$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json) Hash identifier: iiRp9th/WdpZyKQ50aWzOyW2bD1f47nuNVd3RadY7aM= Subject key identifier: 34:F6:D7:3A:7D:38:5B:BC:13:E8:36:68:CE:C3:C1:F6:4B:C4:95:6A Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft Manifest number: 38 Signing time: Sun 29 Jun 2025 06:38:59 +0000 Manifest this update: Sun 29 Jun 2025 06:38:58 +0000 Manifest next update: Sun 06 Jul 2025 06:38:58 +0000 Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: h3giHsIYDz3lvM2oBKX+XszdbFSO0uu7e1AYP2h/kfM=) 2: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (hash: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY=) 3: 4C559E64054B11F08646F910C4F9AE02.roa (hash: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Validity Not Before: Jun 29 06:38:58 2025 GMT Not After : Jul 6 06:38:58 2025 GMT Subject: CN=6860df82-d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:fe:35:3a:a5:cc:a1:0b:66:0d:16:c4:db: 86:8b:4e:e2:46:b0:1c:32:7c:80:75:be:78:41:fd: 5e:9a:27:76:42:fe:66:4b:50:11:83:94:ed:87:d5: 8c:21:fb:38:b1:8d:14:b9:f9:2e:a5:a7:26:1f:8c: fb:37:4e:9b:0e:d4:bc:55:29:90:24:63:7b:d9:4c: 56:cf:8a:7f:92:8d:3d:3c:7c:ce:ac:16:81:25:b0: c1:a1:17:ac:32:94:d0:5a:44:10:0e:89:f1:0a:75: 3a:99:0d:a7:9a:2b:6c:a2:9d:81:36:ef:7f:de:7e: ab:62:da:e8:2c:3b:2e:fb:e4:2c:f0:69:f9:07:68: 7f:77:24:d0:e9:8e:1e:85:82:d4:bc:59:e6:15:9f: 8b:a8:89:cd:ec:90:51:27:ef:cc:c1:84:c8:7b:70: 55:04:bf:c6:30:93:95:bd:08:6f:4e:f0:b5:35:58: 32:c9:03:45:5d:35:80:c9:92:2b:36:c8:43:0a:84: bf:f1:0a:1c:cb:42:dd:2b:47:8a:60:77:0d:8a:2c: 1b:a7:bd:ec:af:11:c6:f3:f9:d8:e5:3c:81:63:9d: 77:f0:2a:fe:a2:f2:42:94:19:1d:1e:8a:63:5f:a9: a4:d3:0b:62:de:6d:90:c2:5e:a7:e2:e6:b2:93:2c: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:D7:3A:7D:38:5B:BC:13:E8:36:68:CE:C3:C1:F6:4B:C4:95:6A X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6a:29:31:90:3f:09:60:6b:b5:31:66:ae:83:53:f1:56:1f: 72:e6:cf:cb:bd:4a:2d:99:e7:c0:1d:42:b4:a4:09:78:a2:db: bf:97:21:b5:c9:1b:3d:71:69:61:b2:94:49:92:ca:ba:59:0b: bb:cd:e0:f4:48:dd:ff:f0:a5:67:cc:29:4f:3a:31:ad:ec:57: 00:cb:be:18:31:c0:eb:af:d7:55:81:ad:99:6e:28:2c:a6:a5: 9c:2a:07:c2:a6:91:ea:98:9b:fc:4f:43:6f:ae:40:b0:43:bf: ce:8f:d6:d5:74:44:7d:d2:d6:30:9b:80:95:67:6b:a4:6f:9e: bf:f5:04:4f:4e:cb:70:77:88:61:1f:a7:cd:55:5d:e9:b2:42: 00:56:0d:27:cc:d0:77:17:fb:b2:90:1b:9c:89:7a:c3:9c:8a: 4f:09:1f:57:19:fb:34:4f:cf:5f:3f:f5:db:b2:a8:40:b3:bc: 80:9c:84:ac:51:44:07:43:0a:a8:28:f0:8d:35:55:3f:8f:49: 27:53:4f:70:54:a7:71:fa:0e:ec:c3:34:05:fb:36:09:86:8f: 6e:9f:92:29:71:e0:f0:9d:c4:55:41:13:97:bc:bb:e0:4e:30: ac:a1:3f:bc:de:9f:6b:d9:e7:4f:d3:89:62:ca:cd:2e:e3:ce: 9b:2a:7f:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTA2MjkwNjM4NThaFw0yNTA3MDYwNjM4NThaMBgxFjAUBgNV BAMTDTY4NjBkZjgyLWQ5Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJpv41OqXMoQtmDRbE24aLTuJGsBwyfIB1vnhB/V6aJ3ZC/mZLUBGDlO2H1Ywh +zixjRS5+S6lpyYfjPs3TpsO1LxVKZAkY3vZTFbPin+SjT08fM6sFoElsMGhF6wy lNBaRBAOifEKdTqZDaeaK2yinYE273/efqti2ugsOy775CzwafkHaH93JNDpjh6F gtS8WeYVn4uoic3skFEn78zBhMh7cFUEv8Ywk5W9CG9O8LU1WDLJA0VdNYDJkis2 yEMKhL/xChzLQt0rR4pgdw2KLBunveyvEcbz+djlPIFjnXfwKv6i8kKUGR0eimNf qaTTC2LebZDCXqfi5rKTLGXtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNPbXOn04 W7wT6DZozsPB9kvElWowHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTI3L0MxMDZEMzNDMDREQzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dS dkU0cjJ6Ymlqc0k4RHZyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBqKTGQPwlga7UxZq6DU/FWH3Lmz8u9Si2Z58AdQrSkCXii27+XIbXJ Gz1xaWGylEmSyrpZC7vN4PRI3f/wpWfMKU86Ma3sVwDLvhgxwOuv11WBrZluKCym pZwqB8KmkeqYm/xPQ2+uQLBDv86P1tV0RH3S1jCbgJVna6Rvnr/1BE9Oy3B3iGEf p81VXemyQgBWDSfM0HcX+7KQG5yJesOcik8JH1cZ+zRPz18/9duyqECzvICchKxR RAdDCqgo8I01VT+PSSdTT3BUp3H6DuzDNAX7NgmGj26fkilx4PCdxFVBE5e8u+BO MKyhP7zen2vZ50/TiWLKzS7jzpsqf1c= -----END CERTIFICATE-----Generated at Tue Jul 1 08:10:38 2025 by rpki-client