$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: zfe63BtPRgkvIPFjOYsth/JJpwNaMg+AwIwEm5I2E00= Subject key identifier: 0D:B0:1C:52:FE:28:EC:BB:40:2F:DE:B6:DE:D3:DE:4A:C1:19:1F:FB Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 06DD Signing time: Mon 02 Jun 2025 22:12:58 +0000 Manifest this update: Mon 02 Jun 2025 22:12:58 +0000 Manifest next update: Mon 09 Jun 2025 22:12:58 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: iik3VDCO8tkpik1uWIhPiWh3m3gmCnI68NO3drcW3sk=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Jun 2 22:12:58 2025 GMT Not After : Jun 9 22:12:58 2025 GMT Subject: CN=683e21ea-bade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:7f:13:6a:e9:5a:0f:81:db:c1:a8:d8:c1: c2:12:7f:34:c8:48:96:2e:ca:d8:73:a3:ca:43:16: ce:ca:0f:1f:e9:d5:3d:52:bf:c2:7f:4c:b3:c4:67: 04:71:89:62:01:ed:a5:ae:a6:44:43:cc:89:e1:03: 5d:4e:8d:1f:7f:dd:b2:ff:fc:ae:74:7d:6f:9d:3a: f5:3b:ff:93:00:05:00:fa:4b:90:3f:98:0d:07:56: 2e:49:2e:74:e3:b7:25:f9:91:0c:df:51:63:6d:83: db:97:8f:69:f3:90:5d:d2:2b:b6:e5:a4:a4:0c:13: 70:01:5a:fa:6e:8b:3d:24:de:0e:43:83:bb:77:ab: ee:9d:bf:95:71:cb:5d:66:51:a3:8d:2a:e2:77:b5: 0c:b6:dd:92:74:a9:af:27:cc:27:14:23:f5:26:b3: d0:da:88:82:3e:d4:0f:53:1c:00:cf:3f:c8:eb:73: ec:ba:50:9e:12:d7:b9:bc:01:24:57:b9:c2:5f:ad: 4d:95:f1:57:2d:a1:65:bd:4b:23:04:4c:e9:31:87: 1c:5a:fa:18:2a:e8:bf:30:a0:1f:cb:12:fc:08:8f: 27:88:39:20:6b:c4:6c:3e:3b:57:58:20:75:74:cb: 1f:fc:41:f6:44:0b:07:ef:5b:1b:2c:ab:2c:f6:28: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B0:1C:52:FE:28:EC:BB:40:2F:DE:B6:DE:D3:DE:4A:C1:19:1F:FB X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6a:fb:49:9d:ad:7f:22:53:b5:44:04:9d:ff:13:ed:5e:2c: 02:83:3e:1c:36:2c:bb:b8:2a:b2:e1:f7:18:2b:f4:44:72:3f: 85:08:31:3c:45:3c:8b:5a:34:7f:72:e7:6e:16:a2:9d:52:76: 8c:f2:2e:8d:86:a6:71:31:65:fa:b1:13:20:be:69:6a:56:83: a2:db:53:ac:22:28:c8:d4:3a:95:41:94:11:c7:2f:69:f9:11: 0f:1d:2c:20:0c:fe:dc:5e:57:b8:3c:54:03:63:ba:92:74:b1: 05:f8:7b:7a:5f:0d:b8:9f:e8:5a:4c:eb:1f:2b:09:9e:a0:b4: 14:a4:7a:96:17:ad:b6:3a:5d:e6:af:82:90:99:1b:4b:9a:c2: d5:ce:dc:7f:7f:58:42:ab:be:24:14:0c:62:23:d2:cd:d2:74: 47:f3:7d:ff:c9:5c:77:03:d5:4a:8e:11:d9:c0:9d:bc:06:ab: d1:7f:7a:92:b1:a7:c4:6f:3a:83:7e:c6:47:2a:d7:eb:e5:c6: 32:ba:c4:ab:27:18:f5:70:61:4c:4a:1b:ea:d7:eb:1f:3e:98: 3b:fe:4b:43:ce:2d:a4:73:e3:3c:cf:55:29:81:c4:6a:69:61: 69:76:46:b7:1c:11:e6:63:a9:1e:6b:8b:b2:3c:b2:60:50:e5: e5:83:d4:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjUwNjAyMjIxMjU4WhcNMjUwNjA5MjIxMjU4WjAYMRYwFAYD VQQDEw02ODNlMjFlYS1iYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXt/E2rpWg+B28Go2MHCEn80yEiWLsrYc6PKQxbOyg8f6dU9Ur/Cf0yzxGcE cYliAe2lrqZEQ8yJ4QNdTo0ff92y//yudH1vnTr1O/+TAAUA+kuQP5gNB1YuSS50 47cl+ZEM31FjbYPbl49p85Bd0iu25aSkDBNwAVr6bos9JN4OQ4O7d6vunb+Vcctd ZlGjjSrid7UMtt2SdKmvJ8wnFCP1JrPQ2oiCPtQPUxwAzz/I63PsulCeEte5vAEk V7nCX61NlfFXLaFlvUsjBEzpMYccWvoYKui/MKAfyxL8CI8niDkga8RsPjtXWCB1 dMsf/EH2RAsH71sbLKss9iiVMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2wHFL+ KOy7QC/ett7T3krBGR/7MB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaavtJna1/IlO1RASd/xPtXiwCgz4cNiy7uCqy4fcYK/REcj+FCDE8 RTyLWjR/cuduFqKdUnaM8i6NhqZxMWX6sRMgvmlqVoOi21OsIijI1DqVQZQRxy9p +REPHSwgDP7cXle4PFQDY7qSdLEF+Ht6Xw24n+haTOsfKwmeoLQUpHqWF622Ol3m r4KQmRtLmsLVztx/f1hCq74kFAxiI9LN0nRH833/yVx3A9VKjhHZwJ28BqvRf3qS safEbzqDfsZHKtfr5cYyusSrJxj1cGFMShvq1+sfPpg7/ktDzi2kc+M8z1UpgcRq aWFpdka3HBHmY6kea4uyPLJgUOXlg9Rm -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:03 2025 by rpki-client