$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json) Hash identifier: uGHMhNKKL2QOUDfM7yeXrk5ql3wkYOYx/2KBY8N/+ZM= Subject key identifier: 88:14:3A:85:A6:77:E8:9F:C9:25:36:3A:44:F4:77:5B:00:37:98:9A Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 1207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft Manifest number: 1200 Signing time: Fri 04 Jul 2025 17:26:26 +0000 Manifest this update: Fri 04 Jul 2025 17:26:26 +0000 Manifest next update: Fri 11 Jul 2025 17:26:26 +0000 Files and hashes: 1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: bBSOgXIqKzicDWn4cmgixfUmz0mLlAWygmwBSFyFOMY=) 2: A295F860E71011E8899C3917C4F9AE02.roa (hash: MpKbuC4p+zIoKJkZfEG3DvMzDY6zY/kK40o2YHQcwMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4615 (0x1207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Jul 4 17:26:26 2025 GMT Not After : Jul 11 17:26:26 2025 GMT Subject: CN=68680ec2-72a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:df:8a:c5:17:dc:e4:06:da:82:42:88:d1: f6:b0:c2:20:fe:b6:ca:9a:a0:fa:2a:de:e6:cc:9f: 09:45:ff:fa:22:94:d9:96:7a:f9:dd:00:fe:cd:af: 86:41:f1:1a:88:8a:cb:e1:32:e6:63:83:6a:76:29: f0:69:5b:94:31:5f:05:8b:69:e0:50:7e:0e:19:41: c3:00:24:88:0b:38:f9:80:46:4e:18:3a:f6:54:78: a8:a0:90:18:6f:d7:fc:d0:8b:02:53:a5:1f:15:bf: 0f:4f:40:f8:a2:4d:b0:85:37:9a:0b:00:87:b0:d6: 4f:22:b0:41:99:3d:a2:20:a1:d7:66:05:e8:7d:b6: 07:5c:4d:82:95:5d:c7:61:36:56:cb:3a:34:a6:f9: 42:bb:ed:69:66:f9:97:cd:d5:f0:98:7f:9c:19:70: 5a:1f:1b:92:5d:27:02:0d:2d:8a:ee:3f:6a:ed:ab: a0:e6:9d:66:51:0f:c6:e6:55:d5:c6:e1:52:8b:d6: ff:71:21:e5:1c:99:06:b6:04:95:c9:93:eb:dc:45: af:ee:a5:5e:04:28:e8:03:28:17:be:3e:8c:74:8e: 6d:73:5f:90:cb:f7:f4:a8:f5:cb:ee:bc:71:1d:25: 70:a6:e6:c1:db:80:5b:11:32:5e:d2:60:7d:1a:59: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:14:3A:85:A6:77:E8:9F:C9:25:36:3A:44:F4:77:5B:00:37:98:9A X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:00:81:49:e1:96:fc:e3:9f:eb:95:92:8d:58:28:40:6d:60: 30:0f:a1:7a:70:cf:7f:39:cc:93:cb:a5:2f:21:67:ef:34:6e: 05:72:4e:32:e4:a4:5e:87:31:8a:f7:3a:1c:b8:52:05:4f:cd: df:94:41:a1:b8:2d:ff:38:20:83:14:4d:10:20:3b:c7:50:2e: cd:3e:0a:11:27:c1:b6:f1:88:33:81:f4:2c:8b:40:d0:2f:df: 71:a8:a2:9a:54:9a:6f:9c:b1:97:89:ef:ff:0f:8b:aa:fc:dc: 56:cf:0c:2c:fa:14:e0:41:cb:5f:2f:4a:3e:f3:41:1e:8b:ae: c3:cf:a7:14:54:b5:e6:97:1b:d3:97:31:b2:34:ec:b5:83:47: 56:e9:dc:57:69:45:c2:b4:60:8b:d6:9d:dc:24:10:41:44:1d: f3:9c:d4:f7:6e:57:11:bc:ae:14:f9:63:4e:88:6f:fe:90:04: 84:42:6d:01:4a:77:e3:81:b0:3a:8d:1a:b4:25:91:4f:66:7a: d7:31:b2:6b:3b:f4:b8:c5:ce:24:a8:29:06:88:26:0e:0a:7e: 4f:fe:ad:b3:8b:97:50:78:f9:6d:01:87:97:00:c5:b5:63:43: d5:3c:a7:bb:f3:a7:a5:81:0e:f3:d6:fa:dc:56:73:65:69:c9: ef:18:fe:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjUwNzA0MTcyNjI2WhcNMjUwNzExMTcyNjI2WjAYMRYwFAYD VQQDEw02ODY4MGVjMi03MmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr3fisUX3OQG2oJCiNH2sMIg/rbKmqD6Kt7mzJ8JRf/6IpTZlnr53QD+za+G QfEaiIrL4TLmY4NqdinwaVuUMV8Fi2ngUH4OGUHDACSICzj5gEZOGDr2VHiooJAY b9f80IsCU6UfFb8PT0D4ok2whTeaCwCHsNZPIrBBmT2iIKHXZgXofbYHXE2ClV3H YTZWyzo0pvlCu+1pZvmXzdXwmH+cGXBaHxuSXScCDS2K7j9q7aug5p1mUQ/G5lXV xuFSi9b/cSHlHJkGtgSVyZPr3EWv7qVeBCjoAygXvj6MdI5tc1+Qy/f0qPXL7rxx HSVwpubB24BbETJe0mB9GlnfGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgUOoWm d+ifySU2OkT0d1sAN5iaMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf Wi14ZlNsUTZJRHBUNDg1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiAIFJ4Zb845/rlZKNWChAbWAwD6F6cM9/OcyTy6UvIWfvNG4Fck4y 5KRehzGK9zocuFIFT83flEGhuC3/OCCDFE0QIDvHUC7NPgoRJ8G28YgzgfQsi0DQ L99xqKKaVJpvnLGXie//D4uq/NxWzwws+hTgQctfL0o+80Eei67Dz6cUVLXmlxvT lzGyNOy1g0dW6dxXaUXCtGCL1p3cJBBBRB3znNT3blcRvK4U+WNOiG/+kASEQm0B SnfjgbA6jRq0JZFPZnrXMbJrO/S4xc4kqCkGiCYOCn5P/q2zi5dQePltAYeXAMW1 Y0PVPKe786elgQ7z1vrcVnNlacnvGP4x -----END CERTIFICATE-----Generated at Sat Jul 5 05:33:25 2025 by rpki-client