$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json) Hash identifier: KVwBtKgXykwFsjMA6tuAlV2d4Q+aFAUAD9zH/lxkgL0= Subject key identifier: B2:73:22:82:58:58:40:08:9A:83:77:C6:96:53:B9:B4:70:3C:C9:21 Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Certificate serial: 20D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft Manifest number: 20CE Signing time: Fri 04 Jul 2025 16:10:54 +0000 Manifest this update: Fri 04 Jul 2025 16:10:54 +0000 Manifest next update: Fri 11 Jul 2025 16:10:54 +0000 Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: +P3xcja3way5nN/+JCKJJTQikfu7iCJlKt7daRZ1leM=) 2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: KDA9/GHhy0rjdE5GkXBH2Mt48KB9YjSR7eGXIC67yec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8405 (0x20d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Validity Not Before: Jul 4 16:10:54 2025 GMT Not After : Jul 11 16:10:54 2025 GMT Subject: CN=6867fd0e-82d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ec:15:9d:70:a8:25:77:bb:d2:97:df:01:0b: ed:e9:88:1c:ac:48:66:d1:80:83:1e:64:68:a1:f0: 79:f0:07:02:ee:35:da:e8:26:c9:e6:96:c1:55:57: 25:ff:df:d2:f8:c8:33:f3:8d:30:c7:41:dc:5a:c9: 63:4d:1f:8a:07:05:2a:e9:d6:7b:6f:0e:ba:c1:bb: 86:e3:5e:58:b9:02:f7:d4:db:1f:af:c5:80:23:40: 5e:56:5d:1c:55:95:d9:fd:59:3c:69:c7:0a:19:27: f5:75:bb:ed:70:48:0c:45:30:72:ea:b0:b6:8e:20: 8c:5e:d1:df:4b:3c:30:cf:3f:73:b1:5c:a9:b0:64: 6e:61:1b:d1:8d:bf:8c:52:7a:8a:83:fa:5c:a7:f8: 8b:cb:8d:4e:47:89:c5:69:1d:47:60:84:c8:5d:23: c3:4f:59:04:5a:80:f9:4c:07:08:83:0e:f3:cc:99: 8f:80:f3:0a:c2:7f:d5:f0:36:2a:6d:64:24:e4:24: 6b:8c:c0:0f:d2:c1:f4:94:31:be:8c:3e:62:5f:e3: d5:3a:ae:81:c4:e8:c3:fb:15:0e:cd:7f:42:49:5f: bc:fd:ce:c3:15:a5:a3:2f:ee:c7:18:5b:76:1d:31: 86:f3:f1:4b:9a:99:c4:8c:f7:f5:e5:98:8b:7d:1e: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:73:22:82:58:58:40:08:9A:83:77:C6:96:53:B9:B4:70:3C:C9:21 X509v3 Authority Key Identifier: keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:38:c1:62:50:c6:f8:f5:b8:ec:09:19:e4:8a:d5:b6:4b:34: fa:6b:07:d5:f0:c2:f0:46:6f:6d:00:eb:bb:e7:13:03:c8:11: d5:f4:ad:e2:de:0e:60:0b:17:fc:88:24:ba:34:6a:a5:58:55: 09:db:2b:91:ce:73:9f:79:03:1f:5a:9c:5d:1b:b9:09:ea:a7: 25:31:dd:19:85:38:c3:f1:0a:05:0a:57:65:d3:a4:28:69:21: 63:85:f0:b0:d6:14:31:2c:83:90:ff:4c:59:52:75:4b:fe:0f: f4:68:9c:8e:8b:45:54:7a:8d:c1:06:f2:8d:ae:73:69:4b:a2: f7:a8:fe:3e:57:f8:f3:2f:88:3a:ad:aa:ae:bc:ff:08:28:ff: ac:5d:bf:6a:31:f2:36:ca:01:68:05:b7:7d:00:fd:2a:2d:b6: 23:56:6d:d7:98:4c:97:c1:4c:26:31:02:1c:4e:07:65:c5:ad: 93:4c:71:0e:6c:6e:9c:1f:65:74:d7:b8:63:36:3e:28:42:71: a7:ff:5c:97:cf:b2:22:c8:08:a0:16:c8:6c:1b:6f:c0:85:59: bf:86:7c:6a:90:5d:91:17:6c:be:2c:4c:b8:68:84:ef:6f:97: f3:46:37:6e:ca:8d:5e:91:c7:73:81:e5:01:49:0e:15:43:23: 24:f0:12:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICINUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVFMUUxNENBQjg1 Njk4N0IwNUQwHhcNMjUwNzA0MTYxMDU0WhcNMjUwNzExMTYxMDU0WjAYMRYwFAYD VQQDEw02ODY3ZmQwZS04MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ewVnXCoJXe70pffAQvt6YgcrEhm0YCDHmRoofB58AcC7jXa6CbJ5pbBVVcl /9/S+Mgz840wx0HcWsljTR+KBwUq6dZ7bw66wbuG415YuQL31Nsfr8WAI0BeVl0c VZXZ/Vk8accKGSf1dbvtcEgMRTBy6rC2jiCMXtHfSzwwzz9zsVypsGRuYRvRjb+M UnqKg/pcp/iLy41OR4nFaR1HYITIXSPDT1kEWoD5TAcIgw7zzJmPgPMKwn/V8DYq bWQk5CRrjMAP0sH0lDG+jD5iX+PVOq6BxOjD+xUOzX9CSV+8/c7DFaWjL+7HGFt2 HTGG8/FLmpnEjPf15ZiLfR6eSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJzIoJY WEAImoN3xpZTubRwPMkhMB8GA1UdIwQYMBaAFI03iUsJQez9TWsF4eFMq4Vph7Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODkwRC8yMUI3QTgwRUZG RkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQMU5hd1hoNFV5cmhXbUhz RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pUZUpTd2xCN1AxTmF3WGg0VXlyaFdtSHNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODkwRC8yMUI3QTgwRUZGRkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQ MU5hd1hoNFV5cmhXbUhzRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYOMFiUMb49bjsCRnkitW2SzT6awfV8MLwRm9tAOu75xMDyBHV9K3i 3g5gCxf8iCS6NGqlWFUJ2yuRznOfeQMfWpxdG7kJ6qclMd0ZhTjD8QoFCldl06Qo aSFjhfCw1hQxLIOQ/0xZUnVL/g/0aJyOi0VUeo3BBvKNrnNpS6L3qP4+V/jzL4g6 raquvP8IKP+sXb9qMfI2ygFoBbd9AP0qLbYjVm3XmEyXwUwmMQIcTgdlxa2TTHEO bG6cH2V017hjNj4oQnGn/1yXz7IiyAigFshsG2/AhVm/hnxqkF2RF2y+LEy4aITv b5fzRjduyo1ekcdzgeUBSQ4VQyMk8BI+ -----END CERTIFICATE-----Generated at Sat Jul 5 05:25:24 2025 by rpki-client