$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: CfCdDPr01WLbf3uSMMTiwQU3LHnrDC8Q+qac3Jk1fO0= Subject key identifier: 1F:85:6A:C0:74:CA:4B:A9:34:0D:98:FA:66:7F:6F:D2:B0:28:EB:D2 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 06FC Signing time: Fri 18 Jul 2025 22:17:50 +0000 Manifest this update: Fri 18 Jul 2025 22:17:50 +0000 Manifest next update: Fri 25 Jul 2025 22:17:49 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: u4JsqAaVrrl6P+XQGiddkXpzhC0a1RxCB8CroFk4/vA=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: X7/wtt04QWk9x+2X3bhJ9nLStWcZ9LhUojCxV8pCE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Jul 18 22:17:50 2025 GMT Not After : Jul 25 22:17:49 2025 GMT Subject: CN=687ac80e-a8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:4c:ee:24:ba:93:a2:2f:01:e6:22:5d:8a: 4d:e8:3e:6c:a9:53:5d:0b:78:bb:ec:ec:c8:4f:7d: 14:a2:78:2e:b7:be:3f:cd:55:72:0c:d3:2b:d6:04: c4:84:20:86:4e:44:86:fb:9d:85:d9:6b:af:8d:5f: 66:a5:69:91:79:e9:8d:ca:3a:c7:db:06:01:3e:e0: dc:96:f0:62:c5:fa:28:58:83:81:93:38:75:d5:bd: fc:e7:ed:d8:c6:31:6b:df:80:3d:13:8b:e2:d5:31: 2b:67:5b:91:18:0c:5f:57:a6:a4:d6:0a:ed:f2:6f: 62:3b:bb:e7:54:f0:68:24:d6:6e:44:b6:29:b8:ee: 8b:53:c2:9b:7c:58:1d:f8:f1:f5:90:c0:d1:d5:31: 6b:9b:35:ab:74:ff:09:ea:af:c5:69:90:5b:41:aa: 79:b9:9a:65:be:3a:d3:da:ca:e3:56:41:da:d9:f6: b4:b9:8f:05:e4:98:5c:b5:0e:a7:dc:29:63:de:23: ff:d0:14:84:76:3d:e9:b4:b2:2e:fa:8e:59:62:0a: 89:a3:1d:ff:8c:ca:14:a8:38:97:c4:78:57:3b:04: e5:35:69:ec:3b:83:82:5b:6d:0f:d5:27:3d:dc:f5: b9:70:a5:6c:c0:d5:e3:80:16:fa:a7:f2:2a:0c:66: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:6A:C0:74:CA:4B:A9:34:0D:98:FA:66:7F:6F:D2:B0:28:EB:D2 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:21:b3:0e:7b:cf:16:05:b5:04:7e:81:94:12:15:a7:e2:65: f7:26:4c:26:e5:d8:d9:77:d7:40:4a:69:86:4f:58:29:69:01: cc:d3:6d:28:87:31:f6:11:d0:84:ad:25:f9:48:c5:e3:71:de: eb:be:bf:9c:21:27:13:a0:6b:f5:0d:ce:37:ad:6d:63:cf:4e: a1:f3:28:08:26:fc:5c:28:f1:97:ad:8b:3f:93:48:44:f4:3d: 63:00:8d:b0:ce:36:ac:9e:ae:c9:8d:b1:f8:56:8b:77:e0:15: d6:85:14:f1:fe:de:d9:4b:ba:eb:24:ad:93:a5:3f:72:62:bf: 25:7f:a0:19:ee:94:3b:19:e4:18:2f:5c:a9:eb:00:07:41:fd: 15:27:f2:73:8e:47:4a:6f:79:91:c1:d2:5f:00:21:1d:c0:39: 4f:d6:6d:23:dd:43:16:18:03:0c:8d:57:db:89:b6:f6:01:e3: 37:3f:ab:5a:3b:c1:8a:8f:e3:76:48:b4:ac:cf:e5:c9:0e:40: ed:9e:21:7a:be:e5:5f:ef:70:4a:99:b0:6f:c7:3e:ae:40:85: 43:31:98:66:d1:78:06:ff:09:d8:eb:d1:13:57:2d:7c:cb:78: a3:82:98:0b:8a:1a:52:f7:5e:8d:82:9b:0e:ee:8f:b7:ba:1b: 7c:4e:1d:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwNzE4MjIxNzUwWhcNMjUwNzI1MjIxNzQ5WjAYMRYwFAYD VQQDEw02ODdhYzgwZS1hOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufFM7iS6k6IvAeYiXYpN6D5sqVNdC3i77OzIT30Uongut74/zVVyDNMr1gTE hCCGTkSG+52F2WuvjV9mpWmReemNyjrH2wYBPuDclvBixfooWIOBkzh11b385+3Y xjFr34A9E4vi1TErZ1uRGAxfV6ak1grt8m9iO7vnVPBoJNZuRLYpuO6LU8KbfFgd +PH1kMDR1TFrmzWrdP8J6q/FaZBbQap5uZplvjrT2srjVkHa2fa0uY8F5JhctQ6n 3Clj3iP/0BSEdj3ptLIu+o5ZYgqJox3/jMoUqDiXxHhXOwTlNWnsO4OCW20P1Sc9 3PW5cKVswNXjgBb6p/IqDGZnGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+FasB0 ykupNA2Y+mZ/b9KwKOvSMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBIbMOe88WBbUEfoGUEhWn4mX3Jkwm5djZd9dASmmGT1gpaQHM020o hzH2EdCErSX5SMXjcd7rvr+cIScToGv1Dc43rW1jz06h8ygIJvxcKPGXrYs/k0hE 9D1jAI2wzjasnq7JjbH4Vot34BXWhRTx/t7ZS7rrJK2TpT9yYr8lf6AZ7pQ7GeQY L1yp6wAHQf0VJ/JzjkdKb3mRwdJfACEdwDlP1m0j3UMWGAMMjVfbibb2AeM3P6ta O8GKj+N2SLSsz+XJDkDtniF6vuVf73BKmbBvxz6uQIVDMZhm0XgG/wnY69ETVy18 y3ijgpgLihpS916NgpsO7o+3uht8Th2F -----END CERTIFICATE-----Generated at Sun Jul 20 16:25:55 2025 by rpki-client