$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: aYaOGfe4YfAXUCQ9Dz9ocFNcxlsWGeCaCK9bYXHxoTw= Subject key identifier: 28:17:85:E4:CE:64:B5:6C:52:F3:86:EA:46:3B:46:D0:1E:88:F6:D2 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 0198 Signing time: Sun 29 Jun 2025 02:50:19 +0000 Manifest this update: Sun 29 Jun 2025 02:50:19 +0000 Manifest next update: Sun 06 Jul 2025 02:50:19 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: KqsjzQVNOwCQmrSADsL75A5wVNvTeh2HtjHAtWMA7e4=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: MfWpaMS6rRmOY6M0y/tJr6fftibzcsGmZcNhFWcJvTU=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 6poyajPR3BIFUtAmbqebq4DXNDPl9+dp2rS2zBsWMPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Jun 29 02:50:19 2025 GMT Not After : Jul 6 02:50:19 2025 GMT Subject: CN=6860a9eb-def7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:39:91:58:71:ad:24:80:e4:4e:79:88:df: eb:18:3a:f7:22:9c:86:4f:13:94:83:75:20:23:c5: 0c:0b:a5:9b:e6:b2:4d:c3:b3:cf:5c:9b:80:da:d2: 74:27:45:12:94:c3:e7:18:bb:64:9e:d3:63:80:47: 9e:a6:d8:74:11:04:27:80:89:4d:b9:bf:a4:90:d6: 6a:37:a7:7a:38:08:a8:b2:90:a7:a5:ca:80:22:82: 26:de:9c:24:39:e0:d5:2e:aa:67:09:4f:f7:93:80: 3c:a4:41:ff:9e:0b:2d:82:f8:13:ee:ac:b9:96:e0: c8:d6:b9:00:69:05:b0:02:a2:47:7e:60:79:2a:45: e8:bb:4e:f2:2c:1d:da:92:f2:14:13:1c:84:14:9d: 96:7b:af:c0:ca:d7:01:37:27:8e:84:73:85:1d:35: 8d:94:be:95:5a:24:b3:9d:90:14:f3:54:31:9b:55: 69:0d:20:d6:fd:13:58:9a:9c:4e:c2:75:6a:f1:5c: 34:1f:a8:23:c2:6d:d8:06:04:a7:70:7a:70:12:66: db:29:10:77:4c:66:8e:2c:4d:b3:ae:3a:ca:20:44: 30:b7:7e:45:13:dd:07:30:89:3d:bb:66:da:74:0b: 21:75:ee:29:79:4d:68:3c:5e:df:6a:41:eb:97:5e: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:17:85:E4:CE:64:B5:6C:52:F3:86:EA:46:3B:46:D0:1E:88:F6:D2 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c4:02:3c:61:7d:61:fb:7e:c1:4e:d9:ea:57:4a:c2:b3:9e: 27:c5:bd:03:b6:12:1d:3a:1b:e1:f8:bc:1f:32:a8:8c:f9:41: a9:a0:88:d5:dd:31:2d:f6:07:bc:ca:31:a1:af:62:8e:9c:bc: 47:c7:41:26:c5:11:45:30:10:c8:58:66:20:6c:59:ae:9b:91: 33:6d:bf:91:34:81:39:49:a8:87:e5:14:ba:c6:17:15:d3:c1: ba:29:a8:fd:1a:21:cb:fb:58:69:1e:6e:8b:3b:0b:3c:c6:ce: 2e:aa:14:c3:db:04:02:70:18:2e:23:03:ac:29:54:bf:92:bb: 96:7a:8e:24:d8:98:57:92:ca:8c:62:b2:7d:ff:ca:4b:4c:1c: d2:04:b0:e4:f5:d2:8d:58:03:3a:ab:c2:c4:8d:ab:b6:5c:ce: 82:cc:7c:02:c1:c9:d4:69:b7:d3:92:32:79:ba:89:c1:ca:ce: 51:47:3b:55:27:58:56:84:94:48:a2:e3:95:7e:54:ff:69:ce: 80:d1:0b:4c:b3:d1:2a:47:08:ca:79:97:06:2b:a0:da:41:93: a6:df:50:c5:b0:40:87:60:b9:e1:f0:ae:b4:7b:8f:56:78:20: 09:e4:dd:64:e3:3b:66:20:fc:81:04:a7:df:ea:90:a8:e6:95: d8:58:ad:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwNjI5MDI1MDE5WhcNMjUwNzA2MDI1MDE5WjAYMRYwFAYD VQQDEw02ODYwYTllYi1kZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsME5kVhxrSSA5E55iN/rGDr3IpyGTxOUg3UgI8UMC6Wb5rJNw7PPXJuA2tJ0 J0USlMPnGLtkntNjgEeepth0EQQngIlNub+kkNZqN6d6OAiospCnpcqAIoIm3pwk OeDVLqpnCU/3k4A8pEH/ngstgvgT7qy5luDI1rkAaQWwAqJHfmB5KkXou07yLB3a kvIUExyEFJ2We6/AytcBNyeOhHOFHTWNlL6VWiSznZAU81Qxm1VpDSDW/RNYmpxO wnVq8Vw0H6gjwm3YBgSncHpwEmbbKRB3TGaOLE2zrjrKIEQwt35FE90HMIk9u2ba dAshde4peU1oPF7fakHrl15ZIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgXheTO ZLVsUvOG6kY7RtAeiPbSMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQxAI8YX1h+37BTtnqV0rCs54nxb0DthIdOhvh+LwfMqiM+UGpoIjV 3TEt9ge8yjGhr2KOnLxHx0EmxRFFMBDIWGYgbFmum5Ezbb+RNIE5SaiH5RS6xhcV 08G6Kaj9GiHL+1hpHm6LOws8xs4uqhTD2wQCcBguIwOsKVS/kruWeo4k2JhXksqM YrJ9/8pLTBzSBLDk9dKNWAM6q8LEjau2XM6CzHwCwcnUabfTkjJ5uonBys5RRztV J1hWhJRIouOVflT/ac6A0QtMs9EqRwjKeZcGK6DaQZOm31DFsECHYLnh8K60e49W eCAJ5N1k4ztmIPyBBKff6pCo5pXYWK0k -----END CERTIFICATE-----Generated at Sun Jun 29 17:58:22 2025 by rpki-client