$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: dnsf/rbXB27gl0KPMYRn/15MHfdTYTReiXyCtPBtXIY= Subject key identifier: 66:D4:D8:FE:6F:8F:35:4A:D3:30:87:E0:40:62:21:2C:62:72:1D:E7 Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1BFB Signing time: Fri 30 May 2025 16:23:37 +0000 Manifest this update: Fri 30 May 2025 16:23:36 +0000 Manifest next update: Fri 06 Jun 2025 16:23:36 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: 3Wgh0NeZzsbVkY2q5Ex65eJqyLlLp/7Iq0UUQoF/Hcc=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7187 (0x1c13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: May 30 16:23:36 2025 GMT Not After : Jun 6 16:23:36 2025 GMT Subject: CN=6839db88-b384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:2a:b8:91:da:87:bf:ea:64:1c:3c:0a:10: 6f:f6:8a:85:56:fe:db:ec:40:a7:53:11:38:cc:1d: af:75:ba:d8:50:4e:70:4a:af:fe:4a:ca:5d:f1:20: c6:86:77:ad:7c:63:dd:01:9e:db:f5:d7:a9:dd:13: 95:f1:84:1e:fa:ea:17:2f:35:41:e0:49:c8:9a:64: d0:97:07:fb:00:0d:a7:3f:1a:fc:e1:42:03:33:20: cd:19:b3:18:15:0e:6f:f4:ce:bc:a1:2f:99:dc:cb: f5:eb:b1:9f:57:7a:b0:9d:dd:39:1a:48:b1:9c:2b: 62:1c:c9:36:10:1f:98:34:f6:74:e6:70:a9:60:15: b5:13:ca:29:b0:1e:26:49:d6:3a:33:79:c5:da:6b: 84:2b:2b:8a:37:7e:65:ed:e4:91:5c:fa:ef:6a:e6: f7:df:53:e4:8e:ed:da:86:f6:4c:f2:a0:6c:00:4a: e5:13:6a:00:b0:28:8a:f0:8c:d9:8d:98:e3:92:07: 87:11:67:34:25:19:46:97:92:ad:1e:d4:38:0f:8f: 29:a2:77:eb:81:88:4c:97:59:1c:b0:7b:a4:b9:b8: 97:33:b7:40:05:83:f9:7a:20:87:54:a0:ea:84:f6: 88:25:ce:85:54:52:27:25:53:2e:57:8b:4a:27:27: 69:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:D8:FE:6F:8F:35:4A:D3:30:87:E0:40:62:21:2C:62:72:1D:E7 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:25:d0:85:a3:af:18:3c:d2:55:22:73:3b:6f:b3:6b:dc:b7: de:0f:b1:3e:c6:bc:bb:04:61:7c:ce:2c:24:8d:e8:fb:45:18: aa:f9:f1:4d:07:e0:09:07:8e:28:cf:d4:a0:ca:41:72:b2:e1: 2b:0d:c3:c5:51:55:1c:9c:25:2a:39:92:f7:4a:e0:9a:81:60: da:47:62:27:c7:c3:4a:64:45:ef:22:12:bf:cb:fe:95:30:c0: 8d:5b:ea:c9:fb:45:95:50:67:5e:e8:50:2f:cf:2e:ec:59:8d: 26:2b:02:37:e7:4f:f6:a4:87:15:b0:77:12:65:0f:27:f3:5c: c4:72:93:21:aa:2b:b0:e4:8e:23:b6:44:2b:cb:ed:a8:d2:bc: b1:91:da:55:14:50:5c:e1:dd:90:ef:cd:6c:0d:b4:6e:a6:a5: ff:23:71:81:7c:83:99:48:11:eb:3d:4b:9b:1c:6e:75:50:95: 76:06:03:ff:9c:ea:f9:4e:ad:55:d8:b9:be:d4:4d:eb:a3:84: 11:55:ba:ac:a6:3a:e1:83:84:b4:7c:89:55:56:bf:17:fa:f6: c6:94:ad:99:21:e6:59:c8:a1:f8:79:2d:6e:c7:dd:aa:71:39: b8:54:49:17:da:50:ba:8b:a5:eb:fc:87:29:5a:70:f9:89:fe: 11:93:de:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwNTMwMTYyMzM2WhcNMjUwNjA2MTYyMzM2WjAYMRYwFAYD VQQDEw02ODM5ZGI4OC1iMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncAquJHah7/qZBw8ChBv9oqFVv7b7ECnUxE4zB2vdbrYUE5wSq/+Sspd8SDG hnetfGPdAZ7b9dep3ROV8YQe+uoXLzVB4EnImmTQlwf7AA2nPxr84UIDMyDNGbMY FQ5v9M68oS+Z3Mv167GfV3qwnd05GkixnCtiHMk2EB+YNPZ05nCpYBW1E8opsB4m SdY6M3nF2muEKyuKN35l7eSRXPrvaub331Pkju3ahvZM8qBsAErlE2oAsCiK8IzZ jZjjkgeHEWc0JRlGl5KtHtQ4D48ponfrgYhMl1kcsHukubiXM7dABYP5eiCHVKDq hPaIJc6FVFInJVMuV4tKJydpnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbU2P5v jzVK0zCH4EBiISxich3nMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkJdCFo68YPNJVInM7b7Nr3LfeD7E+xry7BGF8ziwkjej7RRiq+fFN B+AJB44oz9SgykFysuErDcPFUVUcnCUqOZL3SuCagWDaR2Inx8NKZEXvIhK/y/6V MMCNW+rJ+0WVUGde6FAvzy7sWY0mKwI350/2pIcVsHcSZQ8n81zEcpMhqiuw5I4j tkQry+2o0ryxkdpVFFBc4d2Q781sDbRupqX/I3GBfIOZSBHrPUubHG51UJV2BgP/ nOr5Tq1V2Lm+1E3ro4QRVbqspjrhg4S0fIlVVr8X+vbGlK2ZIeZZyKH4eS1ux92q cTm4VEkX2lC6i6Xr/IcpWnD5if4Rk95v -----END CERTIFICATE-----Generated at Sat May 31 17:22:13 2025 by rpki-client