$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: /lxxRVYFmSh1DADtHApWbQXMUHSNL7gGm9hQ7CNnztQ= Subject key identifier: E4:01:42:57:44:55:29:9E:07:E1:1A:1F:20:29:35:2F:57:CF:66:03 Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 13DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 13D7 Signing time: Wed 02 Jul 2025 17:07:57 +0000 Manifest this update: Wed 02 Jul 2025 17:07:57 +0000 Manifest next update: Wed 09 Jul 2025 17:07:57 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: iWtOpWn3nNb4neEsSdOnxRDPvEe5RFaDXwD6ZwLXrkA=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 4zJ9/i0D6qT42odGNdGTQH8LvSwP3oB1L9xGXSlqgko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5087 (0x13df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Validity Not Before: Jul 2 17:07:57 2025 GMT Not After : Jul 9 17:07:57 2025 GMT Subject: CN=6865676d-1002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:6c:8f:19:99:04:27:ee:ca:90:3c:fa:91: 18:04:da:87:cd:9e:18:ba:7f:f6:49:45:93:e0:b6: 38:d9:2d:8b:41:98:dd:e6:17:f0:c2:90:59:f0:f9: 5c:17:55:12:2a:c0:c6:45:98:e7:bf:7f:11:2e:ee: 7c:04:19:35:47:75:42:7f:dc:2f:fb:32:49:fa:ed: 13:0c:6e:90:11:b6:7e:c5:35:05:81:48:0b:0e:64: c1:cc:09:fd:d0:31:56:2e:45:de:10:d6:87:db:7a: 3a:e4:95:cf:2a:86:d0:c9:0e:03:ed:eb:9a:5d:03: fd:d3:f5:84:47:56:f9:4e:8a:bd:a2:c0:c4:52:f8: 5b:83:75:65:df:1c:3b:86:26:40:54:89:9b:4a:3f: 1f:a9:64:7b:75:bc:b0:66:38:c5:3f:44:cf:3a:1e: 21:17:64:6c:fd:82:96:77:6d:ce:e5:ac:da:19:d4: 62:55:1e:93:32:5a:33:d2:ec:43:38:a9:47:5e:d0: f9:2a:f7:96:60:f9:6e:f4:89:d1:2c:71:0f:51:50: 05:da:6a:ab:de:f2:1c:f6:de:66:b4:cb:1d:43:e9: 1f:9d:b0:8a:8a:ea:61:33:21:09:e5:f7:8f:31:86: ee:d2:b5:40:48:2d:4f:dc:eb:e2:b4:91:1a:d1:fc: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:42:57:44:55:29:9E:07:E1:1A:1F:20:29:35:2F:57:CF:66:03 X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4b:bd:38:3d:01:f8:2f:bb:3b:a7:d1:34:49:ee:26:3c:4d: 21:66:0a:6e:c0:bb:55:db:56:ac:de:00:df:b1:23:ad:f8:7e: 33:bc:b2:01:07:b0:5f:eb:9e:43:36:82:24:5f:e3:04:0b:7d: f6:f9:bf:0b:98:e4:c5:29:b3:16:42:34:48:fa:5f:51:04:80: 19:e7:f6:86:7a:fa:d3:a9:1c:3a:b7:1c:f3:67:f1:72:bd:4e: 37:96:4b:20:c8:f7:79:be:fe:28:57:c7:a7:ab:37:a5:4e:26: c2:1a:a0:89:ae:6b:52:1b:2b:10:ed:1d:e9:dd:ee:eb:a6:28: 59:c4:2c:4f:00:84:b9:e7:8c:bf:a9:a3:29:7a:e5:6d:5d:de: 08:61:d8:fd:39:b2:08:f9:64:e1:15:2a:50:17:38:00:6d:8f: dd:37:71:99:e8:73:4d:a1:f0:77:81:93:33:26:8f:35:d9:ee: 28:4d:b6:0d:c3:78:03:00:5f:03:71:1d:db:47:39:b5:a4:4c: 03:38:f8:5f:ce:e2:2e:01:1f:78:57:4f:35:7b:a5:b1:41:d8: 39:ae:1e:44:f3:f4:99:11:2d:35:77:48:79:be:6c:4a:48:27: 3b:f2:ae:bd:ed:94:bf:56:33:7e:7c:95:3a:f9:19:8e:ed:41: 06:77:2c:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjUwNzAyMTcwNzU3WhcNMjUwNzA5MTcwNzU3WjAYMRYwFAYD VQQDEw02ODY1Njc2ZC0xMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0FsjxmZBCfuypA8+pEYBNqHzZ4Yun/2SUWT4LY42S2LQZjd5hfwwpBZ8Plc F1USKsDGRZjnv38RLu58BBk1R3VCf9wv+zJJ+u0TDG6QEbZ+xTUFgUgLDmTBzAn9 0DFWLkXeENaH23o65JXPKobQyQ4D7euaXQP90/WER1b5Toq9osDEUvhbg3Vl3xw7 hiZAVImbSj8fqWR7dbywZjjFP0TPOh4hF2Rs/YKWd23O5azaGdRiVR6TMloz0uxD OKlHXtD5KveWYPlu9InRLHEPUVAF2mqr3vIc9t5mtMsdQ+kfnbCKiuphMyEJ5feP MYbu0rVASC1P3OvitJEa0fwKMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQBQldE VSmeB+EaHyApNS9Xz2YDMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0S704PQH4L7s7p9E0Se4mPE0hZgpuwLtV21as3gDfsSOt+H4zvLIB B7Bf655DNoIkX+MEC332+b8LmOTFKbMWQjRI+l9RBIAZ5/aGevrTqRw6txzzZ/Fy vU43lksgyPd5vv4oV8enqzelTibCGqCJrmtSGysQ7R3p3e7rpihZxCxPAIS554y/ qaMpeuVtXd4IYdj9ObII+WThFSpQFzgAbY/dN3GZ6HNNofB3gZMzJo812e4oTbYN w3gDAF8DcR3bRzm1pEwDOPhfzuIuAR94V081e6WxQdg5rh5E8/SZES01d0h5vmxK SCc78q697ZS/VjN+fJU6+RmO7UEGdyz2 -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:11 2025 by rpki-client