$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json) Hash identifier: S8QtmenhqktswOy09ZHpOHl6KLUosn1YqcMXvnL6Chk= Subject key identifier: 4A:D0:D0:10:9A:90:3F:48:D4:58:A3:E4:7D:39:30:E5:4D:3A:D2:AC Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft Manifest number: A5 Signing time: Sun 01 Jun 2025 06:09:48 +0000 Manifest this update: Sun 01 Jun 2025 06:09:48 +0000 Manifest next update: Sun 08 Jun 2025 06:09:48 +0000 Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: DGyiUKe9rYWyRAvMP8PpcE1dAEYIkkxMRZW65qXykiA=) 2: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: 8/Hd/HSfsJzaFCQ02un66M2YDgdginFixcaFn5JQidY=) 3: DB9E3242C8E811EF86365B2AC4F9AE02.roa (hash: v6pTRro113en+h2WsmtXqk2rxE6NwkgghVA0fGJU70E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Validity Not Before: Jun 1 06:09:48 2025 GMT Not After : Jun 8 06:09:48 2025 GMT Subject: CN=683beeac-1113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:d6:2a:8a:7c:b9:eb:0e:6d:52:4a:89:92: 5d:6a:96:2e:64:53:24:54:42:8d:6d:d5:b6:fb:25: fe:ce:5f:ef:0f:fe:46:d4:4c:41:d0:73:fd:b6:af: 50:f2:d1:b6:0d:c6:6a:5d:9b:f8:9d:44:89:e7:f5: 95:2c:c7:1f:31:41:0d:79:14:6d:0b:42:cb:ea:54: 16:2b:7f:77:52:27:81:f8:dd:64:24:bc:de:4c:17: 40:a3:58:df:a2:c5:61:9e:23:de:d6:55:d6:9e:4a: ad:12:8f:d8:c5:83:2b:fd:27:1b:93:ec:d9:0f:25: 67:22:1b:6b:48:cb:68:f7:d0:c7:66:48:6c:cc:66: cd:a6:3c:b6:21:d8:72:f3:76:82:ca:6d:f9:f8:9a: d4:52:df:9e:70:38:8f:5e:46:34:13:ce:7d:0d:0d: 1a:d3:21:6e:3b:a7:e5:11:df:c4:02:27:a9:df:fe: 2d:73:45:21:f8:e8:13:ea:b6:71:a9:10:d6:2a:21: 2b:d2:30:86:e8:a9:a5:d7:ff:6d:57:96:87:1a:0c: 8a:66:02:28:4d:cd:cc:fb:d9:5e:1d:1c:de:d3:5f: 0a:8c:5c:eb:50:22:6b:45:ed:70:9a:24:6e:80:a1: 50:ec:26:aa:e0:67:39:16:54:92:a9:a0:63:d1:4e: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D0:D0:10:9A:90:3F:48:D4:58:A3:E4:7D:39:30:E5:4D:3A:D2:AC X509v3 Authority Key Identifier: keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4b:9e:cc:25:67:45:cd:06:2f:db:fa:91:86:c8:79:8e:ef: 21:8e:6f:5e:96:8e:36:fc:39:2f:68:4a:f0:8c:88:0d:81:35: 3d:8a:63:6f:b0:a4:2c:5b:ff:68:7c:01:03:00:90:f0:21:e9: e1:c5:44:38:fc:dc:8d:46:09:4e:63:6e:cd:dc:77:80:55:7b: d6:3a:86:d0:4b:1d:fd:29:90:d4:d2:9e:0c:1b:95:44:af:c4: 9e:f0:1b:e7:ae:62:e5:e3:6d:3f:e2:9d:c6:67:ed:8f:bf:50: 0f:0d:96:04:b7:a7:d8:f3:a5:c1:9a:cb:98:5b:0f:5b:26:4e: 7e:d2:26:99:f7:b1:35:0f:94:0b:09:20:b8:cb:41:d3:51:c2: b8:8b:72:a9:33:b4:f7:da:82:ef:a6:f9:5d:5b:1c:a9:1e:52: 49:76:fe:ca:51:cf:3e:b1:3e:47:36:ac:e9:c8:66:e1:be:d2: 1b:fd:3e:ca:9d:19:1e:ae:75:28:1e:6b:24:f6:a6:74:06:e0: b5:dd:72:29:94:e7:eb:23:1c:64:33:9e:f1:30:e3:46:ff:bd: 60:ce:ef:bf:6f:45:2c:c2:f6:3a:66:e8:05:72:bc:1a:d6:d3: dc:dc:b4:43:01:d7:15:6a:12:5e:10:e5:3f:6b:4a:9b:3a:ad: 9f:ea:f6:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD MTRDQ0ZFM0IwHhcNMjUwNjAxMDYwOTQ4WhcNMjUwNjA4MDYwOTQ4WjAYMRYwFAYD VQQDEw02ODNiZWVhYy0xMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXvWKop8uesObVJKiZJdapYuZFMkVEKNbdW2+yX+zl/vD/5G1ExB0HP9tq9Q 8tG2DcZqXZv4nUSJ5/WVLMcfMUENeRRtC0LL6lQWK393UieB+N1kJLzeTBdAo1jf osVhniPe1lXWnkqtEo/YxYMr/Scbk+zZDyVnIhtrSMto99DHZkhszGbNpjy2Idhy 83aCym35+JrUUt+ecDiPXkY0E859DQ0a0yFuO6flEd/EAiep3/4tc0Uh+OgT6rZx qRDWKiEr0jCG6Kml1/9tV5aHGgyKZgIoTc3M+9leHRze018KjFzrUCJrRe1wmiRu gKFQ7Caq4Gc5FlSSqaBj0U6LZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErQ0BCa kD9I1Fij5H05MOVNOtKsMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2 Q09sN0l1VzJDYXZCVE1fanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwS57MJWdFzQYv2/qRhsh5ju8hjm9elo42/DkvaErwjIgNgTU9imNv sKQsW/9ofAEDAJDwIenhxUQ4/NyNRglOY27N3HeAVXvWOobQSx39KZDU0p4MG5VE r8Se8BvnrmLl420/4p3GZ+2Pv1APDZYEt6fY86XBmsuYWw9bJk5+0iaZ97E1D5QL CSC4y0HTUcK4i3KpM7T32oLvpvldWxypHlJJdv7KUc8+sT5HNqzpyGbhvtIb/T7K nRkernUoHmsk9qZ0BuC13XIplOfrIxxkM57xMONG/71gzu+/b0UswvY6ZugFcrwa 1tPc3LRDAdcVahJeEOU/a0qbOq2f6vZI -----END CERTIFICATE-----Generated at Mon Jun 2 20:50:09 2025 by rpki-client