$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: mbA2AE3hJMX2BYNvZm74ckTm6EvnTsODk19flqBF830= Subject key identifier: C2:2A:98:60:43:D8:25:4E:85:D3:D7:A1:64:C0:D7:60:DD:41:A0:5A Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 4D Signing time: Thu 03 Jul 2025 07:32:38 +0000 Manifest this update: Thu 03 Jul 2025 07:32:38 +0000 Manifest next update: Thu 10 Jul 2025 07:32:38 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: /3NGowbq5VmawDaEb+eQni6tKe/k60OulNvjrFFSlyg=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Jul 3 07:32:38 2025 GMT Not After : Jul 10 07:32:38 2025 GMT Subject: CN=68663216-4686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:e8:54:6b:80:54:bb:0e:7e:32:80:63:9e: fe:ad:b1:64:93:09:00:68:95:2b:3d:79:0c:86:92: 6b:22:ab:8b:8a:c5:c7:4a:4c:0f:64:3d:c3:5b:47: f2:fe:35:bb:b3:29:71:c9:f2:67:c3:6d:6d:a2:20: 34:05:db:64:0e:39:6a:72:9f:77:6d:43:14:9f:50: 29:b1:37:04:6b:54:84:7e:80:29:7e:9d:89:7a:34: 45:0a:35:b3:67:8b:1f:01:05:5c:20:13:43:bc:1f: b5:cf:97:24:a6:6b:9e:06:60:7a:27:11:91:72:ce: 3d:62:5b:2e:e2:e3:a8:1e:33:11:d8:e2:6f:2b:4a: e4:86:46:33:ea:d4:e6:4e:7b:96:06:8c:43:1e:b4: b3:5a:08:f7:d4:2a:91:8e:55:8f:2b:e4:e0:80:93: bc:1e:b8:f2:9a:38:91:1c:e1:37:00:35:20:76:1c: ca:d0:5e:f4:55:ed:7b:8a:aa:ed:9c:e4:4c:34:d8: 8a:d9:20:97:72:5c:93:4f:8b:3b:56:0b:e9:9e:8e: aa:4b:e9:89:aa:74:a2:44:67:bd:03:a9:54:33:b3: 48:6a:60:b5:cc:37:ef:80:7d:4f:84:30:9c:ac:0a: 7d:a8:4c:66:e9:13:cb:c3:65:11:b4:b1:9e:77:1d: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:98:60:43:D8:25:4E:85:D3:D7:A1:64:C0:D7:60:DD:41:A0:5A X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f6:ff:fa:aa:3c:dd:75:92:9b:e9:c7:d3:3a:b3:c2:0b:d2: e3:17:78:b8:10:8b:af:fe:7f:eb:52:50:9b:29:60:ea:87:43: 06:76:78:ab:5d:1c:a5:87:7f:50:c8:90:33:f7:11:7e:c2:2e: 1e:d0:c0:04:c3:41:b5:6e:2b:13:12:41:f7:ed:dc:3b:94:bb: 5d:ba:19:05:72:2f:e5:00:87:30:90:ac:87:d8:ea:3f:c4:a3: ed:6d:d1:5b:8a:9a:8b:b5:88:16:eb:50:c5:b7:d5:aa:73:a8: 68:90:fd:88:82:f6:25:36:b1:eb:9b:f5:d7:6e:6e:c6:b5:73: 66:c0:0b:45:f8:35:0b:52:68:cb:6f:5e:03:79:4c:46:70:c6: f9:92:42:b0:ac:1e:45:b1:98:33:13:39:89:c3:1d:37:23:a3: 7d:94:13:21:d1:48:cd:8d:3c:6a:f6:d9:ce:74:ff:41:a1:4a: de:b7:21:5f:d7:8c:8a:4e:fd:8b:5d:59:6c:d7:d8:64:5c:1f: 09:ba:ee:6b:7c:03:c4:19:a7:db:d2:a3:3b:e1:cf:3d:35:6a: 3d:ff:b9:d4:ae:39:62:c4:0e:00:5d:f0:c5:41:62:27:4e:c5: 70:76:87:ce:c1:88:e2:3d:52:c3:9f:c6:b6:bf:8d:a7:82:05: 7f:c7:3c:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTA3MDMwNzMyMzhaFw0yNTA3MTAwNzMyMzhaMBgxFjAUBgNV BAMTDTY4NjYzMjE2LTQ2ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyAehUa4BUuw5+MoBjnv6tsWSTCQBolSs9eQyGkmsiq4uKxcdKTA9kPcNbR/L+ NbuzKXHJ8mfDbW2iIDQF22QOOWpyn3dtQxSfUCmxNwRrVIR+gCl+nYl6NEUKNbNn ix8BBVwgE0O8H7XPlySma54GYHonEZFyzj1iWy7i46geMxHY4m8rSuSGRjPq1OZO e5YGjEMetLNaCPfUKpGOVY8r5OCAk7weuPKaOJEc4TcANSB2HMrQXvRV7XuKqu2c 5Ew02IrZIJdyXJNPiztWC+mejqpL6YmqdKJEZ70DqVQzs0hqYLXMN++AfU+EMJys Cn2oTGbpE8vDZRG0sZ53HdrpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwiqYYEPY JU6F09ehZMDXYN1BoFowHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFn2//qqPN11kpvpx9M6s8IL0uMXeLgQi6/+f+tSUJspYOqHQwZ2eKtd HKWHf1DIkDP3EX7CLh7QwATDQbVuKxMSQfft3DuUu126GQVyL+UAhzCQrIfY6j/E o+1t0VuKmou1iBbrUMW31apzqGiQ/YiC9iU2seub9ddubsa1c2bAC0X4NQtSaMtv XgN5TEZwxvmSQrCsHkWxmDMTOYnDHTcjo32UEyHRSM2NPGr22c50/0GhSt63IV/X jIpO/YtdWWzX2GRcHwm67mt8A8QZp9vSozvhzz01aj3/udSuOWLEDgBd8MVBYidO xXB2h87BiOI9UsOfxra/jaeCBX/HPDU= -----END CERTIFICATE-----Generated at Fri Jul 4 18:06:10 2025 by rpki-client