$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: 84r27LfMzvgv+ziwJWHXhiz1QvdFXDNHegLHKrPqSZw= Subject key identifier: 81:63:9B:ED:C1:11:F1:AE:B8:4F:1D:0B:1D:90:3D:1C:94:49:50:BA Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1C0C Signing time: Wed 02 Jul 2025 16:19:48 +0000 Manifest this update: Wed 02 Jul 2025 16:19:48 +0000 Manifest next update: Wed 09 Jul 2025 16:19:48 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: aMWkz1MBG/GMpSqpKYI2zUH8uqQwZ3KLvvWvT2XLVy0=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7204 (0x1c24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Jul 2 16:19:48 2025 GMT Not After : Jul 9 16:19:48 2025 GMT Subject: CN=68655c24-4c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:9b:ca:73:ac:98:c5:b8:f7:38:8e:5a:ff: 3a:e5:3e:73:99:7b:92:fd:c1:07:72:37:d2:1a:a8: 53:72:41:fe:a2:f7:3a:8f:18:08:1f:49:34:e7:bb: fa:c2:a8:3c:89:c8:67:b2:45:d4:96:c2:32:88:cc: c7:01:15:ca:3c:7c:cd:9b:5f:c8:bb:39:5f:d6:93: 30:0a:39:82:ec:e6:b9:50:68:df:9f:a3:2a:3f:b0: 22:7b:43:f2:e6:b1:b1:43:24:c5:3c:65:ef:3f:c2: 39:26:1c:88:f7:44:89:4e:96:9a:5a:3d:9c:ed:62: 71:be:ec:fc:fc:18:12:97:f1:2f:24:f5:57:4f:ea: 3f:dc:9b:d8:ad:17:ed:f7:b6:9f:47:0d:e8:b2:05: d4:90:25:e3:ca:33:98:37:76:1a:8e:9c:fd:78:01: 7b:e7:a8:a9:10:79:b1:a4:fa:a3:10:8b:a4:7a:e7: 5f:0b:ef:54:02:0e:27:c3:0c:01:4c:52:4d:eb:a0: 19:25:9b:b7:57:fc:1e:38:6b:f0:d2:12:5c:eb:03: 06:da:82:a0:75:06:5e:ff:f3:da:d3:c6:29:3c:60: a3:99:43:35:cf:b7:52:07:5c:a3:7b:0e:6c:23:cd: bb:bb:35:ec:21:ee:d4:99:37:94:0e:92:00:53:a1: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:9B:ED:C1:11:F1:AE:B8:4F:1D:0B:1D:90:3D:1C:94:49:50:BA X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d9:ae:db:c9:b6:43:9e:7a:af:43:b4:97:57:58:e1:57:c5: f8:1e:38:e6:26:e8:06:07:ea:96:5d:4e:c4:51:85:8a:f9:63: d6:06:c7:78:56:e2:78:96:48:2d:9b:c7:0c:1f:73:13:51:0f: 06:c8:28:e6:86:77:3b:4a:ec:f0:1f:0b:09:4a:b3:1e:5b:4e: 6f:b9:2e:6c:0d:81:18:f9:70:65:4d:2b:8f:c2:00:4c:5c:44: 42:bb:cf:b4:83:c8:89:6e:54:73:99:76:54:59:b9:50:77:85: fc:6d:50:eb:46:e1:36:82:58:ba:71:a1:9f:e6:86:83:12:b9: d9:39:5d:1c:fb:e3:a1:58:64:ff:a6:4b:16:b1:3a:da:1c:bc: 2c:7f:80:92:5c:5f:a6:1e:89:0e:3a:0a:d9:dd:b8:1e:b7:f5: 4d:67:7c:04:a6:ae:fb:7f:74:7d:34:ac:45:1f:2f:80:17:cc: c4:86:ae:68:aa:62:5d:48:91:2d:a1:10:92:9e:1e:4a:21:59: 5b:8b:8e:44:84:0e:62:49:28:bc:f1:2d:8e:ce:1a:c1:12:1b: 41:98:19:ab:ac:81:97:16:03:d4:87:c9:60:1e:51:87:59:a4: 0a:8c:99:9a:1b:b0:64:22:d0:43:96:6b:20:bc:85:2f:bc:1f: 60:44:61:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwNzAyMTYxOTQ4WhcNMjUwNzA5MTYxOTQ4WjAYMRYwFAYD VQQDEw02ODY1NWMyNC00YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtSbynOsmMW49ziOWv865T5zmXuS/cEHcjfSGqhTckH+ovc6jxgIH0k057v6 wqg8ichnskXUlsIyiMzHARXKPHzNm1/Iuzlf1pMwCjmC7Oa5UGjfn6MqP7Aie0Py 5rGxQyTFPGXvP8I5JhyI90SJTpaaWj2c7WJxvuz8/BgSl/EvJPVXT+o/3JvYrRft 97afRw3osgXUkCXjyjOYN3Yajpz9eAF756ipEHmxpPqjEIukeudfC+9UAg4nwwwB TFJN66AZJZu3V/weOGvw0hJc6wMG2oKgdQZe//Pa08YpPGCjmUM1z7dSB1yjew5s I827uzXsIe7UmTeUDpIAU6GaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFjm+3B EfGuuE8dCx2QPRyUSVC6MB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa2a7bybZDnnqvQ7SXV1jhV8X4HjjmJugGB+qWXU7EUYWK+WPWBsd4 VuJ4lkgtm8cMH3MTUQ8GyCjmhnc7SuzwHwsJSrMeW05vuS5sDYEY+XBlTSuPwgBM XERCu8+0g8iJblRzmXZUWblQd4X8bVDrRuE2gli6caGf5oaDErnZOV0c++OhWGT/ pksWsTraHLwsf4CSXF+mHokOOgrZ3bget/VNZ3wEpq77f3R9NKxFHy+AF8zEhq5o qmJdSJEtoRCSnh5KIVlbi45EhA5iSSi88S2OzhrBEhtBmBmrrIGXFgPUh8lgHlGH WaQKjJmaG7BkItBDlmsgvIUvvB9gRGHp -----END CERTIFICATE-----Generated at Thu Jul 3 00:14:49 2025 by rpki-client