$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: BsxPgSkapvo2d7I4a43C39In5lcukMNoFNKirBj+rL4= Subject key identifier: 32:71:C0:27:38:5C:6F:D6:9C:48:F5:E0:D5:B9:60:80:24:92:BB:FC Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0B12 Signing time: Wed 02 Jul 2025 19:30:45 +0000 Manifest this update: Wed 02 Jul 2025 19:30:44 +0000 Manifest next update: Wed 09 Jul 2025 19:30:44 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: 6dgVRwoPKQezeDBssdzD2TdfaVrMq/VjHI99SWtkq9g=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: cME7E3dTvb+EGAR48GSsEEHAaLVHg6TnnZaiv9ezcQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2840 (0xb18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: Jul 2 19:30:44 2025 GMT Not After : Jul 9 19:30:44 2025 GMT Subject: CN=686588e4-6918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:2a:47:ce:57:5b:c7:e9:87:5b:ae:9f:93: c5:11:3a:bc:aa:71:ac:2c:77:dc:9f:89:44:1f:ad: 9e:3e:59:91:d4:f2:a4:30:8e:a1:5f:2d:fc:cc:70: c1:fc:8e:25:92:8d:0d:fd:d0:66:5b:06:45:1c:6c: 30:fd:60:d0:87:47:e6:7a:68:01:21:98:e6:dd:6d: a0:33:23:30:76:07:59:1b:06:24:35:9c:46:af:15: 1d:de:35:7d:59:6f:c7:a9:a8:19:c2:86:ef:bf:90: 55:c9:8d:c0:f3:10:b6:d6:e6:04:28:0d:0d:3a:6f: 1d:e1:9a:ca:77:88:67:55:f7:76:d7:a1:37:07:48: f4:32:07:ec:35:28:86:b4:3d:4b:6a:27:8d:f6:2e: a1:1e:c7:61:c0:c2:1e:a8:dd:0e:97:65:fe:a2:dd: 71:bf:f7:7d:47:eb:69:8f:c3:30:6f:61:3f:b7:ac: 6e:58:05:37:aa:26:f4:61:1b:5b:d4:02:0d:22:d0: bb:b4:a9:5a:b2:a6:e7:c7:62:c6:3a:df:f6:6f:f9: f2:d2:fc:87:87:f9:b9:18:3e:71:2c:6f:04:3a:1c: 19:0b:b0:4a:3c:26:b8:2f:5f:98:16:d7:78:d5:74: a2:37:77:a6:f5:1d:76:58:2f:32:d6:c9:77:83:08: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:C0:27:38:5C:6F:D6:9C:48:F5:E0:D5:B9:60:80:24:92:BB:FC X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:be:80:c9:42:be:9e:01:33:4c:42:c8:4c:bc:38:27:07:09: 89:ae:ba:2a:c6:bb:fa:38:99:cd:1f:77:79:f7:c5:65:d0:05: 04:22:52:21:00:89:26:c1:43:01:29:03:97:d6:e0:dd:08:04: 2c:07:b5:e7:a9:64:f4:dd:a0:e6:a9:c5:d2:97:bb:c9:fb:ce: 0a:cd:a7:0b:52:bc:ae:6a:89:7d:a6:74:b2:66:82:36:17:ed: fc:6d:2b:84:a8:5f:31:11:ab:ef:3c:b4:7c:a9:db:4f:28:31: e9:f1:15:90:2e:98:f5:f7:85:a2:96:9e:c7:1e:45:a5:91:ee: 71:2f:ca:8a:16:9d:b7:24:fd:5d:6d:b0:5a:56:57:28:8d:87: ea:e0:ca:33:b5:8f:85:47:32:75:dc:00:c8:5a:9a:80:8b:82: f8:96:af:62:29:70:38:e7:6c:cc:ea:6d:92:02:d0:90:79:18: 17:6f:9d:79:7f:3b:c3:9e:9b:1a:eb:a2:1b:9e:ea:eb:be:b0: b0:3e:14:e7:aa:ae:0f:d6:4f:ff:87:55:cb:15:f3:aa:a8:7a: e0:f5:a4:16:f2:25:84:c3:68:fb:2e:de:a5:23:c7:fa:00:5c: ba:de:0f:21:ac:a5:5d:8b:97:bc:55:be:dc:02:1b:bf:d0:e0: 5d:c6:69:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjUwNzAyMTkzMDQ0WhcNMjUwNzA5MTkzMDQ0WjAYMRYwFAYD VQQDEw02ODY1ODhlNC02OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdYqR85XW8fph1uun5PFETq8qnGsLHfcn4lEH62ePlmR1PKkMI6hXy38zHDB /I4lko0N/dBmWwZFHGww/WDQh0fmemgBIZjm3W2gMyMwdgdZGwYkNZxGrxUd3jV9 WW/HqagZwobvv5BVyY3A8xC21uYEKA0NOm8d4ZrKd4hnVfd216E3B0j0MgfsNSiG tD1LaieN9i6hHsdhwMIeqN0Ol2X+ot1xv/d9R+tpj8Mwb2E/t6xuWAU3qib0YRtb 1AINItC7tKlasqbnx2LGOt/2b/ny0vyHh/m5GD5xLG8EOhwZC7BKPCa4L1+YFtd4 1XSiN3em9R12WC8y1sl3gwhJTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJxwCc4 XG/WnEj14NW5YIAkkrv8MB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGvoDJQr6eATNMQshMvDgnBwmJrroqxrv6OJnNH3d598Vl0AUEIlIh AIkmwUMBKQOX1uDdCAQsB7XnqWT03aDmqcXSl7vJ+84KzacLUryuaol9pnSyZoI2 F+38bSuEqF8xEavvPLR8qdtPKDHp8RWQLpj194Wilp7HHkWlke5xL8qKFp23JP1d bbBaVlcojYfq4MoztY+FRzJ13ADIWpqAi4L4lq9iKXA452zM6m2SAtCQeRgXb515 fzvDnpsa66IbnurrvrCwPhTnqq4P1k//h1XLFfOqqHrg9aQW8iWEw2j7Lt6lI8f6 AFy63g8hrKVdi5e8Vb7cAhu/0OBdxmkL -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:23 2025 by rpki-client