$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: DK7pKHIlgAu2cANl5rr7wKgzA+ZIsudhchaee6KTBNs= Subject key identifier: 54:3F:F6:7C:27:47:B0:BD:1D:86:6F:A0:E6:CD:19:2D:17:48:14:81 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 01E9 Signing time: Tue 01 Jul 2025 02:56:55 +0000 Manifest this update: Tue 01 Jul 2025 02:56:55 +0000 Manifest next update: Tue 08 Jul 2025 02:56:55 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: 9GT3tqECzkSUNfJ90/cCb/aFqHptKrlKbKB6RAYcpsE=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Jul 1 02:56:55 2025 GMT Not After : Jul 8 02:56:55 2025 GMT Subject: CN=68634e77-08d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:ff:88:61:a7:04:ab:1a:80:84:a0:d9:aa: 93:5e:a3:a0:1b:18:0f:99:cb:18:93:6a:af:01:be: 00:38:62:eb:d0:80:11:64:ce:28:4e:ee:0d:6f:a7: 09:13:7d:53:91:bd:87:21:30:a1:f9:13:44:03:e1: 48:0f:ee:a4:89:d2:e1:9b:8f:65:ec:0e:ea:0c:c4: 9d:f5:cd:2d:e5:f7:6b:9b:38:3c:a4:c1:4b:78:7e: 6b:d8:7a:14:dc:6a:24:0b:24:d4:82:11:c0:c1:0f: fe:73:15:b9:5e:ba:07:14:08:0a:1c:48:f3:52:18: f3:4e:02:03:58:93:57:45:ae:f9:8c:e0:a3:13:45: 48:83:c5:1e:f2:39:dd:19:9d:e0:45:01:f2:17:c7: 6a:5c:db:94:ad:f1:cf:2b:34:79:fb:52:d5:1d:8d: b3:37:67:d0:57:3c:71:c0:74:8b:89:dc:e8:c7:55: 33:30:76:a5:88:6c:69:02:0d:4b:35:0e:27:1b:97: 57:ee:8d:dd:30:6a:f1:cd:19:ed:86:45:97:24:b6: 88:c4:d7:90:30:0a:10:89:6f:c4:c5:c7:88:5e:61: f5:b8:73:f5:7e:d3:75:c0:9c:92:cd:3d:e5:9d:61: 9b:a0:0b:08:2d:80:01:e6:7f:43:58:9f:da:d3:ce: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3F:F6:7C:27:47:B0:BD:1D:86:6F:A0:E6:CD:19:2D:17:48:14:81 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fb:6a:c5:33:79:30:c3:23:1c:1b:9d:71:97:10:54:b9:83: cc:64:59:89:e3:f4:4e:aa:f2:2a:d2:47:97:bf:c9:52:a8:87: 69:b2:f6:2b:ca:21:67:97:62:43:8c:f6:6a:a9:fb:a3:8a:d9: f5:06:dc:05:49:05:f2:49:72:2e:29:1e:36:90:74:fc:19:a4: 6b:7f:33:df:d2:04:da:59:48:1e:08:65:c1:92:41:fa:89:2e: b2:bb:17:19:6e:93:f1:29:b8:0c:76:2b:a4:27:bc:d9:71:79: 12:4d:bb:a7:53:5f:ff:6c:f4:21:e7:7b:f2:2e:a3:b2:47:60: e4:e3:72:d2:c4:d7:07:fd:7b:24:fe:02:f8:c3:62:8b:3a:ce: 43:94:99:1b:b8:5f:b5:34:e7:bf:78:3a:fa:89:b3:07:ca:40: ad:f6:9c:59:48:97:05:2a:b3:0a:43:17:93:47:11:60:e0:07: 7f:d5:fe:89:37:71:9f:7a:b5:ae:e0:a1:ab:ca:c3:95:25:0e: 28:fe:95:2d:81:68:3d:27:30:c9:0c:d3:1c:e7:ea:5b:ef:6c: 54:55:6d:9f:d4:b8:da:83:b4:e6:95:88:34:02:b7:b0:e4:34: d2:b4:e3:71:c8:3f:0b:ba:e5:11:22:8e:b6:9a:6a:d2:db:af: 33:92:0e:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjUwNzAxMDI1NjU1WhcNMjUwNzA4MDI1NjU1WjAYMRYwFAYD VQQDEw02ODYzNGU3Ny0wOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX3/iGGnBKsagISg2aqTXqOgGxgPmcsYk2qvAb4AOGLr0IARZM4oTu4Nb6cJ E31Tkb2HITCh+RNEA+FID+6kidLhm49l7A7qDMSd9c0t5fdrmzg8pMFLeH5r2HoU 3GokCyTUghHAwQ/+cxW5XroHFAgKHEjzUhjzTgIDWJNXRa75jOCjE0VIg8Ue8jnd GZ3gRQHyF8dqXNuUrfHPKzR5+1LVHY2zN2fQVzxxwHSLidzox1UzMHaliGxpAg1L NQ4nG5dX7o3dMGrxzRnthkWXJLaIxNeQMAoQiW/ExceIXmH1uHP1ftN1wJySzT3l nWGboAsILYAB5n9DWJ/a0873JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ/9nwn R7C9HYZvoObNGS0XSBSBMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+2rFM3kwwyMcG51xlxBUuYPMZFmJ4/ROqvIq0keXv8lSqIdpsvYr yiFnl2JDjPZqqfujitn1BtwFSQXySXIuKR42kHT8GaRrfzPf0gTaWUgeCGXBkkH6 iS6yuxcZbpPxKbgMdiukJ7zZcXkSTbunU1//bPQh53vyLqOyR2Dk43LSxNcH/Xsk /gL4w2KLOs5DlJkbuF+1NOe/eDr6ibMHykCt9pxZSJcFKrMKQxeTRxFg4Ad/1f6J N3GferWu4KGrysOVJQ4o/pUtgWg9JzDJDNMc5+pb72xUVW2f1Ljag7TmlYg0Arew 5DTStONxyD8LuuURIo62mmrS268zkg6c -----END CERTIFICATE-----Generated at Tue Jul 1 19:54:17 2025 by rpki-client