$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft File: jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json) Hash identifier: UctYisYMsxugvkX+W16W9/SA9DfQBqCWlenqN4jrGAs= Subject key identifier: B4:E7:9D:DC:CD:84:9C:A9:02:D8:0A:08:29:26:10:DD:29:33:23:A9 Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5 Certificate issuer: /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft Manifest number: 66 Signing time: Tue 01 Jul 2025 07:48:29 +0000 Manifest this update: Tue 01 Jul 2025 07:48:28 +0000 Manifest next update: Tue 08 Jul 2025 07:48:28 +0000 Files and hashes: 1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: zSSq4ZGFh0dLKVzTH8fbmcZ5G3raCJKSKmPrnRVCh+Y=) 2: A1FE9790C1B111EFACAB4071C4F9AE02.roa (hash: nTebHJ2nY/z4pA9GR9Zium43gwzyk8WFga213syhwvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5 Validity Not Before: Jul 1 07:48:28 2025 GMT Not After : Jul 8 07:48:28 2025 GMT Subject: CN=686392cc-8466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:4d:f7:72:b5:47:76:01:68:f5:b9:62:a6: 58:c3:d0:33:78:f8:96:86:6a:48:53:2a:98:49:80: 3a:3c:1a:b3:85:95:bd:ea:c1:90:b7:e9:21:16:e4: ec:9c:75:0c:d0:cb:b1:d8:ee:22:1a:f8:c4:a4:b8: 00:e9:14:74:71:56:e3:7d:3c:f1:b7:79:38:b9:02: f2:83:6b:73:b8:ff:82:89:9e:92:93:c6:27:8f:06: 9d:7d:6b:c4:42:52:2d:b4:46:6d:5e:6c:02:94:46: 43:0b:32:e9:92:19:01:6b:f7:34:04:d4:4e:b4:a7: f1:a9:7d:30:41:73:27:c8:cb:7f:8d:5e:32:a3:a5: db:ab:f6:e9:c2:ec:ed:a7:8b:a2:9c:98:de:ec:88: b5:7c:80:9f:66:ab:25:27:0f:43:a8:66:2d:32:d0: ef:fa:ad:45:12:93:82:02:6a:cd:f9:8f:24:5c:82: 21:e3:df:57:af:ec:87:af:5d:61:74:ed:55:8b:c1: 1e:9d:3e:38:ec:6c:9b:d7:b1:e1:09:71:34:43:38: f1:67:e9:05:3d:ca:75:2c:79:1b:1d:0e:51:90:a5: 13:f5:6d:ba:f8:d7:8e:27:ac:60:cf:03:f9:da:41: 0c:03:a4:50:40:63:7d:91:89:7b:d6:67:1f:cf:f7: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E7:9D:DC:CD:84:9C:A9:02:D8:0A:08:29:26:10:DD:29:33:23:A9 X509v3 Authority Key Identifier: keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:40:74:e5:22:97:d1:1a:ae:e8:30:bd:23:c5:63:de:d8:19: 43:6d:c0:4a:b3:db:58:16:20:2a:8c:ea:3d:70:35:27:be:0a: 70:70:9b:2d:e3:f8:6c:a7:d8:6f:74:b6:a9:18:06:7c:55:cf: c9:ee:9f:75:b6:4a:d4:9c:76:47:a3:61:bb:00:9c:a3:26:bd: 39:5c:e5:a2:97:a5:c7:cc:65:8e:e7:3b:ec:6d:36:54:94:93: 97:8f:d2:99:e7:32:ed:d9:38:56:01:57:d4:49:fb:85:1f:0d: b2:e7:a0:4b:86:57:56:77:f1:7c:83:20:e3:d9:e4:8e:50:0d: 07:2a:de:68:d7:20:ff:66:35:cc:15:a7:5d:06:4b:18:56:23: a2:d6:99:eb:2d:71:c6:8e:6e:bc:82:c6:48:27:e8:59:91:86: a6:d2:8f:58:76:5a:f3:25:a9:12:93:d4:7a:43:d4:ac:13:fc: f8:8d:b3:c5:e9:77:85:90:38:c0:3d:f8:3f:d6:a9:ae:09:60: ef:09:e5:e3:36:51:c7:57:7a:f9:ee:9b:ee:0e:97:d8:99:19: da:fe:e9:a5:a0:19:e2:b0:89:90:74:50:9b:67:9e:98:b2:ff: b6:da:59:ca:09:22:03:f8:5e:fa:d8:96:ce:2b:03:71:61:4c: fa:a5:50:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkYxOTExMC8GA1UEBRMoOEQ2MTFGMkNENzM3OTRBRjgwMUMxQkY2OUQ4ODQ4MDkx MzgwQjRBNTAeFw0yNTA3MDEwNzQ4MjhaFw0yNTA3MDgwNzQ4MjhaMBgxFjAUBgNV BAMTDTY4NjM5MmNjLTg0NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8iE33crVHdgFo9blipljD0DN4+JaGakhTKphJgDo8GrOFlb3qwZC36SEW5Oyc dQzQy7HY7iIa+MSkuADpFHRxVuN9PPG3eTi5AvKDa3O4/4KJnpKTxiePBp19a8RC Ui20Rm1ebAKURkMLMumSGQFr9zQE1E60p/GpfTBBcyfIy3+NXjKjpdur9unC7O2n i6KcmN7siLV8gJ9mqyUnD0OoZi0y0O/6rUUSk4ICas35jyRcgiHj31ev7IevXWF0 7VWLwR6dPjjsbJvXseEJcTRDOPFn6QU9ynUseRsdDlGQpRP1bbr4144nrGDPA/na QQwDpFBAY32RiXvWZx/P9zavAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtOed3M2E nKkC2AoIKSYQ3SkzI6kwHwYDVR0jBBgwFoAUjWEfLNc3lK+AHBv2nYhICROAtKUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRjE5L0QyM0NCMEJBQzFB RjExRUZCRTdBMTQ1REM0RjlBRTAyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRL VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaldFZkxOYzNsSy1BSEJ2Mm5ZaElDUk9BdEtVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG RjE5L0QyM0NCMEJBQzFBRjExRUZCRTdBMTQ1REM0RjlBRTAyL2pXRWZMTmMzbEst QUhCdjJuWWhJQ1JPQXRLVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9AdOUil9EarugwvSPFY97YGUNtwEqz21gWICqM6j1wNSe+CnBwmy3j +Gyn2G90tqkYBnxVz8nun3W2StScdkejYbsAnKMmvTlc5aKXpcfMZY7nO+xtNlSU k5eP0pnnMu3ZOFYBV9RJ+4UfDbLnoEuGV1Z38XyDIOPZ5I5QDQcq3mjXIP9mNcwV p10GSxhWI6LWmestccaObryCxkgn6FmRhqbSj1h2WvMlqRKT1HpD1KwT/PiNs8Xp d4WQOMA9+D/Wqa4JYO8J5eM2UcdXevnum+4Ol9iZGdr+6aWgGeKwiZB0UJtnnpiy /7baWcoJIgP4XvrYls4rA3FhTPqlUJA= -----END CERTIFICATE-----Generated at Wed Jul 2 07:32:38 2025 by rpki-client