$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: YtqvUWyeoFufr4qzEFaKK6bDVae4Lwyi1DxT4Low7q4= Subject key identifier: AD:C9:3A:69:FF:D5:2C:5F:93:0B:5A:9C:55:10:0D:4F:2B:72:8A:73 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1A6B Signing time: Wed 02 Jul 2025 16:27:55 +0000 Manifest this update: Wed 02 Jul 2025 16:27:55 +0000 Manifest next update: Wed 09 Jul 2025 16:27:55 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: /EiCR/O41OlhZ9hH8PN6wNy6DT1yQZk0AY2Lhk4GNOs=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6773 (0x1a75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Jul 2 16:27:55 2025 GMT Not After : Jul 9 16:27:55 2025 GMT Subject: CN=68655e0b-25c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1a:74:2d:43:03:36:df:5a:de:df:8e:f5:40: f2:4f:7b:53:33:19:f0:5c:15:c3:63:ca:11:56:80: 6b:bb:f2:06:91:65:60:cd:35:a7:d4:90:18:89:c0: 57:3c:0e:a5:e9:dc:aa:f3:a1:13:23:8d:42:11:7f: 59:95:2c:fa:74:e3:3e:6b:e2:83:89:1a:5f:02:da: 38:67:d8:28:f0:08:a9:e8:a4:8b:87:d6:47:5f:cd: b0:4a:47:6e:e1:e8:8f:74:2a:36:82:ac:1a:90:f2: d7:72:45:62:37:ec:b3:e3:a7:40:4d:79:15:fa:e2: 77:9c:f4:83:2b:21:93:54:66:31:5f:d8:8e:be:e1: a6:2a:ba:56:ca:f9:c5:71:10:17:62:7d:17:6a:42: 4f:ac:0f:04:bb:01:06:45:53:e0:00:f9:cf:ab:02: 1f:cf:c2:53:6b:31:a8:44:6b:ff:38:e2:67:17:1b: ef:61:8f:99:75:81:99:f0:62:49:b6:96:0c:36:64: 4b:27:a1:54:0c:88:45:1e:fb:cc:62:9f:e1:88:1c: 4f:dc:c0:82:ac:a2:13:17:89:c0:3a:b0:a6:75:21: da:83:e4:f7:26:4a:3e:e6:0f:7c:1f:cd:8c:14:80: 8f:a0:19:13:fd:53:10:03:af:7d:b3:23:09:cb:a5: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C9:3A:69:FF:D5:2C:5F:93:0B:5A:9C:55:10:0D:4F:2B:72:8A:73 X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f9:96:d7:07:13:cd:fe:74:12:d4:f6:e5:3f:c4:e0:8a:8f: 5a:8a:5d:07:de:5a:1d:d9:b2:86:ef:51:d3:e4:38:bd:ee:9f: 8e:0e:dc:87:4e:06:eb:ee:3c:85:9a:92:9f:73:ad:3e:9f:ba: eb:c5:10:2e:3b:46:f5:2b:96:28:16:45:3a:80:a2:f0:22:90: b0:12:2f:e8:6c:0f:4c:aa:e6:76:93:51:d0:00:a4:a2:f4:7b: 79:69:27:f1:27:76:a1:9e:ac:02:93:51:d0:59:b8:6e:31:6c: b8:dc:41:d7:eb:35:84:d7:dc:2f:66:4b:15:88:12:a0:ed:8b: eb:bf:fb:b3:21:33:35:14:60:f8:fd:f4:12:6b:9e:d1:e9:55: fa:85:43:40:ca:d4:23:3e:0c:44:f7:db:de:35:18:a8:f2:f3: 67:b6:99:a4:67:df:75:4d:89:63:bd:d4:ca:5e:54:74:96:16: 4d:d7:ec:51:34:4e:14:b6:7c:54:ad:22:de:77:2d:56:f2:4a: fb:59:13:ce:97:12:0f:71:0a:b9:8c:c9:a8:50:0f:1c:83:f2: 2f:13:16:50:d1:72:af:b1:33:12:5d:33:a5:8b:6c:19:41:99: 86:91:45:3b:56:89:89:64:2f:af:d3:5f:13:d1:a1:ff:96:35: 4f:7f:d7:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwNzAyMTYyNzU1WhcNMjUwNzA5MTYyNzU1WjAYMRYwFAYD VQQDEw02ODY1NWUwYi0yNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9hp0LUMDNt9a3t+O9UDyT3tTMxnwXBXDY8oRVoBru/IGkWVgzTWn1JAYicBX PA6l6dyq86ETI41CEX9ZlSz6dOM+a+KDiRpfAto4Z9go8Aip6KSLh9ZHX82wSkdu 4eiPdCo2gqwakPLXckViN+yz46dATXkV+uJ3nPSDKyGTVGYxX9iOvuGmKrpWyvnF cRAXYn0XakJPrA8EuwEGRVPgAPnPqwIfz8JTazGoRGv/OOJnFxvvYY+ZdYGZ8GJJ tpYMNmRLJ6FUDIhFHvvMYp/hiBxP3MCCrKITF4nAOrCmdSHag+T3Jko+5g98H82M FICPoBkT/VMQA699syMJy6V2KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3JOmn/ 1SxfkwtanFUQDU8rcopzMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs+ZbXBxPN/nQS1PblP8Tgio9ail0H3lod2bKG71HT5Di97p+ODtyH Tgbr7jyFmpKfc60+n7rrxRAuO0b1K5YoFkU6gKLwIpCwEi/obA9MquZ2k1HQAKSi 9Ht5aSfxJ3ahnqwCk1HQWbhuMWy43EHX6zWE19wvZksViBKg7Yvrv/uzITM1FGD4 /fQSa57R6VX6hUNAytQjPgxE99veNRio8vNntpmkZ991TYljvdTKXlR0lhZN1+xR NE4UtnxUrSLedy1W8kr7WRPOlxIPcQq5jMmoUA8cg/IvExZQ0XKvsTMSXTOli2wZ QZmGkUU7VomJZC+v018T0aH/ljVPf9eJ -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:12 2025 by rpki-client