$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: 4RoeWVis1gYd8rT5AiKt2X1EsJy5JvLSWOUPxBEYgEI= Subject key identifier: F8:5C:CF:A9:54:3D:7C:32:70:51:A7:72:05:0C:0E:52:17:48:16:C3 Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: F1 Signing time: Sun 29 Jun 2025 04:25:09 +0000 Manifest this update: Sun 29 Jun 2025 04:25:08 +0000 Manifest next update: Sun 06 Jul 2025 04:25:08 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: PWxHc7EFD/di5m3jqKk8sU93cxi1qf31uO64AXm+ouE=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: dc2h2jrx/pzY7NawNYOcmGXVTRsJnjaghC5xI/+fBaQ=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: M93I+sdFWlIBfdq9LG68VSm5ThgyN+STMXDJdl1g8Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Jun 29 04:25:08 2025 GMT Not After : Jul 6 04:25:08 2025 GMT Subject: CN=6860c024-6701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:15:61:90:bc:7d:21:93:00:ff:41:de:f7: c9:e9:c5:a3:51:a7:c3:c6:11:72:a2:ce:6f:09:21: 00:8a:39:f9:d8:fe:40:48:d7:a8:d6:0d:59:d6:f9: 21:ad:ff:59:79:ac:57:c6:8c:63:48:4d:59:0e:7e: 5b:ac:97:f5:6e:60:b2:6e:c5:74:c3:ed:ae:ae:8b: 85:5f:f2:99:28:93:9a:18:17:94:da:bd:9e:f3:df: 20:32:58:2d:5d:0d:70:44:8f:91:ed:e4:a9:ce:53: 25:48:8d:ab:71:1b:23:a9:aa:d6:e2:bd:11:0b:94: 06:a5:92:8b:ec:f1:d5:a3:a5:ef:34:40:f1:c2:f7: 29:da:bd:37:e3:a4:06:e2:10:41:bc:ba:04:91:b2: bd:98:d7:a5:67:4a:f6:d2:ee:82:79:5d:e5:90:67: f4:61:10:1d:4a:bb:e7:35:36:40:b5:91:d9:e7:c4: 4e:ba:1d:34:ae:11:51:b1:38:a1:9a:4a:8b:03:9f: f9:00:7d:d0:82:61:15:7e:2c:00:5d:50:11:58:ab: 02:72:85:1b:c1:92:d8:1c:4e:1e:92:f3:67:7d:e0: 67:c1:ec:ec:0b:27:d0:0c:a9:43:6e:f0:1f:fe:86: 52:f5:30:97:37:51:60:a9:0c:cd:a8:19:19:ee:6e: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5C:CF:A9:54:3D:7C:32:70:51:A7:72:05:0C:0E:52:17:48:16:C3 X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d2:09:df:a2:66:05:bd:24:d6:ad:ec:1e:a1:e4:b0:2e:44: a6:a8:67:1f:71:50:3b:7c:f8:1d:a8:b9:7a:f2:c2:1e:1e:91: 42:72:9e:68:3c:18:e3:cf:ae:67:de:94:02:d5:89:89:dc:52: 16:52:a5:ad:f6:f4:30:dc:99:77:69:49:f9:96:52:cb:3b:08: ef:08:8d:0f:fc:e9:92:18:1a:e4:17:90:3b:44:5d:81:5d:58: f9:71:09:65:92:a9:2d:5e:ad:61:4b:7c:ee:74:40:ce:2f:d4: d7:76:a7:35:e1:86:7d:c8:6b:5c:25:60:8e:9e:07:0a:f8:f0: 76:32:92:62:ec:e4:34:0a:47:a0:f5:9f:7e:00:f5:4b:0d:c2: fe:6f:9b:05:77:0e:23:90:17:d4:1f:b9:5f:68:f2:6b:21:ac: 32:68:17:ca:1c:df:52:45:d8:f6:51:9c:b0:c6:20:27:2b:0f: 81:45:72:16:a2:25:43:e4:71:49:f8:94:e4:3c:47:ac:f2:01: 65:ec:f1:71:cb:95:19:9a:2a:5c:dd:af:4f:59:cf:b1:06:02: 9e:51:9b:48:df:14:bf:4f:71:e3:f6:60:30:5a:44:98:12:80: b3:f2:e7:52:bc:44:a8:fd:09:d0:47:76:f4:e0:98:ba:b7:dd: 3b:f4:aa:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUwNjI5MDQyNTA4WhcNMjUwNzA2MDQyNTA4WjAYMRYwFAYD VQQDEw02ODYwYzAyNC02NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFoVYZC8fSGTAP9B3vfJ6cWjUafDxhFyos5vCSEAijn52P5ASNeo1g1Z1vkh rf9ZeaxXxoxjSE1ZDn5brJf1bmCybsV0w+2urouFX/KZKJOaGBeU2r2e898gMlgt XQ1wRI+R7eSpzlMlSI2rcRsjqarW4r0RC5QGpZKL7PHVo6XvNEDxwvcp2r0346QG 4hBBvLoEkbK9mNelZ0r20u6CeV3lkGf0YRAdSrvnNTZAtZHZ58ROuh00rhFRsTih mkqLA5/5AH3QgmEVfiwAXVARWKsCcoUbwZLYHE4ekvNnfeBnwezsCyfQDKlDbvAf /oZS9TCXN1FgqQzNqBkZ7m46nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhcz6lU PXwycFGncgUMDlIXSBbDMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL0gnfomYFvSTWreweoeSwLkSmqGcfcVA7fPgdqLl68sIeHpFCcp5o PBjjz65n3pQC1YmJ3FIWUqWt9vQw3Jl3aUn5llLLOwjvCI0P/OmSGBrkF5A7RF2B XVj5cQllkqktXq1hS3zudEDOL9TXdqc14YZ9yGtcJWCOngcK+PB2MpJi7OQ0Ckeg 9Z9+APVLDcL+b5sFdw4jkBfUH7lfaPJrIawyaBfKHN9SRdj2UZywxiAnKw+BRXIW oiVD5HFJ+JTkPEes8gFl7PFxy5UZmipc3a9PWc+xBgKeUZtI3xS/T3Hj9mAwWkSY EoCz8udSvESo/QnQR3b04Ji6t9079KrG -----END CERTIFICATE-----Generated at Sun Jun 29 12:24:45 2025 by rpki-client