$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft File: jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json) Hash identifier: dJ0/JbGDPObqKEx3cTHJ6tA4ojMAB3b6hY/o1fd34DY= Subject key identifier: 07:55:82:D2:5F:A5:C6:30:AA:69:91:92:CA:38:04:3C:46:E0:C4:FF Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Certificate serial: 03FC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft Manifest number: 03EA Signing time: Wed 02 Jul 2025 23:35:37 +0000 Manifest this update: Wed 02 Jul 2025 23:35:36 +0000 Manifest next update: Wed 09 Jul 2025 23:35:36 +0000 Files and hashes: 1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: Uy10k7N2WQLXFKylwzlhLmme0eQrj+nIjg/dkJqEYLY=) 2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=) 3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1020 (0x3fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Validity Not Before: Jul 2 23:35:36 2025 GMT Not After : Jul 9 23:35:36 2025 GMT Subject: CN=6865c248-ddc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:9b:9d:07:6a:67:e0:57:74:59:22:4f:63: 9c:cb:f5:19:c4:df:10:3e:30:1c:28:7f:f9:bb:8e: a9:b4:60:42:3a:99:39:c4:d9:83:13:40:17:79:b0: 13:84:a4:7a:e3:cd:cf:13:3e:a8:f4:57:e8:81:00: 3c:16:c0:00:a3:bc:f3:ca:5a:33:1b:c9:4e:1e:ff: 53:25:55:b6:47:8c:ff:21:c6:89:ce:d4:a7:9f:0c: 59:d9:5c:4e:9c:bf:97:a2:6f:d0:62:4c:6d:ed:4f: bb:95:be:5b:77:34:9b:83:e3:3f:e0:f6:4e:32:93: d9:d6:c9:2e:ef:db:45:37:63:1d:83:01:8c:ec:d4: 68:bb:b9:ea:bf:65:c1:fe:82:cd:38:6c:3a:5d:f7: 72:f9:00:35:54:b9:79:b6:af:2d:72:63:3a:64:a3: 69:cd:0d:c0:60:14:44:8d:ee:b7:d5:99:5f:1d:f1: 67:c7:e2:b4:b1:9a:e9:66:19:f8:8d:74:de:14:af: d7:e9:bf:83:37:71:2c:28:0a:06:90:a0:c0:5a:2d: 5e:76:0d:6e:78:f8:03:67:70:a2:d7:de:53:ad:6f: 00:0e:f7:5d:5f:a0:3c:c1:59:dd:64:f5:24:c1:fd: ee:da:14:73:76:29:03:e2:7c:5a:8a:65:48:06:9e: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:55:82:D2:5F:A5:C6:30:AA:69:91:92:CA:38:04:3C:46:E0:C4:FF X509v3 Authority Key Identifier: keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:26:d8:67:9e:c8:97:e8:8e:11:ef:37:21:4c:17:af:6e:22: 66:20:96:9d:9f:ca:46:6c:08:f7:d4:85:25:86:e9:34:13:e0: 26:c3:61:45:69:73:cc:c8:cb:3f:64:f4:ab:39:c5:4d:ae:a5: 8e:9a:b3:26:d2:04:af:e8:87:98:2b:a6:87:38:fb:13:33:c8: 38:98:51:9a:d8:9f:3d:61:0a:4a:49:3e:2d:e5:00:74:42:a4: 44:31:c2:d8:b0:e6:e0:28:4c:ca:af:ed:de:96:51:39:fb:33: e3:46:aa:ed:4e:a9:31:a3:4e:ea:2d:26:95:57:a0:81:11:24: 8e:d2:8c:b0:59:97:11:79:e9:69:c3:51:71:4c:49:cd:cc:54: 0b:a1:74:b0:23:13:80:df:82:5b:cd:41:31:84:a7:89:e4:92: dd:82:df:bd:8c:27:c9:59:d7:49:6e:b6:b0:12:a5:2b:aa:87: df:0e:9c:e9:17:45:1e:7e:69:63:74:ac:51:52:f5:50:a0:82: 25:07:6c:cb:78:fe:6c:54:a3:a4:1d:49:4f:07:66:0f:94:bb: 43:3b:5d:4c:81:53:1f:9a:21:5c:47:7a:09:4d:c0:15:95:c3: 5d:58:71:fb:96:84:9c:0a:92:33:db:e0:6b:8a:aa:62:b8:b0: e7:f4:46:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0 MEJBRDNBREUwHhcNMjUwNzAyMjMzNTM2WhcNMjUwNzA5MjMzNTM2WjAYMRYwFAYD VQQDEw02ODY1YzI0OC1kZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjabnQdqZ+BXdFkiT2Ocy/UZxN8QPjAcKH/5u46ptGBCOpk5xNmDE0AXebAT hKR6483PEz6o9FfogQA8FsAAo7zzylozG8lOHv9TJVW2R4z/IcaJztSnnwxZ2VxO nL+Xom/QYkxt7U+7lb5bdzSbg+M/4PZOMpPZ1sku79tFN2MdgwGM7NRou7nqv2XB /oLNOGw6Xfdy+QA1VLl5tq8tcmM6ZKNpzQ3AYBREje631ZlfHfFnx+K0sZrpZhn4 jXTeFK/X6b+DN3EsKAoGkKDAWi1edg1uePgDZ3Ci195TrW8ADvddX6A8wVndZPUk wf3u2hRzdikD4nxaimVIBp7eiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdVgtJf pcYwqmmRkso4BDxG4MT/MB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4 ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS9BNDZCRTU4ODg4ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgx d3RaanNLYWhDODFBdXRPdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkJthnnsiX6I4R7zchTBevbiJmIJadn8pGbAj31IUlhuk0E+Amw2FF aXPMyMs/ZPSrOcVNrqWOmrMm0gSv6IeYK6aHOPsTM8g4mFGa2J89YQpKST4t5QB0 QqREMcLYsObgKEzKr+3ellE5+zPjRqrtTqkxo07qLSaVV6CBESSO0oywWZcReelp w1FxTEnNzFQLoXSwIxOA34JbzUExhKeJ5JLdgt+9jCfJWddJbrawEqUrqoffDpzp F0UefmljdKxRUvVQoIIlB2zLeP5sVKOkHUlPB2YPlLtDO11MgVMfmiFcR3oJTcAV lcNdWHH7loScCpIz2+BriqpiuLDn9EZb -----END CERTIFICATE-----Generated at Thu Jul 3 10:33:47 2025 by rpki-client