$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: ShKbs/3q8vlB8FXWMsPFnUCq5aiUu0ZUzhIXRPj0KLM= Subject key identifier: F2:7E:F3:57:B1:21:F8:AD:1C:F8:54:ED:81:D2:F1:27:5E:EF:2E:24 Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 083E Signing time: Wed 02 Jul 2025 21:02:31 +0000 Manifest this update: Wed 02 Jul 2025 21:02:31 +0000 Manifest next update: Wed 09 Jul 2025 21:02:31 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: hnfw3pcf8a1fsxe/cHbxaBrFiVZXwQMZAREhgRpnjpU=) 2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: iVfJEeg3Wgdof0gIfzSRbq9faDNqlEFVPNcvpNlnmRA=) 3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: w4WjZepte0rY+jWEuTZEQB8JcDFa63LXhrBQUJaEGlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: Jul 2 21:02:31 2025 GMT Not After : Jul 9 21:02:31 2025 GMT Subject: CN=68659e67-3ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:81:25:32:1d:c7:ae:f8:4f:a4:b4:c9:07: 97:d7:92:b7:f1:36:0b:60:ad:cd:52:11:32:11:cf: 30:cc:3a:24:c0:87:57:61:a2:43:15:b2:f9:35:4b: 73:5c:23:76:b5:3e:ea:4f:dc:6b:bd:18:65:f0:58: 2d:d3:b2:08:e5:dd:b4:a1:8e:f4:a1:16:cf:68:9d: 92:f8:4b:df:19:9f:4d:6e:d0:19:c4:51:07:10:d5: 01:a3:a8:78:46:a5:80:7c:1a:2d:37:a2:5f:6c:77: 94:85:bc:da:7e:dc:45:08:ef:06:0a:57:1a:83:a0: 75:d6:6d:9d:73:39:7d:fd:95:13:af:be:a6:4b:3e: 2c:d2:0b:0a:cf:1b:3a:fc:9a:22:02:9c:57:8f:32: 02:36:13:30:24:80:06:f2:af:e8:b2:d7:3e:12:ea: bb:7f:4e:e0:a7:a6:9a:0a:b8:4a:78:a8:ac:57:7b: 95:d5:aa:93:36:8f:6b:d7:ff:5c:93:99:41:36:c2: e9:26:9f:67:14:42:a0:d2:80:7d:fa:88:61:35:c3: 7a:38:bd:79:a7:57:fa:b3:e5:7f:c8:55:ee:2c:78: 3d:3f:37:58:d2:2c:ad:a7:5e:e8:8a:c3:49:76:8f: d0:17:bd:a9:ba:52:8a:08:b8:5e:d4:99:be:c4:4a: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7E:F3:57:B1:21:F8:AD:1C:F8:54:ED:81:D2:F1:27:5E:EF:2E:24 X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d8:ca:61:ab:56:e9:b5:b7:50:e6:a5:5e:1b:52:de:6d:a8: ab:89:7f:00:84:50:f8:0c:29:f0:45:fe:b9:15:4f:c3:3b:9d: b9:a8:59:43:fc:eb:bc:74:30:b6:61:b1:0e:80:4b:1f:b4:12: d9:80:fc:28:f5:ca:04:50:30:8f:c6:76:65:6a:f8:1f:cb:11: 11:39:13:b3:4f:97:f9:d1:3f:c3:06:bd:b1:cd:21:94:1f:86: 1d:0f:53:45:46:9e:51:ab:fc:b3:5e:98:8c:ac:97:56:a0:86: df:b7:84:64:56:ca:f7:10:8c:bd:7a:e0:20:e4:dd:f3:85:3f: 37:4a:10:d1:9e:0a:c4:60:88:d8:5c:95:c0:94:51:1d:61:0e: f5:d4:77:bd:0a:0e:4b:bd:fc:3f:a4:e9:6c:9b:a4:2d:06:73: 83:0b:6b:56:d2:89:2a:c2:9b:8a:a2:9b:2f:52:33:31:93:7d: 6a:64:7d:6b:6a:38:28:66:88:f8:65:bd:37:ce:65:f3:c8:7e: 96:02:ba:06:fa:a6:79:35:ed:90:7d:12:e6:1d:ba:54:77:4f: 8e:4e:3d:1f:33:97:e3:d2:ce:50:81:02:43:02:73:a2:50:f0: b9:ee:5b:a0:f3:56:0a:1f:e4:f5:88:d5:ae:d6:7c:7e:82:32: 08:62:58:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjUwNzAyMjEwMjMxWhcNMjUwNzA5MjEwMjMxWjAYMRYwFAYD VQQDEw02ODY1OWU2Ny0zZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpCBJTIdx674T6S0yQeX15K38TYLYK3NUhEyEc8wzDokwIdXYaJDFbL5NUtz XCN2tT7qT9xrvRhl8Fgt07II5d20oY70oRbPaJ2S+EvfGZ9NbtAZxFEHENUBo6h4 RqWAfBotN6JfbHeUhbzaftxFCO8GClcag6B11m2dczl9/ZUTr76mSz4s0gsKzxs6 /JoiApxXjzICNhMwJIAG8q/ostc+Euq7f07gp6aaCrhKeKisV3uV1aqTNo9r1/9c k5lBNsLpJp9nFEKg0oB9+ohhNcN6OL15p1f6s+V/yFXuLHg9PzdY0iytp17oisNJ do/QF72pulKKCLhe1Jm+xErlYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ+81ex IfitHPhU7YHS8Sde7y4kMB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz2Mphq1bptbdQ5qVeG1LebairiX8AhFD4DCnwRf65FU/DO525qFlD /Ou8dDC2YbEOgEsftBLZgPwo9coEUDCPxnZlavgfyxEROROzT5f50T/DBr2xzSGU H4YdD1NFRp5Rq/yzXpiMrJdWoIbft4RkVsr3EIy9euAg5N3zhT83ShDRngrEYIjY XJXAlFEdYQ711He9Cg5Lvfw/pOlsm6QtBnODC2tW0okqwpuKopsvUjMxk31qZH1r ajgoZoj4Zb03zmXzyH6WAroG+qZ5Ne2QfRLmHbpUd0+OTj0fM5fj0s5QgQJDAnOi UPC57lug81YKH+T1iNWu1nx+gjIIYliF -----END CERTIFICATE-----Generated at Thu Jul 3 07:54:46 2025 by rpki-client