$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: Ehpmz4hon3flfoRCS2BtZaU8UpXpnfK5/h0EOET7hB4= Subject key identifier: 70:85:85:C3:57:2D:8F:0C:42:21:BB:A9:64:0D:EC:C4:A1:22:28:BB Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 06E3 Signing time: Fri 30 May 2025 22:18:04 +0000 Manifest this update: Fri 30 May 2025 22:18:04 +0000 Manifest next update: Fri 06 Jun 2025 22:18:04 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: ojXLATjMcsSy/e/Ekb4uox6w4FoqNYlv/UNKMIsufDg=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: X7/wtt04QWk9x+2X3bhJ9nLStWcZ9LhUojCxV8pCE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: May 30 22:18:04 2025 GMT Not After : Jun 6 22:18:04 2025 GMT Subject: CN=683a2e9c-d63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:4c:1a:6e:b0:37:aa:24:be:e4:dd:32:48: a9:98:f2:84:e2:d6:c1:ec:9d:7a:c3:09:6b:2b:0a: 72:3c:cb:e1:ef:1a:3b:8b:b9:7c:de:83:5e:72:48: da:73:65:31:80:3c:5b:af:37:48:8e:5c:90:3b:c7: 4c:52:fb:55:ee:d6:b1:04:06:04:b0:72:96:f6:de: a1:d4:74:46:f3:d1:14:51:1b:cd:4e:a3:b0:11:fa: 08:75:9a:91:b8:be:b7:2a:32:73:9b:23:63:e8:de: 01:16:17:54:6d:e5:9b:90:0f:b4:8d:87:f5:ba:54: c2:4a:0e:e2:2d:6a:d4:6f:2e:0a:d6:c4:3b:f4:ca: 78:ec:f0:dd:be:46:02:f6:ef:b1:20:14:f9:0c:09: ba:6f:b7:99:bd:5a:75:70:7c:cc:b2:b9:f1:ff:94: fa:6f:61:9f:21:b2:14:ae:b7:33:f7:81:4f:d5:95: 22:84:87:ac:0e:3e:ce:f2:f7:40:f8:7d:4e:c8:83: d2:13:0c:41:b6:ad:b8:81:d1:6e:6c:e6:82:d3:f3: 21:4e:85:96:f4:63:77:7b:95:c9:42:f1:7b:a4:f4: 73:75:ae:1d:87:26:74:12:a2:f9:53:06:dc:4c:a7: 3a:33:ef:4f:1e:2e:d8:fc:23:6d:c7:9a:5e:8a:ba: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:85:C3:57:2D:8F:0C:42:21:BB:A9:64:0D:EC:C4:A1:22:28:BB X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:bd:31:44:8d:0d:9c:ab:1e:51:d2:05:e7:6a:f7:2c:7b:f5: 02:52:2d:4e:32:47:49:ae:c0:1c:3a:aa:82:a9:34:bb:bb:bb: 89:ae:18:83:97:e9:06:57:9a:22:d7:84:f2:d3:86:d7:e5:c2: f8:9e:29:fb:94:93:a5:21:04:dd:bb:58:c6:49:94:26:e3:e6: b4:98:29:55:2e:99:97:97:aa:38:bf:f6:5d:0e:bb:26:af:da: 15:c9:88:56:d7:b9:f5:f1:23:2d:99:19:70:ee:0d:28:84:08: 90:ab:8f:68:29:92:94:31:0c:94:68:f0:19:4d:6c:8f:d7:f8: ec:f9:d9:00:aa:47:92:88:d0:5d:34:b2:c3:17:de:40:e0:93: e5:a6:46:2f:29:8c:6d:a3:a2:8f:30:0c:e7:e7:9f:8e:9f:c5: 68:03:88:c4:86:40:59:ed:fe:2f:3f:4b:38:92:fe:49:e5:92: bf:71:a4:44:0a:76:d4:9c:f6:8e:5b:7a:44:b7:38:ae:19:e4: 57:82:87:11:3d:f9:e0:77:58:dc:08:b6:99:f4:0e:21:ec:ad: 5a:64:d4:32:e8:92:18:b5:c6:4d:ea:e5:22:19:08:ad:8f:b1: 90:77:3d:14:d6:27:f4:39:a9:6f:bf:88:6a:54:bd:06:f7:a8: 2b:2d:0d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwNTMwMjIxODA0WhcNMjUwNjA2MjIxODA0WjAYMRYwFAYD VQQDEw02ODNhMmU5Yy1kNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp1MGm6wN6okvuTdMkipmPKE4tbB7J16wwlrKwpyPMvh7xo7i7l83oNeckja c2UxgDxbrzdIjlyQO8dMUvtV7taxBAYEsHKW9t6h1HRG89EUURvNTqOwEfoIdZqR uL63KjJzmyNj6N4BFhdUbeWbkA+0jYf1ulTCSg7iLWrUby4K1sQ79Mp47PDdvkYC 9u+xIBT5DAm6b7eZvVp1cHzMsrnx/5T6b2GfIbIUrrcz94FP1ZUihIesDj7O8vdA +H1OyIPSEwxBtq24gdFubOaC0/MhToWW9GN3e5XJQvF7pPRzda4dhyZ0EqL5Uwbc TKc6M+9PHi7Y/CNtx5peirou3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCFhcNX LY8MQiG7qWQN7MShIii7MB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5vTFEjQ2cqx5R0gXnavcse/UCUi1OMkdJrsAcOqqCqTS7u7uJrhiD l+kGV5oi14Ty04bX5cL4nin7lJOlIQTdu1jGSZQm4+a0mClVLpmXl6o4v/ZdDrsm r9oVyYhW17n18SMtmRlw7g0ohAiQq49oKZKUMQyUaPAZTWyP1/js+dkAqkeSiNBd NLLDF95A4JPlpkYvKYxto6KPMAzn55+On8VoA4jEhkBZ7f4vP0s4kv5J5ZK/caRE CnbUnPaOW3pEtziuGeRXgocRPfngd1jcCLaZ9A4h7K1aZNQy6JIYtcZN6uUiGQit j7GQdz0U1if0Oalvv4hqVL0G96grLQ0y -----END CERTIFICATE-----Generated at Sat May 31 15:13:00 2025 by rpki-client