$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: SKrhC+iBASvzpcGihC69Tdx/toLTtzXLqDxaFcVMol4= Subject key identifier: 47:37:6C:B1:80:AF:F9:DA:31:0F:80:D6:BA:0E:9D:EC:9E:D0:7B:16 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 05A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 05A2 Signing time: Sat 14 Jun 2025 22:55:24 +0000 Manifest this update: Sat 14 Jun 2025 22:55:24 +0000 Manifest next update: Sat 21 Jun 2025 22:55:24 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: IYX6HVXrFUtL+CpmxxyASWUpm18y1q3uaAhE1T6xICY=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Jun 14 22:55:24 2025 GMT Not After : Jun 21 22:55:24 2025 GMT Subject: CN=684dfddc-e6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:1b:cf:14:39:7f:8a:5e:6f:bc:cb:88:72: a8:43:75:b1:0c:d1:08:9e:35:d1:d4:0f:59:68:bd: 6e:28:9f:44:9a:d2:6f:71:06:44:9a:c1:23:c0:b6: e3:45:5d:a2:e5:0c:43:06:31:8d:0f:74:b2:d5:1a: ed:e7:fb:dc:ee:9f:f9:a3:12:3b:2f:e6:05:4b:c3: 78:4d:f6:d2:e8:52:21:12:52:26:a7:f9:88:aa:73: b2:be:c2:a5:d8:ce:ab:64:6a:92:b9:c4:3e:50:44: 16:70:fe:95:d5:56:9a:a6:da:27:93:58:54:06:f1: 2e:ed:cd:ca:c6:f9:3c:0a:e6:95:a3:c4:74:92:3f: 01:3b:0c:a6:d4:b8:8a:8f:2c:d5:25:06:dd:6f:53: 60:59:a2:2f:1e:f6:c3:30:fb:e0:24:6c:0f:a4:44: 41:a5:66:c2:13:94:69:51:a2:2e:d2:64:d4:77:e0: 48:4e:6e:07:00:ef:46:70:0a:a5:61:fc:44:cd:e8: fc:38:31:b6:fb:21:40:43:08:cc:ec:16:43:e4:5f: bc:1b:c5:a2:b6:13:6c:e2:dc:60:90:03:7c:c4:d5: fd:68:23:84:47:ae:31:54:b8:cc:62:f3:de:58:c9: c6:b0:48:17:9f:7b:d2:cd:2c:51:0c:b2:5f:6f:e6: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:37:6C:B1:80:AF:F9:DA:31:0F:80:D6:BA:0E:9D:EC:9E:D0:7B:16 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b1:4e:8d:c8:f2:ff:fa:20:cf:3c:12:1b:e4:76:b6:01:90: 96:aa:48:7e:e4:db:c7:4c:60:b5:5c:29:27:2f:b8:fa:c5:68: 36:71:92:6b:58:fc:dd:82:fc:f4:7c:81:bf:23:e0:cd:d9:14: 58:c1:16:be:71:2d:c4:00:20:73:6f:8a:3e:64:ba:a7:53:a0: 0a:9d:86:4e:8f:e5:b4:63:5b:6b:11:23:05:a3:ee:30:73:23: 11:83:0a:e0:0f:0f:5f:d2:b5:24:30:51:dd:47:83:1f:66:90: 20:07:b9:5e:bd:2e:0e:da:03:64:47:50:2b:fe:6e:b7:13:a0: e6:b4:a6:73:4c:3c:0c:ef:8c:79:7a:8b:02:e8:ef:33:ac:51: 14:52:80:10:b1:e1:b1:f4:fe:b5:a5:ba:86:9f:46:8c:cb:46: d6:75:1a:2e:79:0e:20:de:06:f0:ff:c6:57:0c:84:4e:69:d8: 73:80:11:52:ca:e5:bc:2a:05:cb:87:58:8b:9a:5d:ee:45:93: 53:f4:d5:b9:c9:03:4a:5d:cd:e8:32:eb:ea:1c:87:0d:5d:1b: 84:7f:11:63:b4:9b:c5:c6:f1:a0:a9:8e:70:31:be:9d:f7:cb: 21:b5:0e:18:a0:92:a5:55:c6:5e:a3:63:31:cd:f5:05:50:b4: 37:07:79:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjUwNjE0MjI1NTI0WhcNMjUwNjIxMjI1NTI0WjAYMRYwFAYD VQQDEw02ODRkZmRkYy1lNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl8bzxQ5f4peb7zLiHKoQ3WxDNEInjXR1A9ZaL1uKJ9EmtJvcQZEmsEjwLbj RV2i5QxDBjGND3Sy1Rrt5/vc7p/5oxI7L+YFS8N4TfbS6FIhElImp/mIqnOyvsKl 2M6rZGqSucQ+UEQWcP6V1Vaaptonk1hUBvEu7c3Kxvk8CuaVo8R0kj8BOwym1LiK jyzVJQbdb1NgWaIvHvbDMPvgJGwPpERBpWbCE5RpUaIu0mTUd+BITm4HAO9GcAql YfxEzej8ODG2+yFAQwjM7BZD5F+8G8WithNs4txgkAN8xNX9aCOER64xVLjMYvPe WMnGsEgXn3vSzSxRDLJfb+aEEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc3bLGA r/naMQ+A1roOneye0HsWMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmsU6NyPL/+iDPPBIb5Ha2AZCWqkh+5NvHTGC1XCknL7j6xWg2cZJr WPzdgvz0fIG/I+DN2RRYwRa+cS3EACBzb4o+ZLqnU6AKnYZOj+W0Y1trESMFo+4w cyMRgwrgDw9f0rUkMFHdR4MfZpAgB7levS4O2gNkR1Ar/m63E6DmtKZzTDwM74x5 eosC6O8zrFEUUoAQseGx9P61pbqGn0aMy0bWdRoueQ4g3gbw/8ZXDIROadhzgBFS yuW8KgXLh1iLml3uRZNT9NW5yQNKXc3oMuvqHIcNXRuEfxFjtJvFxvGgqY5wMb6d 98shtQ4YoJKlVcZeo2MxzfUFULQ3B3nz -----END CERTIFICATE-----Generated at Sun Jun 15 08:16:26 2025 by rpki-client