$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json) Hash identifier: H21RSDSZDJANBO01J1nNY0onq3ICaD1KN0wZXBVi8eg= Subject key identifier: FB:E5:D4:88:FB:97:59:23:A9:64:3C:73:A8:6C:1E:03:5D:D9:6A:DB Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Certificate serial: 1988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft Manifest number: 1958 Signing time: Wed 02 Jul 2025 16:32:47 +0000 Manifest this update: Wed 02 Jul 2025 16:32:46 +0000 Manifest next update: Wed 09 Jul 2025 16:32:46 +0000 Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: uK5ziPwjgtgeLLb6UFYEv4Bz6kwxUk2AP5bmhE5b5Zk=) 2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=) 3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 3B1RpXRPYovGqaozvCJn8HvxK4358NVTnDJF2IMtKPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6536 (0x1988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Validity Not Before: Jul 2 16:32:46 2025 GMT Not After : Jul 9 16:32:46 2025 GMT Subject: CN=68655f2f-cb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:a5:39:cc:cc:cf:ad:be:13:8b:63:5b:88: 7f:3f:bd:fd:53:b1:c7:c1:cd:1a:ca:07:22:5f:b1: 32:42:46:06:ce:9f:99:06:49:11:e3:2c:49:a2:e0: e4:5b:41:85:c1:97:18:8e:bd:60:bd:ba:ac:47:bc: ae:a8:d1:01:2b:06:ce:a3:78:f9:95:36:96:8f:71: 41:ab:bb:f2:fb:31:53:77:0a:f2:fd:63:68:63:d3: 00:f6:e7:88:76:77:53:69:0b:49:05:1d:5b:39:1a: e7:17:42:53:d6:6d:a2:36:6e:7f:55:39:cb:0f:1e: 71:72:1e:6b:82:08:5e:18:7d:d3:f2:69:4c:59:d9: e4:74:61:f8:19:14:41:b9:92:49:ca:08:42:be:b7: b6:a6:0d:75:95:d6:f9:48:cd:fc:68:24:2f:c9:16: d8:52:a7:98:20:6a:b7:af:b0:52:d5:67:66:48:d2: 3c:ae:c8:eb:7a:72:d0:90:23:6e:52:49:2e:23:40: 53:d9:6a:0f:1c:3c:e8:46:7e:7c:41:0c:b3:ef:ce: 1b:11:e1:3f:0a:e5:29:3d:80:38:4b:a0:e1:6c:48: 04:50:63:f7:c2:0f:71:9e:3b:1c:9f:cf:69:da:cd: bc:dc:de:91:d9:65:cb:58:0f:7a:2b:96:c6:af:95: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E5:D4:88:FB:97:59:23:A9:64:3C:73:A8:6C:1E:03:5D:D9:6A:DB X509v3 Authority Key Identifier: keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4f:4e:89:4b:84:63:73:44:f4:07:1f:38:66:f9:5e:8d:bd: 95:fb:9b:db:6b:4a:3d:bb:35:77:fa:87:60:07:85:03:4c:d4: d4:5e:fe:6e:a7:53:29:33:de:b7:40:e4:43:29:53:ab:82:82: 80:85:1c:c2:e7:3f:16:09:4d:50:81:71:7e:9c:76:35:12:ec: 14:3a:44:9c:eb:b1:f8:86:35:95:3a:2e:4c:f9:a1:f2:79:96: c6:c0:b7:0d:ae:eb:5f:20:d7:43:7d:1f:84:36:8b:cc:2c:10: 7e:89:ff:fe:a1:f3:be:9d:9f:0b:60:88:d5:af:c5:5f:ab:eb: a2:34:e9:6e:f3:52:fc:99:dd:b9:5e:a3:e8:3f:77:ca:da:0e: 4b:e2:45:2b:a2:3d:b1:71:1b:40:cb:e4:6f:b5:88:1e:30:be: 5f:06:05:f0:52:27:9a:94:dc:b4:a6:2f:3a:55:be:95:81:6e: 43:c4:a7:88:bb:51:43:90:ff:79:cb:2e:d0:d7:bf:5a:bb:c1: a0:82:cb:ef:01:c3:36:f3:ff:f7:fe:5e:a4:30:7f:4a:29:a3: f9:6d:0b:76:4a:15:b4:92:5a:61:26:a3:e7:5f:26:92:b2:8f: 52:d9:3d:84:3f:0b:73:82:42:8f:ee:8b:12:a5:c1:8a:3b:c1: 14:c2:ea:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU4OUExMTAvBgNVBAUTKDI2Mjc5MENEOTE0Q0VBOEVDMTFFMjU4NjlCODk4REUw MDAxRkJEMDkwHhcNMjUwNzAyMTYzMjQ2WhcNMjUwNzA5MTYzMjQ2WjAYMRYwFAYD VQQDEw02ODY1NWYyZi1jYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxKlOczMz62+E4tjW4h/P739U7HHwc0aygciX7EyQkYGzp+ZBkkR4yxJouDk W0GFwZcYjr1gvbqsR7yuqNEBKwbOo3j5lTaWj3FBq7vy+zFTdwry/WNoY9MA9ueI dndTaQtJBR1bORrnF0JT1m2iNm5/VTnLDx5xch5rggheGH3T8mlMWdnkdGH4GRRB uZJJyghCvre2pg11ldb5SM38aCQvyRbYUqeYIGq3r7BS1WdmSNI8rsjrenLQkCNu UkkuI0BT2WoPHDzoRn58QQyz784bEeE/CuUpPYA4S6DhbEgEUGP3wg9xnjscn89p 2s283N6R2WXLWA96K5bGr5UWMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvl1Ij7 l1kjqWQ8c6hsHgNd2WrbMB8GA1UdIwQYMBaAFCYnkM2RTOqOwR4lhpuJjeAAH70J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg5QS9BQ0Q2RkI4QTdE OTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZvN0JIaVdHbTRtTjRBQWZ2 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppZVF6WkZNNm83QkhpV0dtNG1ONEFBZnZRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTg5QS9BQ0Q2RkI4QTdEOTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZv N0JIaVdHbTRtTjRBQWZ2UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPT06JS4Rjc0T0Bx84Zvlejb2V+5vba0o9uzV3+odgB4UDTNTUXv5u p1MpM963QORDKVOrgoKAhRzC5z8WCU1QgXF+nHY1EuwUOkSc67H4hjWVOi5M+aHy eZbGwLcNrutfINdDfR+ENovMLBB+if/+ofO+nZ8LYIjVr8Vfq+uiNOlu81L8md25 XqPoP3fK2g5L4kUroj2xcRtAy+RvtYgeML5fBgXwUiealNy0pi86Vb6VgW5DxKeI u1FDkP95yy7Q179au8GggsvvAcM28//3/l6kMH9KKaP5bQt2ShW0klphJqPnXyaS so9S2T2EPwtzgkKP7osSpcGKO8EUwuoF -----END CERTIFICATE-----Generated at Wed Jul 2 23:37:53 2025 by rpki-client