$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: BC1LBHH94L8zfS09bl8bXCe8yWCw6NeqsMtgYCh1Iv0= Subject key identifier: 95:E1:3A:1B:28:9E:3E:CA:CD:4C:2A:46:EE:73:DD:8C:21:2B:0A:99 Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: 95 Signing time: Thu 03 Jul 2025 06:37:08 +0000 Manifest this update: Thu 03 Jul 2025 06:37:07 +0000 Manifest next update: Thu 10 Jul 2025 06:37:07 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: mtx1PklMmcJnwRWcyD0k+1lRx+TyYqvPGphcss9wFK8=) 2: B0D54166830311EFBF66FC21C4F9AE02.roa (hash: tZx4V13WdS1YqkwOo/f+c5fdIh0lni7XzhM0Rn3v6tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Jul 3 06:37:07 2025 GMT Not After : Jul 10 06:37:07 2025 GMT Subject: CN=68662514-56f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:c4:f3:52:7f:8b:62:d4:8f:32:df:31:82: ae:03:6c:c4:ab:12:fd:f9:f6:e4:99:84:41:63:b5: fb:dd:57:78:45:f6:2d:7f:b8:e4:38:75:2e:48:69: c6:f2:27:44:f8:b3:d4:b6:78:e4:aa:6b:8a:74:5b: 65:58:2f:ed:07:83:bb:2e:f0:b1:ed:ce:c2:80:ae: 74:55:06:5e:17:34:e5:33:66:2d:60:36:34:48:de: 94:27:22:9c:d0:3b:91:8e:8a:ae:18:34:cf:44:7d: 92:04:33:82:59:90:bb:b0:02:17:b2:ab:46:72:2c: a9:ca:de:94:79:df:e0:b5:c3:c4:52:5c:08:d8:09: ec:c4:af:76:d7:9e:e5:a3:04:10:2b:3e:5c:ec:86: f4:d5:a9:c6:9e:46:6a:bd:5c:6e:91:fc:bb:d0:5a: fe:3a:da:b1:4a:dd:9a:4f:0f:27:44:fb:53:be:73: 86:64:ab:12:0b:3e:43:54:b6:18:14:35:c0:65:f7: b4:18:df:ea:57:73:4f:b7:ac:5c:67:f4:aa:41:80: 43:76:89:8e:a2:02:e2:a8:df:4c:fb:f2:c3:20:bf: b3:d6:c8:d3:eb:17:51:0f:c5:15:56:7e:7e:9c:08: 84:b7:9b:9b:12:4a:b7:39:8f:08:3e:a4:2d:e0:3a: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E1:3A:1B:28:9E:3E:CA:CD:4C:2A:46:EE:73:DD:8C:21:2B:0A:99 X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:71:97:48:bb:f6:89:b8:c5:c4:3c:2c:af:92:30:f1:cc:aa: 06:12:6a:45:63:31:f9:ce:67:66:cb:11:dd:15:9c:55:ce:ea: fd:63:f7:36:16:71:16:cf:08:78:32:43:14:74:9e:54:23:eb: 45:0d:cd:fd:c7:d1:d2:3c:4c:4c:73:72:40:19:eb:e3:09:a1: f5:2c:52:a0:b6:c5:5f:9f:f2:fd:63:63:7e:e9:40:de:5f:89: 9f:2b:7d:d7:cb:5b:c9:fe:63:c3:32:18:fb:2b:8d:e4:ed:5c: c4:ea:bb:c7:03:43:23:25:6f:14:90:dc:81:e0:54:12:79:08: a9:44:f1:fc:7b:99:f8:32:b4:8d:83:28:28:5e:93:df:5d:9e: 0d:f2:78:0d:9f:49:8c:08:9d:03:0d:ce:15:7f:61:1c:87:d6: 45:db:45:92:dc:15:b7:96:ff:7a:5c:ee:bd:cb:9f:60:ce:3b: 9e:67:25:a7:67:c4:47:58:72:ec:1a:b2:5a:24:71:d6:69:f3: ca:f7:0a:f7:d7:4a:e2:81:02:f2:7d:17:f1:40:99:51:ff:5e: e2:0f:f0:8d:63:ed:7e:f8:8a:3d:ce:08:76:67:28:9f:9e:33: e2:56:b7:d9:54:23:f0:b6:3b:53:61:55:03:ad:9c:c2:a6:55: d2:47:49:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjUwNzAzMDYzNzA3WhcNMjUwNzEwMDYzNzA3WjAYMRYwFAYD VQQDEw02ODY2MjUxNC01NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mPE81J/i2LUjzLfMYKuA2zEqxL9+fbkmYRBY7X73Vd4RfYtf7jkOHUuSGnG 8idE+LPUtnjkqmuKdFtlWC/tB4O7LvCx7c7CgK50VQZeFzTlM2YtYDY0SN6UJyKc 0DuRjoquGDTPRH2SBDOCWZC7sAIXsqtGciypyt6Ued/gtcPEUlwI2AnsxK92157l owQQKz5c7Ib01anGnkZqvVxukfy70Fr+OtqxSt2aTw8nRPtTvnOGZKsSCz5DVLYY FDXAZfe0GN/qV3NPt6xcZ/SqQYBDdomOogLiqN9M+/LDIL+z1sjT6xdRD8UVVn5+ nAiEt5ubEkq3OY8IPqQt4Dr1BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXhOhso nj7KzUwqRu5z3YwhKwqZMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCscZdIu/aJuMXEPCyvkjDxzKoGEmpFYzH5zmdmyxHdFZxVzur9Y/c2 FnEWzwh4MkMUdJ5UI+tFDc39x9HSPExMc3JAGevjCaH1LFKgtsVfn/L9Y2N+6UDe X4mfK33Xy1vJ/mPDMhj7K43k7VzE6rvHA0MjJW8UkNyB4FQSeQipRPH8e5n4MrSN gygoXpPfXZ4N8ngNn0mMCJ0DDc4Vf2Ech9ZF20WS3BW3lv96XO69y59gzjueZyWn Z8RHWHLsGrJaJHHWafPK9wr310rigQLyfRfxQJlR/17iD/CNY+1++Io9zgh2Zyif njPiVrfZVCPwtjtTYVUDrZzCplXSR0nO -----END CERTIFICATE-----Generated at Thu Jul 3 23:04:35 2025 by rpki-client