$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft File: jcAuucfBcJwTt0jXBDtY9DW_qXI.mft (raw, json) Hash identifier: Pexj4eVDVbuO/5qePXgcyCcJ11MT/RTOJy1E16Yuv14= Subject key identifier: 6D:4D:2A:AD:95:74:48:77:C1:72:88:38:B4:C2:96:54:BF:CA:BB:DF Authority key identifier: 8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 Certificate issuer: /CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Certificate serial: 0DD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft Manifest number: 3614 Signing time: Sat 31 May 2025 15:56:45 +0000 Manifest this update: Sat 31 May 2025 15:56:45 +0000 Manifest next update: Sat 07 Jun 2025 15:56:45 +0000 Files and hashes: 1: jcAuucfBcJwTt0jXBDtY9DW_qXI.crl (hash: vShnadkosh8Zgxo06PDz1gCSHwq7+TgQY8qx1frAHbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Validity Not Before: May 31 15:56:45 2025 GMT Not After : Jun 7 15:56:45 2025 GMT Subject: CN=683b26bd-3e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:fb:e8:f6:9f:7b:f5:ce:8f:da:03:45:64: e4:8e:5b:98:6d:2a:83:77:21:94:02:1e:bb:10:c4: 0b:fa:87:89:1d:cf:b0:2d:4c:d3:6b:60:69:6c:80: 09:bf:a8:9c:3c:ab:04:7b:9a:47:bd:ff:7a:41:91: 4c:3c:3d:b4:d4:09:19:01:22:44:d0:49:d1:1f:43: 5d:be:36:6f:6f:cf:b8:a5:ca:6c:d7:4f:24:82:55: 43:e8:ca:c6:f7:6f:fa:38:7f:50:c4:98:e0:42:f9: fb:99:b9:2c:7b:de:1b:26:95:53:62:73:93:64:c0: 4c:60:de:88:19:7e:4c:d8:40:00:43:0c:da:14:b9: 39:fe:a9:2f:39:c0:fe:73:95:66:f2:08:05:48:d2: e8:5c:67:4e:d5:2e:bd:97:ee:47:c1:c2:63:75:73: a2:e4:66:e3:75:0f:8c:03:3c:80:16:13:6d:16:13: 3f:40:e1:4a:ee:cf:ea:a5:69:c0:77:f8:d9:96:11: d7:0d:7a:a4:1e:5a:2c:ec:f8:e7:aa:e0:c2:11:fe: 91:b2:36:16:5b:21:6e:ca:a3:b4:4a:6b:00:a7:47: 01:e5:83:d9:7f:f0:39:1c:ea:a1:59:0f:2d:c5:8a: 73:f7:4f:d0:f8:42:3e:6f:11:d4:09:7a:ac:55:d9: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4D:2A:AD:95:74:48:77:C1:72:88:38:B4:C2:96:54:BF:CA:BB:DF X509v3 Authority Key Identifier: keyid:8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:82:ee:fd:2f:0d:a3:7c:35:14:f7:4f:0d:63:ea:1d:18: 5c:bd:ff:2e:c7:5e:5b:04:1a:5f:7f:10:2b:73:e8:c1:b2:cc: 7f:11:20:71:fa:1e:8e:60:83:f3:5a:46:73:c9:a9:65:c4:d4: d0:33:e8:20:ff:15:a8:a4:bf:c4:d4:2b:fe:01:41:be:af:6c: 73:a0:b2:68:b8:fa:ac:e5:f6:a0:d7:c8:7f:1f:c0:5f:df:7d: 8d:3d:10:66:44:20:cd:3c:b5:69:28:a2:f8:c7:e2:e3:c4:ba: 25:b9:1a:f6:f6:fc:b6:c6:b3:58:71:ab:d2:04:20:bb:b2:28: 2e:2b:65:a9:7e:aa:a6:13:22:da:d2:2f:12:66:a7:fa:05:2d: 36:1b:2b:8a:7c:8e:43:27:3b:59:0a:c1:da:2a:cc:a8:fd:2c: 6f:a4:47:d2:f0:99:47:a7:ed:63:6d:3a:2d:50:58:88:57:53: c6:00:ea:38:72:8c:a1:71:d5:e1:db:3a:e0:7b:20:e6:66:f6: aa:4b:80:77:54:d1:0b:b9:5a:97:a3:6b:35:15:19:b0:6e:0d: f4:82:fa:aa:56:35:d3:ff:42:74:6c:7d:5e:41:f9:87:1e:c9: ef:14:2a:a7:7b:32:95:5a:86:e7:ab:79:d8:82:c1:6e:68:c9: 98:31:5f:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDhEQzAyRUI5QzdDMTcwOUMxM0I3NDhENzA0M0I1OEY0 MzVCRkE5NzIwHhcNMjUwNTMxMTU1NjQ1WhcNMjUwNjA3MTU1NjQ1WjAYMRYwFAYD VQQDEw02ODNiMjZiZC0zZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYD76Pafe/XOj9oDRWTkjluYbSqDdyGUAh67EMQL+oeJHc+wLUzTa2BpbIAJ v6icPKsEe5pHvf96QZFMPD201AkZASJE0EnRH0NdvjZvb8+4pcps108kglVD6MrG 92/6OH9QxJjgQvn7mbkse94bJpVTYnOTZMBMYN6IGX5M2EAAQwzaFLk5/qkvOcD+ c5Vm8ggFSNLoXGdO1S69l+5HwcJjdXOi5GbjdQ+MAzyAFhNtFhM/QOFK7s/qpWnA d/jZlhHXDXqkHlos7PjnquDCEf6RsjYWWyFuyqO0SmsAp0cB5YPZf/A5HOqhWQ8t xYpz90/Q+EI+bxHUCXqsVdmn0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1NKq2V dEh3wXKIOLTCllS/yrvfMB8GA1UdIwQYMBaAFI3ALrnHwXCcE7dI1wQ7WPQ1v6ly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNKd1R0MGpYQkR0WTlEV19x WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjQXV1Y2ZCY0p3VHQwalhCRHRZOURXX3FYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNK d1R0MGpYQkR0WTlEV19xWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXI4Lu/S8No3w1FPdPDWPqHRhcvf8ux15bBBpffxArc+jBssx/ESBx +h6OYIPzWkZzyallxNTQM+gg/xWopL/E1Cv+AUG+r2xzoLJouPqs5fag18h/H8Bf 332NPRBmRCDNPLVpKKL4x+LjxLoluRr29vy2xrNYcavSBCC7siguK2WpfqqmEyLa 0i8SZqf6BS02GyuKfI5DJztZCsHaKsyo/SxvpEfS8JlHp+1jbTotUFiIV1PGAOo4 coyhcdXh2zrgeyDmZvaqS4B3VNELuVqXo2s1FRmwbg30gvqqVjXT/0J0bH1eQfmH HsnvFCqnezKVWobnq3nYgsFuaMmYMV/p -----END CERTIFICATE-----Generated at Sat May 31 17:48:39 2025 by rpki-client