$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: f7mZ2fpa1FeB4CY2qSqCaV7vhsIDrm2hr2fC4QSYnMM= Subject key identifier: 82:F2:29:D5:8D:7C:9D:02:F6:19:0D:6C:1C:3C:C7:90:84:0E:83:9B Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 01EA Signing time: Thu 03 Jul 2025 02:38:23 +0000 Manifest this update: Thu 03 Jul 2025 02:38:23 +0000 Manifest next update: Thu 10 Jul 2025 02:38:23 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: rx1IbpRxv7QcoJJf/maXDBYuVdBGazYX5d8fsBb2w8s=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Jul 3 02:38:23 2025 GMT Not After : Jul 10 02:38:23 2025 GMT Subject: CN=6865ed1f-412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:84:23:f7:0c:55:eb:0f:c4:5f:b3:62:c7: f8:55:17:08:b7:ce:22:75:2b:a9:9a:88:6b:44:b0: f7:9b:df:0f:80:37:bc:aa:32:50:e3:fe:f7:ab:97: 68:21:4f:b4:18:dc:d8:de:b5:16:04:26:6a:00:3f: bd:50:bb:50:6c:56:bb:6b:ce:ea:31:36:62:de:56: 56:6a:83:10:5e:ba:d2:11:6c:51:13:4c:07:f9:dc: 52:f7:6d:cf:c9:a0:26:fa:5b:aa:ae:ac:2e:00:6a: cc:6c:fa:34:86:f8:7e:37:ab:3b:4b:67:ef:db:73: f0:70:bf:aa:63:2e:85:fa:38:aa:0c:f5:1e:9a:fa: f4:53:03:e5:d3:14:0a:6e:ef:df:8d:a3:5d:96:f8: d3:2d:20:45:af:ac:05:66:76:64:e0:b6:58:95:f9: a8:65:24:2c:57:0c:9b:25:d3:bc:4b:71:84:d0:6c: a8:1c:f6:cc:42:fd:7d:95:a7:09:9a:b9:28:6b:0f: 0c:5b:71:6a:02:6c:02:56:b9:5a:da:c7:68:ed:dc: dc:96:84:38:9e:b1:ff:23:90:e0:10:58:7d:b0:9a: 9c:42:81:70:50:a1:b6:1a:f9:63:fc:19:cd:12:b4: a3:48:d5:6e:aa:8f:61:04:0c:77:aa:70:a7:12:27: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:29:D5:8D:7C:9D:02:F6:19:0D:6C:1C:3C:C7:90:84:0E:83:9B X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:18:ec:69:21:bf:a0:1c:62:82:6b:47:ca:a8:86:c9:b2:4c: a3:39:11:f0:35:dc:09:09:06:87:59:85:f7:fa:49:16:a1:aa: 21:78:aa:da:d0:d0:cc:db:cc:65:df:be:3b:46:ad:7a:d6:71: 85:dd:e0:26:3b:07:c1:b8:da:08:43:2f:44:11:21:87:19:89: 7c:0b:73:ca:45:d1:d0:fb:41:bb:57:c4:bf:2b:e8:8f:f4:70: 72:88:aa:45:2c:62:46:59:cb:59:a2:29:db:43:15:2e:06:96: 78:1e:06:f8:af:54:db:c4:cd:aa:ab:30:33:a4:e3:ba:dc:e9: b7:2e:67:59:c1:cf:61:14:4e:d4:03:09:ac:bc:ed:5c:5c:19: 2b:01:33:59:82:6a:c1:48:66:ff:40:1b:df:3c:6c:ea:fc:c7: ee:3b:78:7e:2e:27:e5:9b:1c:a4:91:b2:0e:1d:66:be:5c:2e: 19:d2:80:33:b1:a0:62:09:72:56:26:76:61:5e:e1:dd:85:d1: 1a:58:26:a3:6a:1f:d3:74:e0:89:52:ea:f7:60:5f:20:db:68: 79:26:13:55:d6:61:53:87:46:e6:b7:d7:46:5c:87:c6:e4:68: 9c:28:88:97:b4:99:13:19:35:bf:27:43:39:59:9e:61:66:68: a8:20:b0:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjUwNzAzMDIzODIzWhcNMjUwNzEwMDIzODIzWjAYMRYwFAYD VQQDEw02ODY1ZWQxZi00MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EeEI/cMVesPxF+zYsf4VRcIt84idSupmohrRLD3m98PgDe8qjJQ4/73q5do IU+0GNzY3rUWBCZqAD+9ULtQbFa7a87qMTZi3lZWaoMQXrrSEWxRE0wH+dxS923P yaAm+luqrqwuAGrMbPo0hvh+N6s7S2fv23PwcL+qYy6F+jiqDPUemvr0UwPl0xQK bu/fjaNdlvjTLSBFr6wFZnZk4LZYlfmoZSQsVwybJdO8S3GE0GyoHPbMQv19lacJ mrkoaw8MW3FqAmwCVrla2sdo7dzcloQ4nrH/I5DgEFh9sJqcQoFwUKG2Gvlj/BnN ErSjSNVuqo9hBAx3qnCnEifL1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILyKdWN fJ0C9hkNbBw8x5CEDoObMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaGOxpIb+gHGKCa0fKqIbJskyjORHwNdwJCQaHWYX3+kkWoaoheKra 0NDM28xl3747Rq161nGF3eAmOwfBuNoIQy9EESGHGYl8C3PKRdHQ+0G7V8S/K+iP 9HByiKpFLGJGWctZoinbQxUuBpZ4Hgb4r1TbxM2qqzAzpOO63Om3LmdZwc9hFE7U AwmsvO1cXBkrATNZgmrBSGb/QBvfPGzq/MfuO3h+LiflmxykkbIOHWa+XC4Z0oAz saBiCXJWJnZhXuHdhdEaWCajah/TdOCJUur3YF8g22h5JhNV1mFTh0bmt9dGXIfG 5GicKIiXtJkTGTW/J0M5WZ5hZmioILDa -----END CERTIFICATE-----Generated at Thu Jul 3 18:47:34 2025 by rpki-client