$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft File: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json) Hash identifier: McmnUxQMugO/0lysNgvKtXlRufhP0lSSjbmmDNdEwu0= Subject key identifier: 82:36:90:1E:EE:9D:31:E7:84:3E:87:9F:60:40:4E:8D:93:7F:FA:F2 Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 Certificate issuer: /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft Manifest number: 0545 Signing time: Wed 02 Jul 2025 23:45:13 +0000 Manifest this update: Wed 02 Jul 2025 23:45:13 +0000 Manifest next update: Wed 09 Jul 2025 23:45:13 +0000 Files and hashes: 1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: 4XsXELPnK5l9GezYisNDA1yH9LUjegSrkOnM79Yz68s=) 2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: VL9J48E6mKHF8lb44rgcasmZ+ef6A3tiZtXM0iIEHSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EB0B, serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Validity Not Before: Jul 2 23:45:13 2025 GMT Not After : Jul 9 23:45:13 2025 GMT Subject: CN=6865c489-7857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:0d:68:49:dc:a9:b3:9f:44:49:f9:f5:56: ae:f7:b4:d6:7b:c8:dc:81:bb:d7:ef:eb:3a:e9:8a: 22:f1:f7:ba:db:02:96:9c:b7:d7:32:73:26:ea:c3: d1:15:3d:15:c8:2a:fe:58:06:5b:a3:7f:d7:bb:ee: 9c:62:5d:2c:57:de:ba:62:e7:76:64:df:fc:34:04: e3:a3:3e:2f:2a:b4:4e:96:c9:8d:d6:f0:bf:ac:19: 82:67:9a:d3:ff:52:5a:97:51:0e:1e:f3:47:5a:1d: 3d:2b:c9:4f:6a:01:49:70:c5:c1:8a:d7:19:60:f4: 9a:0c:18:14:52:bc:10:01:65:01:11:b1:43:4a:fe: 8b:52:48:c7:47:34:9e:4c:45:fa:ab:65:c8:26:d1: 1d:e5:40:a9:24:fc:64:ee:3b:8b:15:0e:83:f6:e8: fb:a7:2d:2a:05:8c:21:68:ce:1b:b3:59:02:e0:2f: 6a:06:9b:17:a5:26:ff:1c:c0:c4:e6:f0:db:9e:f7: 7f:18:d5:e3:c4:34:f9:8d:10:15:bd:f9:d5:26:0d: 45:30:40:80:b7:d2:cf:7c:2f:54:c6:d5:ae:93:8d: 64:aa:fd:09:45:d0:31:92:2a:63:78:22:87:b3:7d: ee:2d:40:1e:c5:50:96:06:c1:cd:b4:7e:9f:31:b4: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:36:90:1E:EE:9D:31:E7:84:3E:87:9F:60:40:4E:8D:93:7F:FA:F2 X509v3 Authority Key Identifier: keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:7b:5e:aa:de:d1:30:7b:49:fd:fa:f5:22:aa:7b:86:f1:42: 46:90:ea:54:8a:63:a3:5c:98:b4:ee:a5:0c:06:54:34:4f:d9: 70:c3:8d:b0:dd:50:b8:db:4d:d8:99:54:f3:d0:96:5b:0b:6b: 50:65:6d:b6:b8:04:6c:e1:88:ed:83:a9:0f:79:65:74:c2:e0: 11:09:f0:48:2c:43:f8:bb:dc:3e:f1:49:db:ce:b0:a5:a4:b7: 77:68:8f:9a:dd:b0:18:45:db:b0:73:95:6a:9d:a6:2c:7b:d0: d4:ea:d7:0f:c5:b8:eb:85:87:e0:3e:b7:e1:22:a2:89:3a:a8: ca:94:2f:59:41:0b:98:f6:6c:79:f0:03:fe:4e:98:72:5b:1d: d2:75:76:99:d1:26:4d:ae:c3:ed:ce:26:29:f6:e2:32:94:53: 80:49:94:70:99:c4:70:74:3e:96:c8:55:0f:8e:b7:a3:2a:0c: 08:6e:79:7f:be:ab:1d:f8:e5:bd:1c:a2:94:dd:5c:39:4d:8d: 68:7e:f5:80:9c:a2:00:e2:74:ed:85:3c:ca:0b:70:cc:9c:37: 39:d2:18:28:26:b7:55:f6:ec:e5:43:6a:d6:be:f1:97:ab:16: 14:42:44:b5:3c:7f:b8:3b:41:5d:15:d7:99:cf:26:5e:c5:3d: 7e:aa:75:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCMEIxMTAvBgNVBAUTKEFFM0ZBNjUzNDk1NTE2NjBERkY0OEM0OTdFODM3OEE2 MzBCOTgzNzYwHhcNMjUwNzAyMjM0NTEzWhcNMjUwNzA5MjM0NTEzWjAYMRYwFAYD VQQDEw02ODY1YzQ4OS03ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM4NaEncqbOfREn59Vau97TWe8jcgbvX7+s66Yoi8fe62wKWnLfXMnMm6sPR FT0VyCr+WAZbo3/Xu+6cYl0sV966Yud2ZN/8NATjoz4vKrROlsmN1vC/rBmCZ5rT /1Jal1EOHvNHWh09K8lPagFJcMXBitcZYPSaDBgUUrwQAWUBEbFDSv6LUkjHRzSe TEX6q2XIJtEd5UCpJPxk7juLFQ6D9uj7py0qBYwhaM4bs1kC4C9qBpsXpSb/HMDE 5vDbnvd/GNXjxDT5jRAVvfnVJg1FMECAt9LPfC9UxtWuk41kqv0JRdAxkipjeCKH s33uLUAexVCWBsHNtH6fMbTclQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII2kB7u nTHnhD6Hn2BATo2Tf/ryMB8GA1UdIwQYMBaAFK4/plNJVRZg3/SMSX6DeKYwuYN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUIwQi8zQTRDNDYwNkY5 MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZtRGY5SXhKZm9ONHBqQzVn M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JqLW1VMGxWRm1EZjlJeEpmb040cGpDNWczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUIwQi8zQTRDNDYwNkY5MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZt RGY5SXhKZm9ONHBqQzVnM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYe16q3tEwe0n9+vUiqnuG8UJGkOpUimOjXJi07qUMBlQ0T9lww42w 3VC4203YmVTz0JZbC2tQZW22uARs4Yjtg6kPeWV0wuARCfBILEP4u9w+8UnbzrCl pLd3aI+a3bAYRduwc5VqnaYse9DU6tcPxbjrhYfgPrfhIqKJOqjKlC9ZQQuY9mx5 8AP+TphyWx3SdXaZ0SZNrsPtziYp9uIylFOASZRwmcRwdD6WyFUPjrejKgwIbnl/ vqsd+OW9HKKU3Vw5TY1ofvWAnKIA4nTthTzKC3DMnDc50hgoJrdV9uzlQ2rWvvGX qxYUQkS1PH+4O0FdFdeZzyZexT1+qnUG -----END CERTIFICATE-----Generated at Thu Jul 3 14:56:47 2025 by rpki-client