$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: +1X/9qzISZzJ8elUpHKHMT3oFA8o6S3ahVMJ6fjpfSI= Subject key identifier: 6D:31:1A:48:32:B0:38:72:9C:39:58:5F:89:1E:F0:F3:D9:4D:9C:AC Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:10:39 +0000 Manifest this update: Thu 03 Jul 2025 06:10:38 +0000 Manifest next update: Thu 10 Jul 2025 06:10:38 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: wQ+vsFLcV4KCQo10jP1mTT9t1wavFUxFw+dRMJUXkBU=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Jul 3 06:10:38 2025 GMT Not After : Jul 10 06:10:38 2025 GMT Subject: CN=68661ede-5011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:57:7c:c7:9e:79:0a:25:6d:f0:60:5f:d9: 20:33:d0:bb:d5:cb:7d:44:a6:90:ae:3d:80:7d:ea: a9:d9:73:75:78:90:07:67:25:1b:b6:39:14:ff:f5: f4:62:f3:58:c9:88:98:4c:9a:bb:b0:5f:1d:dd:3b: 01:69:1a:8d:c4:3a:64:ce:54:5f:ba:40:ac:1d:53: 2c:d4:e4:3c:0a:76:7a:40:19:fa:e4:3a:d8:7e:53: ae:b2:eb:f3:62:ea:c0:f0:9d:41:ab:89:58:99:56: ae:f9:be:12:17:36:28:01:0c:28:ae:fb:ce:0c:f2: fa:86:52:be:7c:2c:68:0e:fe:f0:27:58:44:cc:20: fe:d9:c1:66:79:88:7d:72:fa:ee:31:ce:0b:4a:af: 15:dc:a8:81:a1:7c:08:74:5e:33:a6:f7:bd:06:c6: 0f:5c:8e:9b:18:4b:1b:b8:5c:2d:1e:73:eb:0f:88: 57:90:d0:ae:04:35:ab:d0:4a:c5:67:e1:7a:d5:c5: c0:ca:46:6b:a0:c3:d8:e7:cf:a5:28:37:f8:3f:bf: 1b:0f:e7:0c:b2:57:07:e6:13:06:e0:21:9e:2a:df: 0b:4e:60:d6:d5:81:e3:c1:f3:ee:66:80:97:cd:49: 55:2b:0c:32:4d:23:3b:5f:95:e9:c5:42:17:d9:e2: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:31:1A:48:32:B0:38:72:9C:39:58:5F:89:1E:F0:F3:D9:4D:9C:AC X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:47:2b:25:e5:df:55:0c:30:80:ea:52:fa:8a:93:ff:b8:bd: d5:c3:eb:44:d8:a4:90:a4:2b:72:c1:2f:bb:e5:34:f9:4d:66: 68:13:38:21:fc:29:eb:d3:89:29:28:44:39:7e:78:60:93:3e: bf:4b:07:29:56:62:6c:05:c2:d3:39:46:1c:dc:74:ca:45:27: 6c:2d:4b:ce:bf:20:92:ae:91:01:e5:ac:bb:7c:9a:97:48:fa: 5f:4a:ce:d5:49:99:df:db:71:ef:f6:ca:59:09:70:f0:7e:f6: 1b:82:61:89:1e:ad:8a:73:eb:3f:99:04:5a:67:10:e9:e8:83: 14:bd:b8:83:a1:ff:22:5f:6f:02:41:25:fe:4c:c8:05:23:52: b5:cb:85:84:f7:b7:65:61:de:2c:63:26:49:8f:e1:dd:8a:6d: a3:cd:b8:b5:89:4c:5a:54:1f:51:89:61:a3:34:7e:16:17:2f: bb:b9:03:cf:63:56:c4:83:cf:0e:35:12:28:27:9d:5d:fa:0b: 3a:04:7c:4b:9c:4f:ee:00:da:20:b0:82:b1:6b:6f:48:f8:15: 14:0a:be:6d:c8:51:90:17:76:b7:ad:85:3a:b9:40:59:89:4b: 20:b9:86:ad:b5:e4:fc:56:00:03:42:1e:03:62:e5:ff:93:f5: 13:78:da:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUwNzAzMDYxMDM4WhcNMjUwNzEwMDYxMDM4WjAYMRYwFAYD VQQDEw02ODY2MWVkZS01MDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6pXfMeeeQolbfBgX9kgM9C71ct9RKaQrj2Afeqp2XN1eJAHZyUbtjkU//X0 YvNYyYiYTJq7sF8d3TsBaRqNxDpkzlRfukCsHVMs1OQ8CnZ6QBn65DrYflOusuvz YurA8J1Bq4lYmVau+b4SFzYoAQworvvODPL6hlK+fCxoDv7wJ1hEzCD+2cFmeYh9 cvruMc4LSq8V3KiBoXwIdF4zpve9BsYPXI6bGEsbuFwtHnPrD4hXkNCuBDWr0ErF Z+F61cXAykZroMPY58+lKDf4P78bD+cMslcH5hMG4CGeKt8LTmDW1YHjwfPuZoCX zUlVKwwyTSM7X5XpxUIX2eI8GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0xGkgy sDhynDlYX4ke8PPZTZysMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQRysl5d9VDDCA6lL6ipP/uL3Vw+tE2KSQpCtywS+75TT5TWZoEzgh /Cnr04kpKEQ5fnhgkz6/SwcpVmJsBcLTOUYc3HTKRSdsLUvOvyCSrpEB5ay7fJqX SPpfSs7VSZnf23Hv9spZCXDwfvYbgmGJHq2Kc+s/mQRaZxDp6IMUvbiDof8iX28C QSX+TMgFI1K1y4WE97dlYd4sYyZJj+Hdim2jzbi1iUxaVB9RiWGjNH4WFy+7uQPP Y1bEg88ONRIoJ51d+gs6BHxLnE/uANogsIKxa29I+BUUCr5tyFGQF3a3rYU6uUBZ iUsguYatteT8VgADQh4DYuX/k/UTeNr8 -----END CERTIFICATE-----Generated at Thu Jul 3 09:58:30 2025 by rpki-client