$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json) Hash identifier: rbxjk+hBEOupBX8Ia4WCj0ppHValtFuMW3lKKa2yYMw= Subject key identifier: 45:C0:68:72:F0:F3:F8:86:62:94:53:1B:2A:98:2A:16:DA:E2:91:F0 Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft Manifest number: 6D Signing time: Tue 01 Jul 2025 07:40:41 +0000 Manifest this update: Tue 01 Jul 2025 07:40:41 +0000 Manifest next update: Tue 08 Jul 2025 07:40:41 +0000 Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: b1wD3GSdxEmMs9Wwv7FfzfkECjAW3su5n+D+hJUeZoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Validity Not Before: Jul 1 07:40:41 2025 GMT Not After : Jul 8 07:40:41 2025 GMT Subject: CN=686390f9-2935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:2f:4f:f9:96:07:60:7f:e0:83:38:01:60: a7:1c:10:80:8b:1d:10:9e:c9:d3:84:67:8a:7a:57: b1:4e:5e:4e:2b:00:21:e1:81:29:87:80:a4:eb:2a: 3e:4f:d3:e6:b4:1d:7c:06:51:e2:cc:a9:8a:65:71: ff:67:ba:b1:fa:07:5d:1f:12:f1:08:e8:02:76:70: 0e:63:33:7b:b2:7b:30:82:2e:55:59:45:1b:6e:82: 27:53:34:41:d8:32:27:c4:5d:b7:a0:2c:d7:8d:cd: fe:47:7f:8e:2e:af:e1:3a:98:54:4b:0c:c3:8a:2f: 47:c9:fc:d0:7c:02:b2:97:e7:76:f4:16:b4:9b:50: 1f:58:93:86:21:fe:9b:1c:04:53:cf:88:28:16:ec: 88:ed:02:da:8c:65:d1:aa:02:ac:88:5d:db:12:bb: 80:9b:26:2c:d2:a0:c9:eb:07:19:53:54:47:ce:0a: 9d:67:9d:46:60:11:a2:0a:19:3b:c9:d5:75:c3:e8: eb:03:28:31:9e:6a:d5:35:12:21:37:5b:0b:d9:e1: c0:97:1d:99:08:a0:5b:76:05:b6:fe:f4:5c:41:b0: 08:69:11:18:7a:86:91:b3:dc:0d:8f:c6:fa:a0:36: 2f:8b:bd:e3:d7:19:e3:19:4b:39:d2:3d:11:a5:76: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C0:68:72:F0:F3:F8:86:62:94:53:1B:2A:98:2A:16:DA:E2:91:F0 X509v3 Authority Key Identifier: keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:c4:e6:20:fa:85:1b:4d:64:7b:7a:ae:ed:75:a1:92:2e:76: c8:e9:6e:5f:7e:d1:70:c6:0c:8f:fe:12:0c:3a:ea:aa:a3:ae: f4:d9:60:de:03:c2:fd:a1:e2:42:b1:0c:68:d6:43:1e:3d:c1: a3:c5:cc:7d:30:1b:34:62:0c:13:3d:ee:ab:0e:e0:f7:19:f1: d9:5a:0e:58:d2:79:c5:70:e5:b4:07:43:67:1c:6e:41:4e:76: 4f:46:14:e2:c2:25:92:75:ac:b1:21:d3:ac:82:2d:b2:12:bc: 58:28:6d:fb:51:69:12:71:9d:98:b6:3c:f2:6e:f9:f6:22:65: 22:c3:d5:21:cc:b7:6e:a5:dd:cb:ec:97:96:a4:dc:93:cb:b3: 5a:1f:1c:ff:ad:d3:76:b1:34:fe:3a:24:58:4f:d2:f4:60:d2: 32:61:28:62:44:52:de:cf:5c:38:df:4a:f1:1f:0f:59:ae:1a: ee:5b:5d:13:4a:20:78:b5:04:d0:29:dc:ca:e9:ff:a7:72:8a: 04:7e:40:63:ac:b4:3c:88:f7:1b:8b:1f:b9:d3:e7:dd:f3:7e: 01:2c:9a:83:86:bf:d4:6e:08:d8:d6:76:fe:f5:32:be:fa:42: 57:fb:99:87:10:1d:4f:5b:33:42:1e:4b:ad:7e:55:79:1b:f9: 8f:b8:5e:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoOEUxQ0MxREJGQUJENDBCNjQxNEMyM0UzREZEODkxNDU1 MjdERjMyMTAeFw0yNTA3MDEwNzQwNDFaFw0yNTA3MDgwNzQwNDFaMBgxFjAUBgNV BAMTDTY4NjM5MGY5LTI5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCogi9P+ZYHYH/ggzgBYKccEICLHRCeydOEZ4p6V7FOXk4rACHhgSmHgKTrKj5P 0+a0HXwGUeLMqYplcf9nurH6B10fEvEI6AJ2cA5jM3uyezCCLlVZRRtugidTNEHY MifEXbegLNeNzf5Hf44ur+E6mFRLDMOKL0fJ/NB8ArKX53b0FrSbUB9Yk4Yh/psc BFPPiCgW7IjtAtqMZdGqAqyIXdsSu4CbJizSoMnrBxlTVEfOCp1nnUZgEaIKGTvJ 1XXD6OsDKDGeatU1EiE3WwvZ4cCXHZkIoFt2Bbb+9FxBsAhpERh6hpGz3A2Pxvqg Ni+LvePXGeMZSznSPRGldoJ1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURcBocvDz +IZilFMbKpgqFtrikfAwHwYDVR0jBBgwFoAUjhzB2/q9QLZBTCPj39iRRVJ98yEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0JEODYzRDcyQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamh6QjJfcTlRTFpCVENQajM5aVJSVko5OHlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0JEODYzRDcyQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL2poekIyX3E5UUxa QlRDUGozOWlSUlZKOTh5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL/E5iD6hRtNZHt6ru11oZIudsjpbl9+0XDGDI/+Egw66qqjrvTZYN4D wv2h4kKxDGjWQx49waPFzH0wGzRiDBM97qsO4PcZ8dlaDljSecVw5bQHQ2ccbkFO dk9GFOLCJZJ1rLEh06yCLbISvFgobftRaRJxnZi2PPJu+fYiZSLD1SHMt26l3cvs l5ak3JPLs1ofHP+t03axNP46JFhP0vRg0jJhKGJEUt7PXDjfSvEfD1muGu5bXRNK IHi1BNAp3Mrp/6dyigR+QGOstDyI9xuLH7nT593zfgEsmoOGv9RuCNjWdv71Mr76 Qlf7mYcQHU9bM0IeS61+VXkb+Y+4Xuc= -----END CERTIFICATE-----Generated at Wed Jul 2 22:36:25 2025 by rpki-client