$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: 7o51D0McKgokzeUWxRriz/baYWexaQFwG8Oq7XVp+eY= Subject key identifier: 47:F5:44:2E:5C:31:43:AB:5D:C6:D0:4E:76:D3:63:E9:03:F5:14:8B Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 161A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 1610 Signing time: Mon 30 Jun 2025 16:54:54 +0000 Manifest this update: Mon 30 Jun 2025 16:54:54 +0000 Manifest next update: Mon 07 Jul 2025 16:54:54 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: RtKW/as8ou+bvTPevwGZMHPUYMG4VDKjwvjBuNMhCd0=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5658 (0x161a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: Jun 30 16:54:54 2025 GMT Not After : Jul 7 16:54:54 2025 GMT Subject: CN=6862c15e-880d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:93:80:4c:d8:8e:49:8d:8a:c0:83:a3:11: 63:8c:e7:18:b2:0d:a9:8b:78:49:0b:ff:b9:e1:4e: 06:5f:85:85:3e:eb:ef:0a:e7:fe:1b:0a:18:3a:4d: 47:a9:5a:59:50:17:f4:d0:9c:ac:25:72:9d:bd:52: b9:ef:76:1e:02:0f:0b:e7:9f:68:54:7a:da:71:57: df:b8:a6:48:48:d4:32:22:46:40:00:06:9a:24:bd: 28:ae:2c:66:97:cb:3d:3d:33:00:d3:09:66:0f:70: 52:73:61:a6:6f:ea:c1:d6:7b:93:ea:dc:28:de:3e: d6:d2:99:de:12:16:58:af:8f:53:4b:29:77:e0:b4: 43:d2:fe:51:48:1b:cf:cc:08:48:59:28:87:b6:ee: 24:89:5f:0a:4c:5b:e4:31:2b:3f:03:7b:4f:66:0b: 1f:09:a8:5c:73:26:ff:a4:eb:5e:e2:23:39:74:42: 72:f8:e7:d2:68:5a:1f:77:7b:e4:13:00:52:74:86: 3f:66:1d:8c:28:55:4d:4c:bf:af:e6:56:24:3b:c4: 60:26:eb:f5:b0:4c:8a:4e:1a:c5:51:78:23:4c:9d: 59:aa:ce:52:be:cb:a0:0f:e4:b2:7f:0a:4b:10:ac: a9:f2:0f:7d:0a:cf:02:f1:de:20:a3:2a:04:c5:5f: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F5:44:2E:5C:31:43:AB:5D:C6:D0:4E:76:D3:63:E9:03:F5:14:8B X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:68:da:eb:26:d6:52:46:0e:ac:4f:9f:a0:fc:72:43:c0:54: f8:f7:20:50:58:99:82:1c:65:3a:b8:71:c4:11:1f:aa:2a:b4: 51:6b:48:23:62:54:16:e4:ed:58:b7:39:d3:f2:ab:c9:9f:9e: 7e:0d:3e:88:86:a8:de:8e:dc:ef:5b:77:c3:cf:47:50:f4:0b: f6:c4:64:9d:9d:c9:c9:52:c1:d6:36:00:90:47:3a:b7:97:02: fa:5e:74:e2:42:1f:1f:d9:cf:39:d7:1a:30:2e:70:69:52:6b: 39:80:98:8e:d3:17:02:ee:a0:c2:85:3b:4d:ff:aa:6e:e0:1a: 7c:3f:cd:5a:c2:bb:e5:be:94:8b:71:1b:94:9a:53:60:22:ff: ee:9b:aa:e4:27:2f:43:64:85:9d:f3:49:e0:a2:26:36:30:a1: 12:59:be:fc:ec:26:51:a9:a2:32:2d:18:75:5c:c5:4e:56:58: 5f:ab:8f:08:56:c7:fd:88:3c:53:d8:48:9e:a5:c0:f4:24:81: 80:61:85:35:ed:29:94:75:f2:5f:16:55:2f:75:99:3c:a0:3f: 59:b9:3f:cd:a9:ca:7e:c0:93:cd:30:e3:25:c7:14:db:5b:21: f8:86:b8:59:00:33:d0:4f:db:99:8d:bc:61:d9:f7:a7:4b:1d: 73:45:9c:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUwNjMwMTY1NDU0WhcNMjUwNzA3MTY1NDU0WjAYMRYwFAYD VQQDEw02ODYyYzE1ZS04ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkiTgEzYjkmNisCDoxFjjOcYsg2pi3hJC/+54U4GX4WFPuvvCuf+GwoYOk1H qVpZUBf00JysJXKdvVK573YeAg8L559oVHracVffuKZISNQyIkZAAAaaJL0orixm l8s9PTMA0wlmD3BSc2Gmb+rB1nuT6two3j7W0pneEhZYr49TSyl34LRD0v5RSBvP zAhIWSiHtu4kiV8KTFvkMSs/A3tPZgsfCahccyb/pOte4iM5dEJy+OfSaFofd3vk EwBSdIY/Zh2MKFVNTL+v5lYkO8RgJuv1sEyKThrFUXgjTJ1Zqs5SvsugD+SyfwpL EKyp8g99Cs8C8d4goyoExV8WlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf1RC5c MUOrXcbQTnbTY+kD9RSLMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEaNrrJtZSRg6sT5+g/HJDwFT49yBQWJmCHGU6uHHEER+qKrRRa0gj YlQW5O1YtznT8qvJn55+DT6IhqjejtzvW3fDz0dQ9Av2xGSdncnJUsHWNgCQRzq3 lwL6XnTiQh8f2c851xowLnBpUms5gJiO0xcC7qDChTtN/6pu4Bp8P81awrvlvpSL cRuUmlNgIv/um6rkJy9DZIWd80ngoiY2MKESWb787CZRqaIyLRh1XMVOVlhfq48I Vsf9iDxT2EiepcD0JIGAYYU17SmUdfJfFlUvdZk8oD9ZuT/Nqcp+wJPNMOMlxxTb WyH4hrhZADPQT9uZjbxh2fenSx1zRZzL -----END CERTIFICATE-----Generated at Tue Jul 1 11:03:52 2025 by rpki-client