$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: 9QE8vTTaA+LQ0x0bA/g8cZ/MAaKUFMFOGEULFGMkYLw= Subject key identifier: 3F:FE:C1:57:FC:13:4B:E8:B1:3D:DB:DE:DB:8A:42:C5:72:79:F4:58 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 04A4 Signing time: Thu 03 Jul 2025 00:17:22 +0000 Manifest this update: Thu 03 Jul 2025 00:17:22 +0000 Manifest next update: Thu 10 Jul 2025 00:17:21 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: Kf1CMZj9S96HCKB+iCaetq1PyIKAiBKtew+s9y8uxRw=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: Jul 3 00:17:22 2025 GMT Not After : Jul 10 00:17:21 2025 GMT Subject: CN=6865cc12-d9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:56:25:52:96:38:df:fc:c5:99:2e:a1:c4: b2:4e:c4:da:be:e3:7e:9e:a7:6b:c4:c7:9e:95:74: 5d:e1:48:fa:7f:83:89:21:32:39:00:b5:2c:09:5d: 56:79:e2:22:7b:8c:62:91:a3:5e:08:a6:59:5a:44: 3f:2c:26:6d:15:04:9f:38:d8:b8:99:92:a8:96:f3: e5:3f:f6:24:9a:5d:e4:87:23:17:c1:fc:8d:b0:d0: 9c:f3:c3:57:01:2a:b6:f3:6f:a4:f1:50:67:97:3d: 55:ee:06:d2:d6:01:d2:56:6d:d6:57:67:a2:e9:34: e3:14:ca:0b:8e:89:a5:4b:06:e0:1c:79:eb:0a:d4: 55:3f:07:55:e9:b3:04:93:82:83:03:6b:19:e8:ac: 44:e0:56:b3:f2:3c:4a:98:ba:33:a0:40:37:bc:f0: 81:26:a8:c7:6a:db:d8:33:86:08:7b:2f:a0:5f:11: 59:4c:c0:3a:be:6c:11:a0:56:3f:de:36:64:ef:77: a9:47:5d:2e:5f:68:5a:95:3e:fc:74:b9:46:65:e4: 4f:e5:86:6e:47:77:fe:67:18:6f:0b:3b:ef:49:84: 03:ca:2c:52:13:e9:4b:ad:10:5c:de:7b:93:1e:d2: 2d:a7:a7:f0:8a:cc:2c:f9:9f:67:0c:13:5b:32:3b: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:C1:57:FC:13:4B:E8:B1:3D:DB:DE:DB:8A:42:C5:72:79:F4:58 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bb:9b:83:96:41:dd:53:00:c8:13:eb:55:f4:3e:d2:45:33: 97:6a:da:cc:e2:e5:9e:ba:f3:fe:60:07:85:68:0f:5d:7d:dc: 96:0c:35:fc:d5:b6:0d:b1:4e:65:d7:49:0e:a7:6e:b6:9e:bf: 81:cf:8d:73:e8:f3:2b:5b:19:9c:bc:02:b8:70:92:20:50:db: e2:67:81:c3:37:d5:b4:80:c9:7d:ba:f6:0b:2c:79:25:11:85: df:dc:04:02:83:59:b9:6f:dd:22:99:9a:07:b8:d1:5c:51:2e: c3:69:a0:bb:75:88:ac:b9:8a:47:45:e9:f0:21:6b:1c:f0:5f: 87:d9:4c:23:c2:37:d7:af:f6:27:42:f4:08:07:ec:c7:33:11: 72:28:3c:bd:43:f2:60:8e:73:61:53:74:8a:50:1e:c8:3d:cc: 4d:2f:03:05:f2:c8:58:9a:d6:87:bd:7b:e0:8f:86:55:2e:61: 9d:b2:0c:c8:a8:4e:f2:f0:e0:00:d3:72:51:75:e3:75:3b:1e: 7f:7c:b9:47:0d:c4:d0:da:d3:b9:8d:3a:29:7d:d0:67:9d:65: cd:03:46:7d:66:81:eb:ca:2a:ca:91:bd:13:18:7c:8e:0c:78: 65:20:e2:3f:01:15:0b:6f:ca:27:ce:d0:a5:80:f4:f0:93:b8: 68:c6:0c:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjUwNzAzMDAxNzIyWhcNMjUwNzEwMDAxNzIxWjAYMRYwFAYD VQQDEw02ODY1Y2MxMi1kOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3pWJVKWON/8xZkuocSyTsTavuN+nqdrxMeelXRd4Uj6f4OJITI5ALUsCV1W eeIie4xikaNeCKZZWkQ/LCZtFQSfONi4mZKolvPlP/Ykml3khyMXwfyNsNCc88NX ASq282+k8VBnlz1V7gbS1gHSVm3WV2ei6TTjFMoLjomlSwbgHHnrCtRVPwdV6bME k4KDA2sZ6KxE4Faz8jxKmLozoEA3vPCBJqjHatvYM4YIey+gXxFZTMA6vmwRoFY/ 3jZk73epR10uX2halT78dLlGZeRP5YZuR3f+ZxhvCzvvSYQDyixSE+lLrRBc3nuT HtItp6fwisws+Z9nDBNbMjudcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/+wVf8 E0vosT3b3tuKQsVyefRYMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNu5uDlkHdUwDIE+tV9D7SRTOXatrM4uWeuvP+YAeFaA9dfdyWDDX8 1bYNsU5l10kOp262nr+Bz41z6PMrWxmcvAK4cJIgUNviZ4HDN9W0gMl9uvYLLHkl EYXf3AQCg1m5b90imZoHuNFcUS7DaaC7dYisuYpHRenwIWsc8F+H2UwjwjfXr/Yn QvQIB+zHMxFyKDy9Q/JgjnNhU3SKUB7IPcxNLwMF8shYmtaHvXvgj4ZVLmGdsgzI qE7y8OAA03JRdeN1Ox5/fLlHDcTQ2tO5jTopfdBnnWXNA0Z9ZoHryirKkb0TGHyO DHhlIOI/ARULb8onztClgPTwk7hoxgzh -----END CERTIFICATE-----Generated at Thu Jul 3 14:57:51 2025 by rpki-client