$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: Z+0F70ztEqz6+h6Dm/M7R9Io7sD3h5HMtIz6SrPl4NE= Subject key identifier: DA:F2:9E:57:A8:11:38:87:7F:4C:D1:FB:E9:64:1E:B6:48:3E:A3:2A Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 084D Signing time: Fri 30 May 2025 20:56:58 +0000 Manifest this update: Fri 30 May 2025 20:56:58 +0000 Manifest next update: Fri 06 Jun 2025 20:56:58 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: BujfFYq0qwS01yH0LMigKsPfn214B1OR6Xd3QMbUpVk=) 2: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (hash: Pre6mj3qji68nWX5VPNZNIBmXlVK+D7mKmGk/F/UT7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: May 30 20:56:58 2025 GMT Not After : Jun 6 20:56:58 2025 GMT Subject: CN=683a1b9a-280b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:b7:13:36:f7:8e:83:ce:ef:ba:55:5a:e2: 6b:9e:f9:93:51:8c:f9:ac:b3:82:b2:47:02:12:af: 9b:5e:25:6f:a2:48:1d:2e:a0:d4:6c:2b:5f:f7:59: 0f:3f:63:0d:aa:93:34:b8:7b:20:cb:32:85:b1:67: 0b:07:b2:4b:42:7e:75:bd:bd:cf:3d:21:7d:81:72: 96:14:10:dc:51:0b:f2:19:95:a3:e9:42:98:62:f8: 11:07:00:3a:7f:17:c9:85:19:09:99:4a:e2:cb:58: 60:78:ef:09:39:78:5e:cc:00:bc:88:ac:15:a4:91: 21:20:87:6a:53:69:cc:1c:cd:ab:6a:b3:02:55:d9: 10:4d:d0:18:5d:75:16:24:53:d2:7e:fc:ed:d5:d9: cb:71:2e:da:b8:d7:97:27:bb:d4:90:0b:15:9f:c6: 42:12:04:95:48:ae:4c:79:d4:d4:39:c7:68:e3:b9: d4:b3:66:b0:1f:fd:f2:df:d1:30:2a:d6:ce:4f:a7: a2:64:17:6e:e5:80:bf:31:61:89:61:ee:a6:ab:80: 94:ce:ef:31:3e:37:29:9b:6e:98:3f:b9:6c:4c:ef: e4:ed:e6:4d:db:44:2c:73:12:8d:7f:15:cf:21:46: d0:25:ce:a7:8a:39:5c:b5:6b:23:43:e6:f1:26:92: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F2:9E:57:A8:11:38:87:7F:4C:D1:FB:E9:64:1E:B6:48:3E:A3:2A X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a0:9e:49:3b:06:8b:d3:fd:7d:82:b8:bb:31:93:e1:d4:ee: ee:b7:42:65:6c:d9:45:54:ca:76:7c:b9:bf:f9:a2:4f:fd:37: 3b:80:df:70:74:f3:55:a8:02:36:5f:70:3d:81:9c:35:b7:ff: d8:27:dc:1c:12:0e:4e:aa:a0:b8:a2:d6:47:d1:46:b6:d3:8f: 98:65:8e:85:b2:c2:de:7c:28:17:e5:56:91:47:7d:27:57:e1: ec:05:66:27:7c:65:17:e9:fe:73:ca:a7:b7:66:e6:09:83:af: dc:7a:84:28:9e:aa:e7:c1:66:c4:23:ea:7c:55:7a:ae:9d:4d: 2e:04:e2:c7:34:3a:ee:d5:61:50:92:b5:f7:c2:96:f0:dd:43: cc:9c:99:a2:21:68:47:1b:23:bc:ab:9d:0c:6b:a1:98:bd:c5: b7:03:dd:ea:6b:13:bf:07:f7:b5:7b:1a:1f:ad:9e:62:63:3a: 2c:3d:3f:ff:60:1b:47:f4:e6:c6:84:9a:ba:90:22:44:31:1d: 9b:c3:a8:a4:cf:6f:e5:17:7f:df:ba:08:85:7b:9f:ae:28:ad: a3:bc:40:06:f4:c0:c8:5c:d1:85:81:9e:4c:c9:6f:90:01:35: ef:73:b2:78:8c:00:f4:43:17:58:cc:fa:59:c9:69:ff:16:f8: 5a:7c:7e:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwNTMwMjA1NjU4WhcNMjUwNjA2MjA1NjU4WjAYMRYwFAYD VQQDEw02ODNhMWI5YS0yODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9+3Ezb3joPO77pVWuJrnvmTUYz5rLOCskcCEq+bXiVvokgdLqDUbCtf91kP P2MNqpM0uHsgyzKFsWcLB7JLQn51vb3PPSF9gXKWFBDcUQvyGZWj6UKYYvgRBwA6 fxfJhRkJmUriy1hgeO8JOXhezAC8iKwVpJEhIIdqU2nMHM2rarMCVdkQTdAYXXUW JFPSfvzt1dnLcS7auNeXJ7vUkAsVn8ZCEgSVSK5MedTUOcdo47nUs2awH/3y39Ew KtbOT6eiZBdu5YC/MWGJYe6mq4CUzu8xPjcpm26YP7lsTO/k7eZN20QscxKNfxXP IUbQJc6nijlctWsjQ+bxJpJgQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrynleo ETiHf0zR++lkHrZIPqMqMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBroJ5JOwaL0/19gri7MZPh1O7ut0JlbNlFVMp2fLm/+aJP/Tc7gN9w dPNVqAI2X3A9gZw1t//YJ9wcEg5OqqC4otZH0Ua204+YZY6FssLefCgX5VaRR30n V+HsBWYnfGUX6f5zyqe3ZuYJg6/ceoQonqrnwWbEI+p8VXqunU0uBOLHNDru1WFQ krX3wpbw3UPMnJmiIWhHGyO8q50Ma6GYvcW3A93qaxO/B/e1exofrZ5iYzosPT// YBtH9ObGhJq6kCJEMR2bw6ikz2/lF3/fugiFe5+uKK2jvEAG9MDIXNGFgZ5MyW+Q ATXvc7J4jAD0QxdYzPpZyWn/FvhafH5j -----END CERTIFICATE-----Generated at Sat May 31 17:23:36 2025 by rpki-client