$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: IYZIFxHusNmpP+fV10mul5qhaNlvCKxj6j8kJUzdErA= Subject key identifier: 90:36:E4:BC:EC:2A:D1:C6:EF:24:7A:DF:D8:BD:F9:3B:6C:E0:61:DD Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 014C Signing time: Tue 01 Jul 2025 04:48:29 +0000 Manifest this update: Tue 01 Jul 2025 04:48:29 +0000 Manifest next update: Tue 08 Jul 2025 04:48:29 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: 8MG/aoIHVhtndwHKJoHzpBWTstz7qdlcfpLqXK0XYMw=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Jul 1 04:48:29 2025 GMT Not After : Jul 8 04:48:29 2025 GMT Subject: CN=6863689d-7266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:48:a3:48:b2:ea:7e:a5:4c:57:63:90:2b: 49:6c:96:94:1b:19:b3:c3:51:7c:13:80:bc:94:f2: 7b:9f:12:c9:a7:43:22:5f:0f:5f:cf:6e:ca:62:3e: b0:89:2e:1e:cb:8e:1e:99:e9:c6:1c:51:8c:b0:8d: 1b:5e:aa:1e:fc:8b:24:65:8f:03:e4:11:8b:ca:60: be:f0:74:3c:c7:e3:22:2c:96:99:32:6e:f5:6b:3b: 27:47:37:9f:d2:d8:03:de:d2:e8:08:29:56:76:f2: 71:4d:d1:0c:ec:53:3c:67:b1:04:07:1d:5d:23:cf: 2b:18:08:5e:49:a1:cc:92:6c:3b:86:26:51:ae:2b: 0b:28:cd:9a:35:ab:7c:35:31:5f:49:a4:29:5a:d1: f3:3b:b4:88:49:39:74:68:59:fe:c0:9f:00:24:df: 72:49:22:1e:6f:9e:76:13:c4:d4:4b:fb:58:f2:fc: 0b:bd:3e:c0:92:a8:dc:06:43:eb:b6:c9:87:88:0b: cf:ec:3e:0d:50:4c:27:c8:c0:7c:45:2d:cb:7e:55: 64:eb:9d:fe:7e:57:22:49:50:9e:57:a1:fd:dd:0f: 0c:66:2e:3c:24:b4:99:53:ae:63:af:73:19:3b:f8: 55:15:de:c2:75:ae:af:9a:4c:da:8b:c1:3c:3a:36: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:36:E4:BC:EC:2A:D1:C6:EF:24:7A:DF:D8:BD:F9:3B:6C:E0:61:DD X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:be:c2:0d:c6:18:5a:6b:f2:d9:02:12:7c:c5:f4:f4:f3: c6:1b:86:a7:65:b1:47:5f:4f:51:7d:a0:91:a6:92:15:2f:e7: df:48:6b:43:2e:03:6a:9a:49:85:ca:be:80:6f:24:a7:4b:e7: ba:fe:08:c2:0b:53:af:4f:9e:1a:71:4a:dd:20:a4:13:7b:bc: c4:5a:f6:c6:c9:45:71:de:f6:51:d2:b5:8d:0e:42:43:f5:8b: 59:67:e0:54:4c:60:fc:b3:d0:a4:bb:ce:65:cb:e5:70:ae:b3: fe:e1:ca:87:a6:9f:ef:2f:83:d1:62:c8:57:57:2e:c8:80:3c: 0c:fe:57:4e:0a:ff:b0:ca:98:7b:06:4d:89:b4:ff:c8:3f:bd: 51:03:ec:ca:4d:8a:2a:c1:f8:d3:bd:a6:b6:72:9a:98:18:15: a1:9f:50:b5:73:89:72:ca:24:36:4e:49:36:f0:7e:c4:1b:a0: 95:e4:c2:d1:b7:f6:e4:58:f5:fe:9a:b7:fe:43:c8:66:c1:2a: 67:1e:14:93:dc:6e:a0:68:31:98:c3:54:e1:36:dd:2c:c9:ed: 4d:cf:51:43:9a:b5:28:5b:cc:5f:bf:cb:30:1f:cd:26:b9:18: 31:ed:d6:84:0b:fd:57:4a:05:f6:57:4a:a1:5f:42:42:44:d4: d8:01:1e:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUwNzAxMDQ0ODI5WhcNMjUwNzA4MDQ0ODI5WjAYMRYwFAYD VQQDEw02ODYzNjg5ZC03MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpdIo0iy6n6lTFdjkCtJbJaUGxmzw1F8E4C8lPJ7nxLJp0MiXw9fz27KYj6w iS4ey44emenGHFGMsI0bXqoe/IskZY8D5BGLymC+8HQ8x+MiLJaZMm71azsnRzef 0tgD3tLoCClWdvJxTdEM7FM8Z7EEBx1dI88rGAheSaHMkmw7hiZRrisLKM2aNat8 NTFfSaQpWtHzO7SISTl0aFn+wJ8AJN9ySSIeb552E8TUS/tY8vwLvT7AkqjcBkPr tsmHiAvP7D4NUEwnyMB8RS3LflVk653+flciSVCeV6H93Q8MZi48JLSZU65jr3MZ O/hVFd7Cda6vmkzai8E8OjZ8awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJA25Lzs KtHG7yR639i9+Tts4GHdMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZD77CDcYYWmvy2QISfMX09PPGG4anZbFHX09RfaCRppIVL+ffSGtD LgNqmkmFyr6AbySnS+e6/gjCC1OvT54acUrdIKQTe7zEWvbGyUVx3vZR0rWNDkJD 9YtZZ+BUTGD8s9Cku85ly+VwrrP+4cqHpp/vL4PRYshXVy7IgDwM/ldOCv+wyph7 Bk2JtP/IP71RA+zKTYoqwfjTvaa2cpqYGBWhn1C1c4lyyiQ2Tkk28H7EG6CV5MLR t/bkWPX+mrf+Q8hmwSpnHhST3G6gaDGYw1ThNt0sye1Nz1FDmrUoW8xfv8swH80m uRgx7daEC/1XSgX2V0qhX0JCRNTYAR5R -----END CERTIFICATE-----Generated at Thu Jul 3 02:17:52 2025 by rpki-client