$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json) Hash identifier: CPMvnX6zYkO/L4dkfPYRloDmBXfLBcjI9cdMlJHg3pE= Subject key identifier: 5F:1D:C3:6D:67:35:E7:F5:D1:83:81:E9:42:7D:EB:30:8A:45:3A:3C Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 250B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft Manifest number: 24F6 Signing time: Fri 18 Jul 2025 15:51:50 +0000 Manifest this update: Fri 18 Jul 2025 15:51:50 +0000 Manifest next update: Fri 25 Jul 2025 15:51:50 +0000 Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: ZcnNc1XCSnOolzkTkMcsKRUqSl1KaSjpsWkgKMTaCQo=) 2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: UuPwuIeTjohMOX9eFmpeIez6sJHzI9RwlcD5tmgLAN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9483 (0x250b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: Jul 18 15:51:50 2025 GMT Not After : Jul 25 15:51:50 2025 GMT Subject: CN=687a6d96-54d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:ec:33:b4:08:54:e3:ce:16:ab:15:cf:0c: 25:9c:7c:d1:1f:be:a1:b5:4d:49:95:7d:44:38:79: 15:1c:c2:c7:8d:18:15:32:b6:76:ff:a3:ac:f7:f1: ac:01:6a:d8:34:e3:b1:4e:1f:b5:e8:6e:7b:c3:d9: a4:b5:97:6f:4f:da:da:28:66:bb:9f:6e:24:28:a6: f7:c8:4e:25:32:62:e3:f8:e0:23:68:91:25:1f:8b: 07:87:1d:6b:a7:70:70:56:90:fd:12:92:2b:63:08: 3b:56:2a:76:35:43:eb:00:d7:1b:69:e5:b0:32:6d: a3:2b:9e:cc:a5:fb:a5:0f:45:8f:11:3a:31:75:a6: cf:ae:77:55:63:3c:0e:3c:dd:d6:4d:32:74:b8:22: be:9d:19:e3:87:45:22:da:6f:ca:13:20:2e:f0:c9: 41:a8:24:37:94:3e:85:cc:d6:ff:55:67:c6:07:c3: f9:d1:13:8a:26:37:c7:3d:b3:13:fe:5f:21:79:35: 6b:6f:13:a3:62:a1:07:57:d0:d1:3c:92:22:c6:9b: b6:e0:ae:91:a0:18:b0:88:de:93:b0:b5:81:51:8c: b0:03:7e:70:a7:5f:b2:c9:18:bd:28:58:d2:65:c7: 7b:cc:f1:33:eb:0c:13:0b:e6:c1:33:43:54:3e:b1: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:C3:6D:67:35:E7:F5:D1:83:81:E9:42:7D:EB:30:8A:45:3A:3C X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e5:0e:53:92:43:56:f7:3d:1d:8a:c6:2d:8a:9f:29:97:f9: 11:72:91:69:ef:81:24:ff:e6:3c:4f:52:60:15:a8:fb:66:36: 28:92:31:0b:e1:42:5d:2b:ea:69:ac:a2:41:18:d9:b2:cf:8e: 23:9a:ca:fd:aa:e4:52:81:b7:25:0d:97:86:e1:cd:83:fd:ec: e9:60:72:cf:4a:97:6c:2c:8c:1d:dc:31:25:5a:76:31:59:da: 33:4c:2c:83:31:7e:21:2e:d0:06:a9:50:68:89:e5:7f:c7:99: 94:9c:cb:88:a9:5a:2e:b7:a8:66:01:f6:d9:d0:42:b9:8a:fc: c0:9a:ae:e9:9a:bf:28:ed:b9:e2:40:b2:f1:53:d2:94:d2:5d: 36:01:bf:c2:e6:33:ba:b9:aa:61:4e:8d:d4:e0:a3:d5:6b:4a: e8:0b:be:8e:1d:be:7d:6d:15:f1:5e:53:4c:d9:b6:0f:76:ac: b3:58:f6:24:bf:e1:08:9e:38:0c:0b:e6:55:50:dc:5e:e0:60: 43:94:57:bb:31:90:e1:f2:a3:bd:31:f4:b6:27:35:c5:a2:f3: 9c:d2:69:b0:e9:5a:e9:32:9a:95:d6:c7:c1:e1:6d:13:be:3c: 2c:bc:31:9d:cd:e7:d7:79:2e:f1:14:1a:ad:2f:a9:de:1d:cf: dd:c2:21:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjUwNzE4MTU1MTUwWhcNMjUwNzI1MTU1MTUwWjAYMRYwFAYD VQQDEw02ODdhNmQ5Ni01NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYDsM7QIVOPOFqsVzwwlnHzRH76htU1JlX1EOHkVHMLHjRgVMrZ2/6Os9/Gs AWrYNOOxTh+16G57w9mktZdvT9raKGa7n24kKKb3yE4lMmLj+OAjaJElH4sHhx1r p3BwVpD9EpIrYwg7Vip2NUPrANcbaeWwMm2jK57MpfulD0WPEToxdabPrndVYzwO PN3WTTJ0uCK+nRnjh0Ui2m/KEyAu8MlBqCQ3lD6FzNb/VWfGB8P50ROKJjfHPbMT /l8heTVrbxOjYqEHV9DRPJIixpu24K6RoBiwiN6TsLWBUYywA35wp1+yyRi9KFjS Zcd7zPEz6wwTC+bBM0NUPrFHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8dw21n Nef10YOB6UJ96zCKRTo8MB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V VkhJRHZRVVdqTU5rblZaTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX5Q5TkkNW9z0disYtip8pl/kRcpFp74Ek/+Y8T1JgFaj7ZjYokjEL 4UJdK+pprKJBGNmyz44jmsr9quRSgbclDZeG4c2D/ezpYHLPSpdsLIwd3DElWnYx WdozTCyDMX4hLtAGqVBoieV/x5mUnMuIqVout6hmAfbZ0EK5ivzAmq7pmr8o7bni QLLxU9KU0l02Ab/C5jO6uaphTo3U4KPVa0roC76OHb59bRXxXlNM2bYPdqyzWPYk v+EInjgMC+ZVUNxe4GBDlFe7MZDh8qO9MfS2JzXFovOc0mmw6VrpMpqV1sfB4W0T vjwsvDGdzefXeS7xFBqtL6neHc/dwiHq -----END CERTIFICATE-----Generated at Sun Jul 20 10:45:20 2025 by rpki-client