$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: 9tb0zO3R8k7HGnisbRpcTNHtYp9MoosvCGRyCpDMX/U= Subject key identifier: 9A:35:D6:3E:56:80:E0:15:B9:92:AE:C2:59:CA:4D:82:9E:F0:F5:E0 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 05AA Signing time: Mon 30 Jun 2025 23:33:10 +0000 Manifest this update: Mon 30 Jun 2025 23:33:10 +0000 Manifest next update: Mon 07 Jul 2025 23:33:10 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: HrCr7yRPRV9KKDUHpyVg7tWvr2/ka6sOafXocARrf3E=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Jun 30 23:33:10 2025 GMT Not After : Jul 7 23:33:10 2025 GMT Subject: CN=68631eb6-70d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:af:b3:48:b0:ae:53:bc:fb:64:a2:f2:72: ab:74:18:fb:b3:ac:ac:36:f6:a2:64:1d:32:d9:c8: f5:40:67:1a:58:ea:d1:fb:10:a8:b7:3b:50:5d:11: 1d:0d:d2:9a:b0:f6:4d:34:87:0e:98:14:e3:7c:a1: c9:d8:30:a6:1a:8b:a3:ab:14:89:8a:ab:3f:65:0b: ad:f7:f8:02:cf:a3:ba:b0:ce:d9:c9:f0:7b:4b:2f: d9:17:07:6b:9b:c5:6f:24:78:fa:6a:f0:f0:bc:ed: 71:9f:6b:74:f3:e5:dc:50:ef:cb:fb:82:9b:cd:46: 50:22:cc:1a:ee:a7:4b:14:07:43:91:8f:50:d9:1a: b6:f0:d8:c0:91:a8:cc:7f:80:f5:d5:8b:e1:90:a7: 55:ec:ff:18:38:c7:71:0b:d1:71:9f:b7:82:8f:3e: 60:c8:90:09:4a:05:eb:c8:7a:fc:97:a5:79:66:f0: a4:11:52:c0:18:8f:68:e1:21:dc:09:25:a3:3c:08: 45:d4:b8:c1:ec:8f:9e:69:be:1a:77:ae:6b:00:ca: b1:86:4f:6e:81:33:b8:11:55:6e:a7:22:98:72:cd: 84:51:ea:e6:b1:60:0a:15:8e:74:0c:38:6e:db:06: ff:82:3c:56:28:e7:13:0c:1e:37:8a:33:5a:90:94: b8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:35:D6:3E:56:80:E0:15:B9:92:AE:C2:59:CA:4D:82:9E:F0:F5:E0 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:12:76:9e:63:77:5d:3e:10:a6:11:35:bb:1a:77:5d:d8:68: 8e:a3:e3:a4:9e:f2:eb:da:64:58:ea:6f:96:53:55:05:b8:62: 02:a8:e9:0b:51:6d:a5:2c:40:fd:0a:78:5d:ed:5f:ea:ff:1b: 08:a8:ff:8e:f7:5d:e1:e3:c0:dc:17:8a:28:94:50:ad:ae:bf: b5:8f:11:d3:e6:70:26:bc:df:9d:00:b2:a4:be:2b:3b:ce:50: fa:12:be:45:58:b7:1e:3a:69:91:84:58:af:c6:3c:30:e5:7f: 27:6d:59:e6:e4:50:37:97:e8:74:e8:5f:d1:e6:4a:27:90:0b: c3:24:f1:9c:5e:59:0a:45:ec:5e:d6:ac:d5:40:5e:4e:93:7d: 91:f9:e1:2d:d7:d3:e7:45:8c:75:f6:13:b5:e3:2d:cc:16:f2: 1a:cb:19:3e:f3:20:16:bc:29:c3:ad:14:dc:85:1c:b7:aa:5d: 48:2f:e1:8e:7e:d4:76:97:d9:d8:22:09:55:5a:f8:b9:2f:a2: ae:0d:c8:28:5b:c1:69:b3:a6:f1:4d:0f:eb:20:19:e5:c0:0b: 4e:ce:4d:c7:3b:aa:93:a2:ed:13:dd:a3:a1:a3:34:c5:06:93: 2d:6a:b3:99:1c:b0:5b:83:c5:bb:01:9d:05:fa:c6:ab:dd:a2: 4d:ed:cb:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjUwNjMwMjMzMzEwWhcNMjUwNzA3MjMzMzEwWjAYMRYwFAYD VQQDEw02ODYzMWViNi03MGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aCvs0iwrlO8+2Si8nKrdBj7s6ysNvaiZB0y2cj1QGcaWOrR+xCotztQXREd DdKasPZNNIcOmBTjfKHJ2DCmGoujqxSJiqs/ZQut9/gCz6O6sM7ZyfB7Sy/ZFwdr m8VvJHj6avDwvO1xn2t08+XcUO/L+4KbzUZQIswa7qdLFAdDkY9Q2Rq28NjAkajM f4D11YvhkKdV7P8YOMdxC9Fxn7eCjz5gyJAJSgXryHr8l6V5ZvCkEVLAGI9o4SHc CSWjPAhF1LjB7I+eab4ad65rAMqxhk9ugTO4EVVupyKYcs2EUermsWAKFY50DDhu 2wb/gjxWKOcTDB43ijNakJS4cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo11j5W gOAVuZKuwlnKTYKe8PXgMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADEnaeY3ddPhCmETW7Gndd2GiOo+OknvLr2mRY6m+WU1UFuGICqOkL UW2lLED9Cnhd7V/q/xsIqP+O913h48DcF4oolFCtrr+1jxHT5nAmvN+dALKkvis7 zlD6Er5FWLceOmmRhFivxjww5X8nbVnm5FA3l+h06F/R5konkAvDJPGcXlkKRexe 1qzVQF5Ok32R+eEt19PnRYx19hO14y3MFvIayxk+8yAWvCnDrRTchRy3ql1IL+GO ftR2l9nYIglVWvi5L6KuDcgoW8Fps6bxTQ/rIBnlwAtOzk3HO6qTou0T3aOhozTF BpMtarOZHLBbg8W7AZ0F+sar3aJN7ctS -----END CERTIFICATE-----Generated at Wed Jul 2 01:17:46 2025 by rpki-client