$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: o3INCFlhTCWdUjJv+9hnKCUfbwlO+7i+hny9MGgIjPs= Subject key identifier: 40:D6:F6:05:37:AD:FA:9D:B1:D5:93:9A:3F:0C:01:9F:CB:4F:A1:E1 Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: DA Signing time: Tue 01 Jul 2025 06:43:57 +0000 Manifest this update: Tue 01 Jul 2025 06:43:56 +0000 Manifest next update: Tue 08 Jul 2025 06:43:56 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: aMT+zWagTF1HD1hjWzC6wc5TI3ITFrjWjUAn7crC7bA=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: Jul 1 06:43:56 2025 GMT Not After : Jul 8 06:43:56 2025 GMT Subject: CN=686383ad-a63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:53:32:4d:af:f3:e3:03:8d:70:76:1b:e3: d8:3d:33:2b:21:a7:06:a9:73:2d:64:d7:12:53:cd: 5c:72:97:a1:ef:eb:b1:19:f7:b5:a5:b3:e1:ec:bd: b5:b8:16:fb:bc:de:28:15:52:1f:5a:8f:c8:ec:7e: 01:20:da:33:56:c3:2f:f5:03:71:a8:ae:a2:83:c2: 4a:d1:8c:b1:1f:e7:ca:7d:a9:2c:dd:f8:5d:34:c8: 46:d9:30:4d:bf:46:9c:28:de:ec:e0:0a:17:cf:7a: 54:fa:90:98:94:c8:77:8c:93:46:0c:aa:66:1c:d2: c8:31:8c:39:b6:7d:51:66:bf:5e:7e:93:e6:b1:6c: 74:66:6c:22:43:47:73:aa:a2:a3:7c:9b:ae:d8:d7: 6a:21:d7:a2:a9:72:27:28:bc:8b:02:7b:5c:c8:b4: 15:23:15:af:30:44:86:34:8f:19:e9:e3:af:5c:0c: 3c:59:11:62:8d:2a:82:a9:76:fb:2c:74:6c:3a:0e: 1e:2f:49:27:bc:e8:ec:95:e1:71:66:2f:9b:97:6b: ac:b6:bd:63:2e:5d:1d:5e:22:20:95:1e:c5:02:b2: 1b:b0:79:92:17:d2:9c:82:ef:cb:9a:c8:0a:20:e6: d1:21:45:73:71:3b:73:19:5a:3e:82:47:11:5b:d0: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D6:F6:05:37:AD:FA:9D:B1:D5:93:9A:3F:0C:01:9F:CB:4F:A1:E1 X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:43:05:20:d8:26:60:95:67:f9:a6:61:99:25:37:9b:c1:fa: e2:84:d9:a4:72:30:ad:05:8f:73:6b:a9:18:c7:93:c6:3a:16: 51:19:d4:ac:d5:66:2e:81:63:c4:04:31:bc:72:89:ea:63:af: 00:81:59:80:53:8f:6d:dc:fa:1a:e3:05:c7:9b:06:7b:52:0e: a8:24:a1:1e:b6:b3:8d:d1:da:16:a0:cc:b9:e2:9a:5e:3c:c7: 8a:1c:df:ee:38:9a:99:3f:dd:91:24:03:96:64:e4:b5:4b:f7: a7:d2:83:27:8a:bd:a5:0e:6d:f6:a8:18:eb:af:60:41:d8:99: 1a:54:06:9e:5b:0e:8a:ba:c0:ec:97:3f:0c:0a:6f:e3:3d:37: f1:75:95:da:73:f7:e3:ab:4b:e1:6b:6e:72:06:26:99:11:b7: 13:5c:40:a3:3f:24:8d:06:e5:a4:b8:f7:30:06:61:9a:4b:27: 22:b6:65:37:67:d3:c3:31:99:e0:23:e2:78:46:83:91:f9:94: e3:53:49:5b:d1:08:2c:09:9e:29:2c:92:8f:ae:d3:f1:16:bf: 0a:3e:fe:c0:75:6f:2d:b2:12:10:7c:e2:58:9c:48:2c:6a:a1: dc:71:8a:11:58:cd:69:f5:57:55:f3:98:a9:61:f4:99:db:c5: d3:0d:20:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUwNzAxMDY0MzU2WhcNMjUwNzA4MDY0MzU2WjAYMRYwFAYD VQQDEw02ODYzODNhZC1hNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWZTMk2v8+MDjXB2G+PYPTMrIacGqXMtZNcSU81ccpeh7+uxGfe1pbPh7L21 uBb7vN4oFVIfWo/I7H4BINozVsMv9QNxqK6ig8JK0YyxH+fKfaks3fhdNMhG2TBN v0acKN7s4AoXz3pU+pCYlMh3jJNGDKpmHNLIMYw5tn1RZr9efpPmsWx0ZmwiQ0dz qqKjfJuu2NdqIdeiqXInKLyLAntcyLQVIxWvMESGNI8Z6eOvXAw8WRFijSqCqXb7 LHRsOg4eL0knvOjsleFxZi+bl2ustr1jLl0dXiIglR7FArIbsHmSF9Kcgu/LmsgK IObRIUVzcTtzGVo+gkcRW9DWgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDW9gU3 rfqdsdWTmj8MAZ/LT6HhMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2QwUg2CZglWf5pmGZJTebwfrihNmkcjCtBY9za6kYx5PGOhZRGdSs 1WYugWPEBDG8conqY68AgVmAU49t3Poa4wXHmwZ7Ug6oJKEetrON0doWoMy54ppe PMeKHN/uOJqZP92RJAOWZOS1S/en0oMnir2lDm32qBjrr2BB2JkaVAaeWw6KusDs lz8MCm/jPTfxdZXac/fjq0vha25yBiaZEbcTXECjPySNBuWkuPcwBmGaSycitmU3 Z9PDMZngI+J4RoOR+ZTjU0lb0QgsCZ4pLJKPrtPxFr8KPv7AdW8tshIQfOJYnEgs aqHccYoRWM1p9VdV85ipYfSZ28XTDSAp -----END CERTIFICATE-----Generated at Thu Jul 3 06:31:52 2025 by rpki-client