$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: 0oeY3hMUiqw7DW3Mnrc1f4ON64VGuefW07rTo668v3c= Subject key identifier: E2:2B:C2:73:E0:CE:80:6F:71:03:B6:7B:46:06:FE:77:65:05:DD:8D Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 55 Signing time: Sat 19 Jul 2025 07:27:18 +0000 Manifest this update: Sat 19 Jul 2025 07:27:17 +0000 Manifest next update: Sat 26 Jul 2025 07:27:17 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: /rWHfI3IUQqP6oHLkhWGVpSOW6virmogYCv36A8Glxk=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Jul 19 07:27:17 2025 GMT Not After : Jul 26 07:27:17 2025 GMT Subject: CN=687b48d6-e753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:af:40:1b:fa:31:06:63:ed:02:96:9c:76: 06:86:37:5d:a0:3e:8d:b9:c0:a3:18:fc:b2:cb:5b: 7b:e7:e1:92:d4:41:a0:a3:a2:de:59:cb:5a:f4:df: a7:02:c9:66:f5:f5:d5:41:2d:7f:34:70:dc:e6:b3: 20:9d:9e:11:e3:50:95:3a:18:1d:c2:a6:c6:8c:0a: a3:fb:ea:90:df:b7:a3:b8:b7:f9:b4:ea:ae:5b:b8: 18:b5:2d:00:3d:29:fd:70:7e:a0:65:57:1e:ad:17: c5:36:a9:3e:a9:e8:20:95:ab:6f:3c:bb:4a:b3:74: 82:09:66:d9:2e:98:13:51:f3:90:34:23:71:39:1c: e7:9c:d5:06:9f:95:46:ba:f9:23:f8:87:21:cd:44: 9a:7a:76:09:a5:51:10:cc:ab:d6:81:33:ab:7f:c0: 7f:80:40:96:67:b3:00:ac:a1:11:f3:da:d0:25:5f: bd:df:81:09:43:73:cb:c1:74:67:6e:f1:6b:74:92: 47:30:3d:30:83:26:fc:6e:9a:0b:f2:fb:e3:5b:7f: 44:e8:a8:20:6b:b6:5c:31:e0:42:92:9b:71:4f:19: 20:93:b6:a0:21:d4:b9:ad:f7:f6:29:48:ce:63:b4: fe:06:c8:32:d2:e7:0d:d8:c9:e7:7c:d1:58:67:74: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2B:C2:73:E0:CE:80:6F:71:03:B6:7B:46:06:FE:77:65:05:DD:8D X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:26:c3:8f:9e:e6:d9:d8:6e:0d:87:12:e6:b5:e4:68:65:1b: e1:5a:3b:8f:8f:d4:d7:72:45:b2:a9:9f:de:2c:46:b5:24:12: 93:bd:4c:76:3e:cb:2c:23:9b:7d:fc:4d:11:99:2a:63:75:34: e4:06:8d:70:f4:b5:33:4e:ec:0f:fe:16:f6:8c:e6:89:0e:0e: 40:d1:b4:15:cd:78:08:cd:73:4a:01:b5:ab:c8:5b:77:18:0a: 15:20:1e:22:42:c2:91:42:e9:06:96:15:ba:d0:83:1b:27:b3: e9:4c:1e:d3:b7:78:1d:c5:e7:be:8d:41:0f:d7:f9:6e:45:ba: 2b:a2:4b:5a:65:5e:63:73:f6:78:cb:c9:f1:a8:98:2d:86:f4: 41:fd:72:f4:4b:77:07:b4:35:6f:97:18:ea:57:34:e8:44:36: 02:b7:93:46:2c:e9:9b:1f:10:af:77:72:53:cf:95:33:b2:61: 50:05:e7:76:38:a7:b0:4c:46:21:c9:b1:64:00:f5:70:99:ce: 52:72:38:8b:0d:42:1b:4b:46:fc:dc:77:8f:a2:e7:87:fe:e1: 82:2c:9c:b7:d5:14:63:b9:42:33:94:51:88:ad:44:52:0d:64: ed:c1:40:19:33:7a:9b:cc:e7:a1:08:1c:06:4e:4a:5d:f6:e9: 02:3c:f4:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTA3MTkwNzI3MTdaFw0yNTA3MjYwNzI3MTdaMBgxFjAUBgNV BAMTDTY4N2I0OGQ2LWU3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGhq9AG/oxBmPtApacdgaGN12gPo25wKMY/LLLW3vn4ZLUQaCjot5Zy1r036cC yWb19dVBLX80cNzmsyCdnhHjUJU6GB3CpsaMCqP76pDft6O4t/m06q5buBi1LQA9 Kf1wfqBlVx6tF8U2qT6p6CCVq288u0qzdIIJZtkumBNR85A0I3E5HOec1QaflUa6 +SP4hyHNRJp6dgmlURDMq9aBM6t/wH+AQJZnswCsoRHz2tAlX73fgQlDc8vBdGdu 8Wt0kkcwPTCDJvxumgvy++Nbf0ToqCBrtlwx4EKSm3FPGSCTtqAh1Lmt9/YpSM5j tP4GyDLS5w3Yyed80VhndE0pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ivCc+DO gG9xA7Z7Rgb+d2UF3Y0wHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEAmw4+e5tnYbg2HEua15GhlG+FaO4+P1NdyRbKpn94sRrUkEpO9THY+ yywjm338TRGZKmN1NOQGjXD0tTNO7A/+FvaM5okODkDRtBXNeAjNc0oBtavIW3cY ChUgHiJCwpFC6QaWFbrQgxsns+lMHtO3eB3F576NQQ/X+W5FuiuiS1plXmNz9njL yfGomC2G9EH9cvRLdwe0NW+XGOpXNOhENgK3k0Ys6ZsfEK93clPPlTOyYVAF53Y4 p7BMRiHJsWQA9XCZzlJyOIsNQhtLRvzcd4+i54f+4YIsnLfVFGO5QjOUUYitRFIN ZO3BQBkzepvM56EIHAZOSl326QI89Gs= -----END CERTIFICATE-----Generated at Sun Jul 20 10:08:02 2025 by rpki-client