$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json) Hash identifier: 5QsGInc38KMn+ZTHkCnqVm0w9xw1Eg2U6Cx5i1JcvGA= Subject key identifier: CA:AC:D4:09:47:B3:6C:AA:94:28:98:73:48:0C:D3:A9:14:B3:9C:74 Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft Manifest number: 0128 Signing time: Thu 03 Jul 2025 04:45:52 +0000 Manifest this update: Thu 03 Jul 2025 04:45:51 +0000 Manifest next update: Thu 10 Jul 2025 04:45:51 +0000 Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: JqAlphrObnEqZP6qcBmIN3nL/t9XFlyqk4Epj3MOxw8=) 2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: fv6RLao5liFr7afB3PhUjumYqWdJXB/03IwWC/f2YMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Validity Not Before: Jul 3 04:45:51 2025 GMT Not After : Jul 10 04:45:51 2025 GMT Subject: CN=68660aff-4625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:22:45:3c:14:94:65:6d:29:0d:8a:f1:ce:22: 45:90:9b:63:5e:f1:ea:a6:2e:06:a6:52:89:14:41: 87:34:20:c9:84:da:81:05:14:6b:7e:47:37:09:3f: d4:71:4d:3d:4c:bc:08:a7:c5:37:8f:ee:2c:39:5d: 90:4a:d9:74:d7:3d:25:5d:85:c0:bf:80:45:d3:4a: b1:b3:2f:02:f4:f1:00:9b:3b:39:37:9a:ae:9e:75: 30:3a:22:2f:35:50:fd:06:41:e8:e1:16:08:a6:48: f0:0f:09:38:6b:cb:86:d4:ca:75:80:1a:4c:f1:b9: d9:97:47:a8:5c:11:54:b7:eb:a6:c0:5e:2f:b5:57: 46:0d:03:e0:78:a7:83:ef:ce:1a:08:db:f8:ac:59: 1e:b3:60:a0:e8:f1:e0:5e:90:cf:de:99:8d:df:83: b8:a3:f8:9b:88:b1:34:6f:0d:5e:f3:1d:ce:82:db: 32:6e:84:21:08:a1:71:b8:10:85:7b:aa:50:67:4e: fb:f6:da:3a:6d:f5:dc:8b:56:28:70:72:25:0f:a5: 56:c1:d6:27:22:b1:ec:03:98:74:b8:c0:78:6d:81: 2c:45:1a:4e:64:2e:e7:d0:60:39:30:75:50:26:61: 86:3a:5a:9f:93:55:51:93:fd:68:be:dd:28:ae:b0: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AC:D4:09:47:B3:6C:AA:94:28:98:73:48:0C:D3:A9:14:B3:9C:74 X509v3 Authority Key Identifier: keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:99:e8:99:e4:16:2e:f0:8e:3c:db:c1:db:c9:a9:cb:46:ee: 10:1f:45:34:20:9f:2c:51:a2:08:8d:cf:d3:e7:4e:23:c1:ac: 9f:88:84:5c:ae:f4:91:1d:46:9c:85:29:98:f0:22:ab:d0:7e: 56:06:d8:60:24:e7:9e:82:e4:a9:22:ed:f2:b0:70:ba:b1:f1: 07:44:c5:b4:3c:73:35:e6:5e:ba:7a:82:b8:86:8e:04:9e:10: ec:7c:c6:cb:c8:c2:ad:8e:c8:97:3a:ab:e3:fa:90:fb:52:84: 05:6c:a0:09:68:65:5c:a0:e6:0f:46:06:ca:f2:65:b4:af:c2: 85:e3:2e:ff:10:f4:71:50:f8:4e:19:03:48:bb:f2:10:55:e0: c5:47:09:b2:c9:44:ea:5c:fb:db:ad:23:a9:33:50:9c:50:b8: 0d:6f:1e:a5:56:db:87:5b:1c:95:a7:ca:c0:0e:68:c8:20:48: 70:a9:f2:f9:b4:7b:c6:f3:2a:77:ce:fd:86:8f:c3:e6:80:bc: 39:8d:2f:46:e6:b7:18:03:a4:69:d0:c3:fe:ac:90:c0:25:bf: ce:9b:a4:f1:9c:f8:a7:58:e3:53:dc:f6:de:8d:ac:a8:af:36: 43:0f:20:f7:3a:b3:d0:9f:9a:f7:40:21:4b:59:50:a6:5c:07: fe:3a:4a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDhGQTY5ODY1MUM3QUMyNERCODI3RDIzOUQwRkM4QjJD OERBMzY2QjgwHhcNMjUwNzAzMDQ0NTUxWhcNMjUwNzEwMDQ0NTUxWjAYMRYwFAYD VQQDEw02ODY2MGFmZi00NjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iJFPBSUZW0pDYrxziJFkJtjXvHqpi4GplKJFEGHNCDJhNqBBRRrfkc3CT/U cU09TLwIp8U3j+4sOV2QStl01z0lXYXAv4BF00qxsy8C9PEAmzs5N5qunnUwOiIv NVD9BkHo4RYIpkjwDwk4a8uG1Mp1gBpM8bnZl0eoXBFUt+umwF4vtVdGDQPgeKeD 784aCNv4rFkes2Cg6PHgXpDP3pmN34O4o/ibiLE0bw1e8x3OgtsyboQhCKFxuBCF e6pQZ0779to6bfXci1YocHIlD6VWwdYnIrHsA5h0uMB4bYEsRRpOZC7n0GA5MHVQ JmGGOlqfk1VRk/1ovt0orrDx5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqs1AlH s2yqlCiYc0gM06kUs5x0MB8GA1UdIwQYMBaAFI+mmGUcesJNuCfSOdD8iyyNo2a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xRTY3NzdBQTkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4NndrMjRKOUk1MFB5TExJMmpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xRTY3NzdBQTkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4Nndr MjRKOUk1MFB5TExJMmpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZmeiZ5BYu8I4828HbyanLRu4QH0U0IJ8sUaIIjc/T504jwayfiIRc rvSRHUachSmY8CKr0H5WBthgJOeeguSpIu3ysHC6sfEHRMW0PHM15l66eoK4ho4E nhDsfMbLyMKtjsiXOqvj+pD7UoQFbKAJaGVcoOYPRgbK8mW0r8KF4y7/EPRxUPhO GQNIu/IQVeDFRwmyyUTqXPvbrSOpM1CcULgNbx6lVtuHWxyVp8rADmjIIEhwqfL5 tHvG8yp3zv2Gj8PmgLw5jS9G5rcYA6Rp0MP+rJDAJb/Om6TxnPinWONT3Pbejayo rzZDDyD3OrPQn5r3QCFLWVCmXAf+Okqt -----END CERTIFICATE-----Generated at Fri Jul 4 07:08:23 2025 by rpki-client