$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft File: jDgUcj_HVempuhvDNWZKUZu8HO4.mft (raw, json) Hash identifier: OsHC/X9vRqESOszZASmz+MdjByWGNHIVBfNPklTklqk= Subject key identifier: 13:D4:D4:06:73:87:26:36:53:10:B1:AB:BD:69:A0:84:4F:7C:86:15 Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE Certificate issuer: /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft Manifest number: 04A5 Signing time: Thu 03 Jul 2025 00:18:14 +0000 Manifest this update: Thu 03 Jul 2025 00:18:13 +0000 Manifest next update: Thu 10 Jul 2025 00:18:13 +0000 Files and hashes: 1: jDgUcj_HVempuhvDNWZKUZu8HO4.crl (hash: WoBG8Se+64pLP3R8g6fDo8KrshLXvi/yeY92dFZUIdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C40D, serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Validity Not Before: Jul 3 00:18:13 2025 GMT Not After : Jul 10 00:18:13 2025 GMT Subject: CN=6865cc45-26b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:09:a7:78:ac:cd:c9:eb:44:f6:ac:62:80: 96:c0:47:82:05:9e:74:b7:64:c3:07:26:b2:17:7b: 6a:0b:92:b4:71:c1:a0:5e:2c:93:18:89:55:aa:ad: b2:2f:f1:e7:15:a4:5b:7e:fd:b1:18:93:68:40:d3: 2c:c4:6a:e3:65:a5:51:79:76:9a:a9:9c:0b:46:69: 8b:75:79:f4:02:72:c4:41:bf:25:bf:cd:9f:2b:2a: 9f:65:c4:36:0a:50:84:43:a5:2c:44:9f:b8:b3:3c: 06:0f:f9:50:b2:ba:ef:e4:15:87:a2:76:7b:f1:40: 62:51:34:ed:34:7b:37:90:8e:7c:92:cf:21:e8:73: 01:79:81:3b:6b:cb:50:fc:e3:fe:57:16:49:3a:fc: 6e:16:f8:5f:90:ac:80:92:a0:c8:17:7f:06:49:13: ec:99:6d:5a:7e:79:6e:a8:95:60:5d:60:56:2c:57: 7b:8d:4e:9b:3b:16:b8:23:f4:1c:60:54:a8:f2:56: 26:ee:42:5b:98:fb:82:7d:8a:6e:e3:fa:8a:1e:55: 1d:5c:59:db:f2:3f:a1:cf:12:8e:57:72:42:5a:ea: cc:c5:2b:29:7b:e6:23:db:c1:ab:2e:30:7b:c9:14: 8d:bc:87:fe:97:36:41:2d:0c:3a:15:25:8f:b5:3d: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:D4:06:73:87:26:36:53:10:B1:AB:BD:69:A0:84:4F:7C:86:15 X509v3 Authority Key Identifier: keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c2:e6:6c:2a:66:20:55:96:3f:60:ae:ca:67:65:3d:cc:6b: 32:08:85:ba:81:2d:b1:20:fa:3b:47:a3:5a:b0:43:af:ed:d7: 5e:b1:d7:d6:e0:d6:dd:72:83:2e:d4:a3:c3:66:6f:b8:59:43: f7:dd:d8:81:49:9e:30:d2:96:fc:af:f5:da:4f:2a:89:ba:76: df:9a:51:b1:f5:b8:58:8d:c0:ce:8e:4d:66:8f:15:f4:fe:b6: 5c:ef:ac:20:c2:cb:c6:81:6a:9e:42:db:55:7f:fa:50:56:33: d0:c1:ae:3c:e5:c9:e1:3b:e6:ad:10:b0:e4:af:f3:ca:bd:a4: f2:7e:00:d2:0f:08:27:4e:5d:b3:25:0a:9c:b1:52:f9:2c:c3: 4d:d7:86:1c:70:65:20:3a:24:eb:62:73:ea:99:d5:b7:20:25: a4:5d:5d:cb:17:19:ba:e5:60:5b:50:9b:1e:1a:9f:88:10:16: 3b:d9:74:c8:f3:7a:96:cf:27:38:9d:20:35:b2:94:cb:30:00: 36:44:ba:5d:90:4a:d2:86:73:70:9b:11:b0:42:ec:d3:2a:78: 1a:07:fc:67:61:a3:91:1d:0b:55:a0:30:f5:09:bf:17:b4:b4: 6f:47:40:e7:ed:1f:8d:1a:b7:52:34:42:3d:05:46:b1:0f:bf: 8d:fb:5c:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MEQxMTAvBgNVBAUTKDhDMzgxNDcyM0ZDNzU1RTlBOUJBMUJDMzM1NjY0QTUx OUJCQzFDRUUwHhcNMjUwNzAzMDAxODEzWhcNMjUwNzEwMDAxODEzWjAYMRYwFAYD VQQDEw02ODY1Y2M0NS0yNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPUJp3iszcnrRPasYoCWwEeCBZ50t2TDByayF3tqC5K0ccGgXiyTGIlVqq2y L/HnFaRbfv2xGJNoQNMsxGrjZaVReXaaqZwLRmmLdXn0AnLEQb8lv82fKyqfZcQ2 ClCEQ6UsRJ+4szwGD/lQsrrv5BWHonZ78UBiUTTtNHs3kI58ks8h6HMBeYE7a8tQ /OP+VxZJOvxuFvhfkKyAkqDIF38GSRPsmW1afnluqJVgXWBWLFd7jU6bOxa4I/Qc YFSo8lYm7kJbmPuCfYpu4/qKHlUdXFnb8j+hzxKOV3JCWurMxSspe+Yj28GrLjB7 yRSNvIf+lzZBLQw6FSWPtT2F0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPU1AZz hyY2UxCxq71poIRPfIYVMB8GA1UdIwQYMBaAFIw4FHI/x1XpqbobwzVmSlGbvBzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQwRC81MEY3NzVBNjNC Q0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZlbXB1aHZETldaS1VadThI TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEZ1Vjal9IVmVtcHVodkROV1pLVVp1OEhPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQwRC81MEY3NzVBNjNCQ0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZl bXB1aHZETldaS1VadThITzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8wuZsKmYgVZY/YK7KZ2U9zGsyCIW6gS2xIPo7R6NasEOv7ddesdfW 4NbdcoMu1KPDZm+4WUP33diBSZ4w0pb8r/XaTyqJunbfmlGx9bhYjcDOjk1mjxX0 /rZc76wgwsvGgWqeQttVf/pQVjPQwa485cnhO+atELDkr/PKvaTyfgDSDwgnTl2z JQqcsVL5LMNN14YccGUgOiTrYnPqmdW3ICWkXV3LFxm65WBbUJseGp+IEBY72XTI 83qWzyc4nSA1spTLMAA2RLpdkErShnNwmxGwQuzTKngaB/xnYaORHQtVoDD1Cb8X tLRvR0Dn7R+NGrdSNEI9BUaxD7+N+1xK -----END CERTIFICATE-----Generated at Fri Jul 4 04:01:56 2025 by rpki-client