$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json) Hash identifier: H/4sX5ToyqtImWvuDukEmgpI0damnihcyHq5h2sd0jY= Subject key identifier: 11:B2:85:2A:83:87:7D:3A:71:ED:24:1F:29:7B:FA:E7:28:A2:07:92 Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft Manifest number: 8F Signing time: Tue 01 Jul 2025 07:11:34 +0000 Manifest this update: Tue 01 Jul 2025 07:11:33 +0000 Manifest next update: Tue 08 Jul 2025 07:11:33 +0000 Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: Y+6Ni1mzZRNEuV/75+gBpI4gnXuBEL39j3bb5JlymQ4=) 2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Validity Not Before: Jul 1 07:11:33 2025 GMT Not After : Jul 8 07:11:33 2025 GMT Subject: CN=68638a25-2097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:cb:a9:19:9a:f7:3e:82:30:5a:59:9f:5d: 8a:61:c0:19:11:a0:46:55:4e:2c:6f:e5:2c:7b:a4: 43:05:b3:ef:0e:fd:63:88:a7:36:5a:cd:dc:93:ff: f0:14:87:9a:b0:6b:81:6a:28:ac:73:ed:63:6e:bd: bf:87:f4:73:02:b6:71:02:4d:c9:f9:ae:fe:03:99: ba:c4:09:b6:6d:e0:43:4f:45:3a:85:2a:17:96:95: 88:7e:93:f9:47:f5:92:0a:70:cf:eb:d1:11:0d:b6: ab:c6:54:7c:92:71:4b:f3:95:ca:24:41:5c:60:3c: c8:cd:93:10:70:d6:ed:3a:9d:54:ce:bd:39:9d:7c: c8:99:90:36:14:f2:75:61:3f:13:99:b5:50:79:dd: f2:f4:87:eb:ce:d5:9f:83:1e:8e:71:ec:0d:f5:87: c0:22:74:4c:f4:56:4f:e1:6d:aa:e0:dc:db:a6:cc: 9a:65:69:91:14:54:b0:c5:f6:85:10:c7:4b:c5:8f: 03:f5:b6:82:16:e5:e9:24:ea:0d:cc:b6:8d:8d:22: 03:43:33:92:5c:cc:d2:08:e8:5d:18:22:24:3f:f5: 11:71:f3:4d:00:37:78:92:47:95:a1:09:d9:93:0b: 2a:f5:ca:44:7d:ef:63:ac:2c:3d:63:99:66:aa:e9: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B2:85:2A:83:87:7D:3A:71:ED:24:1F:29:7B:FA:E7:28:A2:07:92 X509v3 Authority Key Identifier: keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1a:3f:80:ae:a8:26:74:81:d1:aa:96:40:21:a8:1c:ac:56: 6a:04:c9:2e:eb:dd:32:aa:3b:95:c7:1c:35:a8:ac:ea:8c:57: 4a:1b:8e:e8:7a:70:cf:99:b4:88:94:1b:07:38:ff:55:64:c2: ef:3a:f9:2c:5c:81:5e:ad:e6:30:45:34:ec:08:4b:e5:5c:49: d5:15:f7:6c:7c:30:31:a3:b0:f0:c4:f7:bf:ad:ff:3a:23:3a: b8:b1:cd:2f:f2:12:de:05:9a:56:37:64:ba:6d:39:59:33:18: ed:21:c8:66:35:b5:2f:66:68:e2:f9:36:e4:d9:b1:53:16:7b: fc:32:59:35:67:92:9c:b8:04:13:95:6f:a7:af:10:31:bf:23: 09:50:03:0c:b9:2a:f8:1a:c6:3c:9b:e9:76:e0:b9:0d:55:ff: ca:04:3e:4f:f6:2c:44:a3:20:b7:9e:6f:7a:37:1e:9e:d3:e1: 27:2d:63:f8:0a:fc:46:1d:f0:95:8f:6f:e6:60:ab:44:07:61: 06:d2:73:f4:00:10:28:72:f8:9d:0c:37:f9:5f:3e:6c:09:4d: 68:a4:f9:a9:8b:cc:2a:b4:7e:97:0a:6c:a6:ef:77:4f:0e:65: 25:a9:f5:20:b4:2c:f4:03:51:20:78:eb:f1:ee:cd:ab:5e:57: 99:d0:01:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1 RjE2M0FFNDMwHhcNMjUwNzAxMDcxMTMzWhcNMjUwNzA4MDcxMTMzWjAYMRYwFAYD VQQDEw02ODYzOGEyNS0yMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX/LqRma9z6CMFpZn12KYcAZEaBGVU4sb+Use6RDBbPvDv1jiKc2Ws3ck//w FIeasGuBaiisc+1jbr2/h/RzArZxAk3J+a7+A5m6xAm2beBDT0U6hSoXlpWIfpP5 R/WSCnDP69ERDbarxlR8knFL85XKJEFcYDzIzZMQcNbtOp1Uzr05nXzImZA2FPJ1 YT8TmbVQed3y9IfrztWfgx6OcewN9YfAInRM9FZP4W2q4NzbpsyaZWmRFFSwxfaF EMdLxY8D9baCFuXpJOoNzLaNjSIDQzOSXMzSCOhdGCIkP/URcfNNADd4kkeVoQnZ kwsq9cpEfe9jrCw9Y5lmqulYTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGyhSqD h306ce0kHyl7+ucoogeSMB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm MUFiYklESTJaWnhmRmpya00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACGj+ArqgmdIHRqpZAIagcrFZqBMku690yqjuVxxw1qKzqjFdKG47o enDPmbSIlBsHOP9VZMLvOvksXIFereYwRTTsCEvlXEnVFfdsfDAxo7DwxPe/rf86 Izq4sc0v8hLeBZpWN2S6bTlZMxjtIchmNbUvZmji+Tbk2bFTFnv8Mlk1Z5KcuAQT lW+nrxAxvyMJUAMMuSr4GsY8m+l24LkNVf/KBD5P9ixEoyC3nm96Nx6e0+EnLWP4 CvxGHfCVj2/mYKtEB2EG0nP0ABAocvidDDf5Xz5sCU1opPmpi8wqtH6XCmym73dP DmUlqfUgtCz0A1EgeOvx7s2rXleZ0AEL -----END CERTIFICATE-----Generated at Wed Jul 2 19:26:32 2025 by rpki-client