$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: +97TcG4GS2uyw6RJRd91euOuEHQxyjK6lsHLjJGaZ5g= Subject key identifier: BC:B4:72:07:92:E7:D9:D0:3B:55:67:76:43:CE:CA:7B:C4:89:68:2D Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 1A Signing time: Thu 03 Jul 2025 08:11:34 +0000 Manifest this update: Thu 03 Jul 2025 08:11:33 +0000 Manifest next update: Thu 10 Jul 2025 08:11:33 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: QbkoC6s/Qg+2BYKxKCHRTDDVRoSC7oBw/RrWqiN70QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Jul 3 08:11:33 2025 GMT Not After : Jul 10 08:11:33 2025 GMT Subject: CN=68663b36-323c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:4b:17:69:c3:ee:2b:f4:4f:86:ed:f5:02: c1:cc:8d:be:18:5d:52:3e:42:9e:fd:24:7c:d7:e5: 59:66:f9:de:dc:13:e4:32:2b:07:a8:c3:df:87:86: 22:71:e4:9b:90:49:c1:34:53:25:0c:21:fc:ea:02: e0:69:c6:1e:56:a0:4d:48:cc:1b:0a:93:88:4c:0e: 04:ba:e5:b9:2e:c8:ea:91:f7:c6:70:61:19:59:95: aa:b6:27:ad:2c:f4:5f:2b:d2:2e:3b:2f:d4:da:5b: f6:92:94:9d:10:f5:e7:61:df:e2:ff:ef:00:36:48: 54:49:d7:78:95:2a:c3:38:b8:07:60:c9:bf:0b:c1: 72:cf:6d:16:bc:90:b7:ee:52:6f:37:b8:d1:d0:89: e9:fb:77:28:d9:b5:02:10:e7:df:95:78:6e:8d:6b: 04:da:89:3b:f1:86:ac:e9:92:3e:8a:a6:c2:6f:84: 02:fa:ae:a8:f5:c6:e3:23:43:3c:6f:00:0d:74:02: 39:75:56:43:5b:60:3c:45:cb:00:b1:ed:c0:9a:20: d8:02:47:0d:3e:88:1b:f3:d6:65:e1:d6:c8:39:eb: 13:95:9d:df:a5:16:a1:6e:d0:ae:42:b5:cd:10:16: f4:f9:93:a5:11:e1:da:28:f2:e7:15:15:92:ea:8d: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B4:72:07:92:E7:D9:D0:3B:55:67:76:43:CE:CA:7B:C4:89:68:2D X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:71:a3:b0:04:5f:c1:0b:11:b8:4a:81:46:2c:e7:aa:68:05: 31:43:70:38:5f:11:29:ca:bf:d0:e3:b4:b4:ff:64:aa:06:32: e1:35:3a:5a:13:31:76:dc:2a:ef:45:7b:b7:d6:2d:53:1a:67: 5e:c4:63:f7:96:a7:18:f4:17:9f:54:18:cd:9c:94:60:8f:b7: 3f:95:3b:f9:ba:e9:73:fe:10:c6:07:94:ac:e7:08:eb:09:e3: 2f:71:1b:9c:99:60:73:92:4e:92:2d:15:6e:9f:26:7c:50:ff: 06:b4:68:7b:dc:e8:f0:fb:5a:5a:54:6d:12:04:f9:15:73:12: 32:19:0a:5f:36:ec:bf:6a:3f:34:5e:9a:03:a2:ee:3f:14:e0: 96:50:b4:73:38:d7:a2:a9:b6:c0:f0:84:20:f8:55:a2:0a:94: e8:65:8d:eb:0f:7b:d1:68:48:03:ed:ff:52:d3:60:0e:b2:a7: 54:30:21:f6:be:08:7c:5d:e2:77:ff:a5:e7:04:fa:14:34:e9: e9:16:1f:5f:8c:5f:e9:a2:89:fc:4b:a4:cf:05:b2:f6:50:bf: cf:8f:fc:7a:32:67:f9:c4:60:e7:29:df:8d:e0:50:1a:80:af: 04:eb:ee:35:bb:af:76:c2:dd:01:05:7f:b3:98:37:44:89:d9: 2d:9d:6f:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTA3MDMwODExMzNaFw0yNTA3MTAwODExMzNaMBgxFjAUBgNV BAMTDTY4NjYzYjM2LTMyM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBYksXacPuK/RPhu31AsHMjb4YXVI+Qp79JHzX5Vlm+d7cE+QyKweow9+HhiJx 5JuQScE0UyUMIfzqAuBpxh5WoE1IzBsKk4hMDgS65bkuyOqR98ZwYRlZlaq2J60s 9F8r0i47L9TaW/aSlJ0Q9edh3+L/7wA2SFRJ13iVKsM4uAdgyb8LwXLPbRa8kLfu Um83uNHQien7dyjZtQIQ59+VeG6NawTaiTvxhqzpkj6KpsJvhAL6rqj1xuMjQzxv AA10Ajl1VkNbYDxFywCx7cCaINgCRw0+iBvz1mXh1sg56xOVnd+lFqFu0K5Ctc0Q FvT5k6UR4doo8ucVFZLqjQ+RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvLRyB5Ln 2dA7VWd2Q87Ke8SJaC0wHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtxo7AEX8ELEbhKgUYs56poBTFDcDhfESnKv9DjtLT/ZKoGMuE1OloT MXbcKu9Fe7fWLVMaZ17EY/eWpxj0F59UGM2clGCPtz+VO/m66XP+EMYHlKznCOsJ 4y9xG5yZYHOSTpItFW6fJnxQ/wa0aHvc6PD7WlpUbRIE+RVzEjIZCl827L9qPzRe mgOi7j8U4JZQtHM416KptsDwhCD4VaIKlOhljesPe9FoSAPt/1LTYA6yp1QwIfa+ CHxd4nf/pecE+hQ06ekWH1+MX+miifxLpM8FsvZQv8+P/HoyZ/nEYOcp343gUBqA rwTr7jW7r3bC3QEFf7OYN0SJ2S2db+Q= -----END CERTIFICATE-----Generated at Thu Jul 3 09:50:54 2025 by rpki-client