Thu Jul 3 23:03:53 2025 by rpki-client