$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json) Hash identifier: 0TNqToa52ie+FyxmRUbEOLdb0xZygNc2Yb6ihS12SrM= Subject key identifier: 3B:89:1C:A5:E0:93:0F:C2:9B:83:B9:03:CC:C8:9D:BE:A0:BB:2F:4C Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 29E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft Manifest number: 29DD Signing time: Fri 04 Jul 2025 15:47:56 +0000 Manifest this update: Fri 04 Jul 2025 15:47:56 +0000 Manifest next update: Fri 11 Jul 2025 15:47:56 +0000 Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: XlZAslcfP3lW84Q0oV3XzRQkS1UGi5gsyLG6tJO+b8Y=) 2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: v8ikpVeIaeLPw7BPTH8hEvqeozL1b7cNZXyGxnhNLLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10726 (0x29e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Validity Not Before: Jul 4 15:47:56 2025 GMT Not After : Jul 11 15:47:56 2025 GMT Subject: CN=6867f7ac-4109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:a7:40:18:cd:d8:85:91:26:bf:e3:85:44: 85:6c:a1:7b:b1:1f:dc:a4:f0:9b:aa:22:5d:41:f6: ba:3e:c4:91:80:5a:e4:f2:9d:2e:c4:e4:8d:2d:b0: eb:2e:79:77:15:ed:5b:a8:31:29:7d:9a:0c:4c:af: 47:74:d6:ec:56:2e:8c:d5:cb:11:d4:55:53:e2:72: 67:48:f3:8b:0c:4e:45:3e:c3:12:74:dd:7a:fc:b4: b4:e1:fa:c1:a2:93:e1:cb:28:9c:1a:75:72:c8:4f: 0d:1d:b2:1f:05:64:a4:b9:31:71:da:87:04:b3:95: d4:1a:17:bd:6c:01:c1:35:b0:a2:86:ef:c3:a0:8b: b1:09:b6:85:f7:25:1a:a1:4e:af:d3:93:a3:1d:f5: 1c:5f:79:18:0d:61:2e:63:f5:b1:68:d7:37:9c:3e: 1f:8a:c4:ae:d8:30:5f:37:12:40:5f:ae:74:7a:c6: dc:5d:a0:4f:57:26:5a:20:14:df:a1:06:3a:c8:d9: 3e:de:58:2a:34:50:08:6a:76:c4:89:ca:dc:db:ca: cc:21:18:25:4a:4e:7a:4c:c4:82:44:db:d5:6e:0a: 5c:39:15:49:a1:19:d0:c8:3a:84:a8:7b:a9:b0:2e: 6a:0e:01:82:28:f9:e4:7c:49:ba:3d:eb:5c:be:de: 74:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:1C:A5:E0:93:0F:C2:9B:83:B9:03:CC:C8:9D:BE:A0:BB:2F:4C X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:59:c0:44:13:47:1b:b5:d8:fa:18:b4:dc:87:09:75:0c:f1: e6:25:a6:67:88:52:5d:21:8d:f3:ab:3c:ca:3a:47:be:98:d1: ba:b1:b8:8b:af:33:19:62:ed:ac:73:da:fb:5a:0c:fd:11:16: 9e:82:0f:81:87:aa:a2:aa:42:77:40:a8:33:f9:d6:64:2a:f8: e0:d3:04:76:6a:c6:19:4a:14:b2:a9:d6:cb:3f:90:9b:87:78: 70:b7:81:ea:24:6f:95:78:88:a3:e1:7d:fa:24:c8:0f:7e:d5: 0b:ad:1b:ab:fc:cd:84:1a:0f:57:bd:97:5e:f8:6c:61:52:4f: 1d:30:f7:d7:00:21:0a:c7:b1:dd:12:27:ee:01:97:1b:13:ce: cf:5e:2d:bb:3a:1f:a3:f1:65:ce:26:cd:b3:b8:83:a7:4d:e4: 69:ca:b6:65:de:98:fb:25:c1:78:0d:da:46:82:20:12:aa:59: 0b:c6:a0:7b:a4:bb:44:0e:1b:e6:8a:81:e6:d8:f9:03:df:9c: 6b:fa:07:37:58:9d:90:b4:e9:f0:97:8d:47:e5:5b:4c:d0:53: d3:96:8d:80:1a:9d:7f:63:9f:00:8e:1d:51:a1:d1:0c:55:6f: 55:52:e3:f4:97:75:e3:e6:5b:02:bb:b2:52:bc:01:39:c9:86: a6:4e:9c:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjUwNzA0MTU0NzU2WhcNMjUwNzExMTU0NzU2WjAYMRYwFAYD VQQDEw02ODY3ZjdhYy00MTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/WnQBjN2IWRJr/jhUSFbKF7sR/cpPCbqiJdQfa6PsSRgFrk8p0uxOSNLbDr Lnl3Fe1bqDEpfZoMTK9HdNbsVi6M1csR1FVT4nJnSPOLDE5FPsMSdN16/LS04frB opPhyyicGnVyyE8NHbIfBWSkuTFx2ocEs5XUGhe9bAHBNbCihu/DoIuxCbaF9yUa oU6v05OjHfUcX3kYDWEuY/WxaNc3nD4fisSu2DBfNxJAX650esbcXaBPVyZaIBTf oQY6yNk+3lgqNFAIanbEicrc28rMIRglSk56TMSCRNvVbgpcORVJoRnQyDqEqHup sC5qDgGCKPnkfEm6Petcvt50cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuJHKXg kw/Cm4O5A8zInb6guy9MMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkEzOS9BNjU5NDlCMjNCQzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFp QTgyUlhOY2xlMTBkbUg2eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARWcBEE0cbtdj6GLTchwl1DPHmJaZniFJdIY3zqzzKOke+mNG6sbiL rzMZYu2sc9r7Wgz9ERaegg+Bh6qiqkJ3QKgz+dZkKvjg0wR2asYZShSyqdbLP5Cb h3hwt4HqJG+VeIij4X36JMgPftULrRur/M2EGg9XvZde+GxhUk8dMPfXACEKx7Hd EifuAZcbE87PXi27Oh+j8WXOJs2zuIOnTeRpyrZl3pj7JcF4DdpGgiASqlkLxqB7 pLtEDhvmioHm2PkD35xr+gc3WJ2QtOnwl41H5VtM0FPTlo2AGp1/Y58Ajh1RodEM VW9VUuP0l3Xj5lsCu7JSvAE5yYamTpxN -----END CERTIFICATE-----Generated at Sat Jul 5 08:07:54 2025 by rpki-client