$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft File: RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json) Hash identifier: mKW+Yn2GnxRDoBb4MCvXyP3tv5p8VNubIatcXASjfzA= Subject key identifier: FC:BE:63:42:6C:CE:BA:61:07:AB:15:4A:A9:E1:D5:EA:87:A5:C2:FF Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF Certificate issuer: /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft Manifest number: 033C Signing time: Thu 03 Jul 2025 01:27:07 +0000 Manifest this update: Thu 03 Jul 2025 01:27:06 +0000 Manifest next update: Thu 10 Jul 2025 01:27:06 +0000 Files and hashes: 1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: ybRgLWTEzMIQ8Ke883UKQrq5SypDOfERyMH715jmxzg=) 2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: bs5+XFoKF15//AFAKd1GGD7hmAgwTgeLUC9v0U9PGwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF Validity Not Before: Jul 3 01:27:06 2025 GMT Not After : Jul 10 01:27:06 2025 GMT Subject: CN=6865dc6b-842f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:5d:26:be:f5:fc:a4:b4:11:9e:9b:b3:8b: d4:34:d3:c3:91:96:5f:ed:da:08:0b:4f:9b:6d:c7: 6e:57:20:fd:d3:bc:39:a0:40:dc:32:d3:09:58:d7: dd:9e:bb:db:bb:f9:80:33:3f:c4:03:ca:4f:f5:c8: de:12:3f:cd:4b:d9:90:e9:8c:78:b7:de:d2:77:07: 69:e9:62:5a:07:8a:78:78:66:51:ba:20:6d:ec:7d: 0e:28:6d:23:ea:75:27:5c:81:2d:92:61:07:08:e5: 0b:f3:9a:0c:ab:92:a8:b4:58:d2:af:16:c0:36:8f: 3d:49:02:21:e1:09:d2:56:3b:33:d7:d9:f7:77:05: 89:b0:01:fd:03:6d:6b:b7:65:11:c1:15:a4:52:4f: bb:94:86:58:22:8b:f2:20:06:c0:04:1a:ad:76:18: e7:13:e6:ed:4f:59:74:7c:05:65:1a:cf:c1:3c:bb: 1f:36:f4:16:f4:b5:45:33:8d:26:18:e2:c3:5e:6b: dc:fe:53:7f:0a:4d:f1:c6:fe:9b:2a:c2:35:6a:14: 1d:08:49:04:88:c5:71:66:3f:50:4b:ff:c6:98:e8: d7:94:1a:55:ad:25:b4:9a:46:4b:af:14:3d:26:2b: a2:2d:10:ef:17:b5:ad:39:77:dd:2f:39:1f:49:e7: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:63:42:6C:CE:BA:61:07:AB:15:4A:A9:E1:D5:EA:87:A5:C2:FF X509v3 Authority Key Identifier: keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2f:89:67:db:3c:b2:4f:50:1a:fa:cc:4f:2c:38:05:3a:0f: d2:ab:83:cb:ee:7b:bb:4d:50:54:ad:2a:d7:9b:c6:7f:7c:e9: 4a:b1:6f:f7:37:94:4e:76:bf:24:36:53:11:f4:f3:50:e8:96: c7:75:bc:78:93:71:6c:f2:f3:33:68:c3:8e:72:da:3d:07:37: 37:c0:76:8a:6b:52:20:db:26:6a:f5:9d:1f:0a:ee:c9:e3:22: bd:a1:20:2f:9b:6e:8a:fa:5e:a8:45:2f:02:77:5b:23:c1:a1: 3a:04:4d:65:0f:cc:c6:81:11:fc:53:3f:d0:c0:0c:c8:37:70: b6:18:f1:16:07:4d:10:8b:e5:96:a8:50:a0:4e:b7:26:bb:27: d3:b2:01:72:48:8d:79:99:1e:80:eb:f5:65:eb:21:eb:a6:9c: 14:dc:36:1b:60:87:65:ce:06:f8:c5:96:af:6a:90:90:69:a0: fd:00:c2:4b:38:3f:45:31:67:ae:b5:e0:d3:8c:8e:eb:c1:54: 4c:9a:c4:db:9e:d9:56:e0:23:b9:b9:84:f9:4f:32:2a:22:3a: 44:2f:fb:ff:12:57:3a:3f:2d:23:69:29:fb:e3:d6:b0:3c:fb: 35:3d:9d:3a:f6:de:d8:69:44:bc:92:96:00:4e:d9:c5:7a:3a: 34:8b:48:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzExMTAvBgNVBAUTKDQ2MzlEMjkwOTg2RjRGMDA1NEZEQzA1OTAxNDQ0MTYy MUQzQUJCRkYwHhcNMjUwNzAzMDEyNzA2WhcNMjUwNzEwMDEyNzA2WjAYMRYwFAYD VQQDEw02ODY1ZGM2Yi04NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZddJr71/KS0EZ6bs4vUNNPDkZZf7doIC0+bbcduVyD907w5oEDcMtMJWNfd nrvbu/mAMz/EA8pP9cjeEj/NS9mQ6Yx4t97Sdwdp6WJaB4p4eGZRuiBt7H0OKG0j 6nUnXIEtkmEHCOUL85oMq5KotFjSrxbANo89SQIh4QnSVjsz19n3dwWJsAH9A21r t2URwRWkUk+7lIZYIovyIAbABBqtdhjnE+btT1l0fAVlGs/BPLsfNvQW9LVFM40m GOLDXmvc/lN/Ck3xxv6bKsI1ahQdCEkEiMVxZj9QS//GmOjXlBpVrSW0mkZLrxQ9 JiuiLRDvF7WtOXfdLzkfSeePLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy+Y0Js zrphB6sVSqnh1eqHpcL/MB8GA1UdIwQYMBaAFEY50pCYb08AVP3AWQFEQWIdOrv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3MS9GNTQwN0QxQ0NB QjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3QlVfY0JaQVVSQlloMDZ1 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqblNrSmh2VHdCVV9jQlpBVVJCWWgwNnVfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3MS9GNTQwN0QxQ0NBQjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3 QlVfY0JaQVVSQlloMDZ1XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtL4ln2zyyT1Aa+sxPLDgFOg/Sq4PL7nu7TVBUrSrXm8Z/fOlKsW/3 N5ROdr8kNlMR9PNQ6JbHdbx4k3Fs8vMzaMOOcto9Bzc3wHaKa1Ig2yZq9Z0fCu7J 4yK9oSAvm26K+l6oRS8Cd1sjwaE6BE1lD8zGgRH8Uz/QwAzIN3C2GPEWB00Qi+WW qFCgTrcmuyfTsgFySI15mR6A6/Vl6yHrppwU3DYbYIdlzgb4xZavapCQaaD9AMJL OD9FMWeuteDTjI7rwVRMmsTbntlW4CO5uYT5TzIqIjpEL/v/Elc6Py0jaSn749aw PPs1PZ069t7YaUS8kpYATtnFejo0i0hC -----END CERTIFICATE-----Generated at Thu Jul 3 10:15:05 2025 by rpki-client