$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: PRroGOKQdJXlZuiJt9CC/4dRsONRgCQn7J9xhibfECs= Subject key identifier: 49:8E:1B:14:26:AB:68:73:83:16:38:1D:60:69:9E:B9:C2:73:FD:09 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 0180 Signing time: Thu 03 Jul 2025 03:43:37 +0000 Manifest this update: Thu 03 Jul 2025 03:43:36 +0000 Manifest next update: Thu 10 Jul 2025 03:43:36 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: LKYuDVQxyqWoMZD0Gc/xI7vypssJ7/K1JdMNLuHDiUU=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: TJboroWTjSH5MHMWjJ273LEWmOXtmootlWn74QKDiMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Jul 3 03:43:36 2025 GMT Not After : Jul 10 03:43:36 2025 GMT Subject: CN=6865fc69-f696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:fb:f7:be:67:8c:f9:7c:8d:4a:6d:2a:96: 02:3a:46:64:f0:56:19:a1:a9:2b:9c:af:70:f8:2f: de:88:b6:ca:0d:7f:25:62:10:69:9b:fb:b8:60:2c: 57:b9:c9:3e:13:e0:12:45:a2:61:93:f1:81:b2:3a: 16:54:37:cd:d0:da:07:b3:ed:a9:87:b9:9a:20:7b: af:f8:3c:19:9b:2c:99:b4:a9:e7:20:47:e8:bf:b1: 0f:d0:aa:bf:dd:8c:95:55:51:3e:9e:54:b7:40:01: a4:79:f6:d9:fd:2e:ff:73:7f:22:92:c6:24:b0:14: 3e:bf:d1:ca:dd:43:31:73:c9:e1:f6:e9:c5:44:f1: 1d:38:53:85:c0:1b:f0:75:a7:ed:11:64:80:95:b4: 5a:8a:7f:dc:f7:41:35:9f:88:a0:30:ff:b3:e8:4e: 01:ec:de:2b:07:09:04:04:f1:de:2b:69:18:54:73: b8:15:8b:0a:d1:87:cd:d5:9a:a8:61:b8:59:25:e7: 36:e0:e3:b5:c9:aa:b8:30:7b:be:60:96:45:4f:91: 09:eb:bb:df:26:c2:3d:f3:2a:9e:0d:0b:4e:ae:cc: 94:17:99:4c:49:ba:b3:5c:80:8b:d2:84:fe:8b:f8: e6:1d:fb:c7:1c:8a:56:c5:9b:ad:61:5a:61:96:f6: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8E:1B:14:26:AB:68:73:83:16:38:1D:60:69:9E:B9:C2:73:FD:09 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4a:fc:a8:fa:ef:69:8b:fa:76:52:d2:60:6f:7b:9c:4e:01: a8:64:e0:c8:40:b0:28:87:fd:0b:4d:3f:87:68:68:ce:e0:68: ab:c5:57:8d:b0:33:1b:a7:1b:a0:f7:d1:ff:b2:20:56:33:89: 15:e3:57:0d:8a:77:70:45:b0:18:6e:0a:27:c2:64:6d:2e:16: ed:25:04:eb:10:ff:da:ea:cf:2d:cc:1b:ad:af:c6:9f:11:3c: 96:98:5c:a8:ae:c0:70:fe:6c:e6:e6:f7:8a:30:11:55:7a:cc: 6c:a4:a2:f4:77:eb:15:e3:76:f6:84:70:a5:c3:6d:b8:8f:e3: c1:1f:05:54:2e:3a:bf:b5:c2:ee:f5:97:4f:77:1a:18:72:7d: 43:16:51:97:f8:3c:9b:6a:51:da:ad:1f:ac:d9:f4:a2:b6:a7: fa:69:9b:38:5b:ab:83:67:39:e2:66:32:db:4d:63:78:6d:06: f1:c6:16:13:d4:1d:57:92:c4:f4:f5:13:e1:53:98:b9:5c:46: e9:45:34:d1:ab:52:41:d1:b5:cb:93:4d:d2:26:0a:ee:81:4f: c5:95:d5:ab:20:82:45:63:c5:6a:52:e2:48:62:2d:10:8e:24: 14:18:cb:0f:b4:f9:d3:2c:34:19:35:da:a0:bc:65:3a:a1:7d: 99:b0:76:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjUwNzAzMDM0MzM2WhcNMjUwNzEwMDM0MzM2WjAYMRYwFAYD VQQDEw02ODY1ZmM2OS1mNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UP7975njPl8jUptKpYCOkZk8FYZoakrnK9w+C/eiLbKDX8lYhBpm/u4YCxX uck+E+ASRaJhk/GBsjoWVDfN0NoHs+2ph7maIHuv+DwZmyyZtKnnIEfov7EP0Kq/ 3YyVVVE+nlS3QAGkefbZ/S7/c38iksYksBQ+v9HK3UMxc8nh9unFRPEdOFOFwBvw daftEWSAlbRain/c90E1n4igMP+z6E4B7N4rBwkEBPHeK2kYVHO4FYsK0YfN1Zqo YbhZJec24OO1yaq4MHu+YJZFT5EJ67vfJsI98yqeDQtOrsyUF5lMSbqzXICL0oT+ i/jmHfvHHIpWxZutYVphlvYf+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmOGxQm q2hzgxY4HWBpnrnCc/0JMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCSvyo+u9pi/p2UtJgb3ucTgGoZODIQLAoh/0LTT+HaGjO4GirxVeN sDMbpxug99H/siBWM4kV41cNindwRbAYbgonwmRtLhbtJQTrEP/a6s8tzButr8af ETyWmFyorsBw/mzm5veKMBFVesxspKL0d+sV43b2hHClw224j+PBHwVULjq/tcLu 9ZdPdxoYcn1DFlGX+DybalHarR+s2fSitqf6aZs4W6uDZzniZjLbTWN4bQbxxhYT 1B1XksT09RPhU5i5XEbpRTTRq1JB0bXLk03SJgrugU/FldWrIIJFY8VqUuJIYi0Q jiQUGMsPtPnTLDQZNdqgvGU6oX2ZsHb8 -----END CERTIFICATE-----Generated at Thu Jul 3 18:10:49 2025 by rpki-client