$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: J+O9NFnTY987yzYSqPhX8+b8XD/PaQBPwRAJJmRTw1E= Subject key identifier: 0F:10:0A:7E:EE:C7:0D:F0:D2:13:BC:5B:EB:41:A8:33:80:DD:2B:4E Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 08BC Signing time: Fri 30 May 2025 20:42:44 +0000 Manifest this update: Fri 30 May 2025 20:42:44 +0000 Manifest next update: Fri 06 Jun 2025 20:42:44 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: mjIVrjPK/2fKYAPF5txRhSRVX9g3J1Ky66YV9vpprFo=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: May 30 20:42:44 2025 GMT Not After : Jun 6 20:42:44 2025 GMT Subject: CN=683a1844-a111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:5a:d4:3d:11:32:e6:c9:05:ee:6f:d3:fa: 5c:2c:2d:52:5f:78:3e:fa:aa:37:f9:e2:a7:ca:13: 6d:50:fd:12:82:d4:3a:73:e9:3a:20:6c:06:48:2c: 09:e8:1c:bc:22:18:6f:27:68:36:18:36:b1:4c:29: 1b:9d:07:92:46:fa:c5:6c:14:fc:e6:fd:51:70:c2: 89:f6:df:e7:f9:56:53:59:97:9a:97:a4:cb:e7:c7: 4f:e7:64:ea:50:26:5d:07:ab:f5:98:79:8f:8c:fa: c1:a4:49:83:f8:dd:1a:8b:4e:33:1a:aa:15:db:df: 81:ec:82:f9:a7:c9:bb:49:1b:08:42:9d:11:4b:7f: 45:fa:48:1f:ae:35:71:aa:8b:0c:3f:44:6f:52:8e: b4:41:66:26:51:6c:30:46:e9:5f:6b:38:cc:c4:54: 66:96:c1:69:cd:76:15:49:f2:9d:c4:25:a5:b1:13: 0d:f0:11:5e:11:c2:f0:eb:fc:f7:0b:ef:69:e9:22: 15:69:86:de:ff:10:4e:78:9d:83:74:1e:84:3c:0e: 7e:1a:27:54:a0:a0:81:17:8b:44:aa:53:ca:5e:29: ae:58:99:57:1f:db:b6:de:d3:f5:31:c6:0d:a6:e9: d6:cc:ac:1f:86:1a:1c:47:3b:22:33:98:81:61:1e: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:10:0A:7E:EE:C7:0D:F0:D2:13:BC:5B:EB:41:A8:33:80:DD:2B:4E X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:54:31:74:1f:f0:a8:f4:8c:1b:27:ce:94:f3:b0:79:2e:28: 05:3f:46:a9:30:f5:19:d1:2d:38:77:e8:b1:80:6f:52:96:77: 61:aa:be:32:39:b7:be:3a:9f:51:1c:ec:47:b0:68:f8:bc:c1: c2:a4:fe:7f:52:93:b1:3c:0f:52:f4:d2:c4:e0:03:19:a7:9a: 0a:e2:ba:39:53:3b:64:a5:a6:43:8a:ab:93:37:93:bb:c7:60: 33:b3:fa:89:94:f6:5f:23:f2:5e:fb:3d:b3:69:9e:0e:8e:35: 2b:d9:f2:8a:26:bb:b0:dc:44:d4:12:c4:f6:aa:27:87:12:04: f5:cf:b7:49:bf:67:35:2a:1b:2c:5a:41:54:98:23:84:dc:87: fb:c2:e3:8a:48:8a:a4:9d:98:73:94:a4:c6:26:e5:1b:73:f5: a9:4f:59:0e:f3:ab:28:c6:dd:b1:06:4f:25:16:93:1d:7b:d2: 9d:c0:be:d6:c0:5b:99:50:46:66:49:39:0e:53:10:2a:80:63: 3f:69:a1:4b:ea:ee:2a:91:ad:cc:1b:48:b1:91:e7:e3:b3:d7: fd:63:dd:aa:3a:47:92:b4:cb:5e:01:4e:3a:92:aa:58:64:32: 0d:88:cd:c1:b4:81:09:f8:cf:bb:a0:20:a0:0f:c5:7c:e2:68: c0:24:0b:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUwNTMwMjA0MjQ0WhcNMjUwNjA2MjA0MjQ0WjAYMRYwFAYD VQQDEw02ODNhMTg0NC1hMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2Ja1D0RMubJBe5v0/pcLC1SX3g++qo3+eKnyhNtUP0SgtQ6c+k6IGwGSCwJ 6By8IhhvJ2g2GDaxTCkbnQeSRvrFbBT85v1RcMKJ9t/n+VZTWZeal6TL58dP52Tq UCZdB6v1mHmPjPrBpEmD+N0ai04zGqoV29+B7IL5p8m7SRsIQp0RS39F+kgfrjVx qosMP0RvUo60QWYmUWwwRulfazjMxFRmlsFpzXYVSfKdxCWlsRMN8BFeEcLw6/z3 C+9p6SIVaYbe/xBOeJ2DdB6EPA5+GidUoKCBF4tEqlPKXimuWJlXH9u23tP1McYN punWzKwfhhocRzsiM5iBYR79vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8QCn7u xw3w0hO8W+tBqDOA3StOMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbVDF0H/Co9IwbJ86U87B5LigFP0apMPUZ0S04d+ixgG9Slndhqr4y Obe+Op9RHOxHsGj4vMHCpP5/UpOxPA9S9NLE4AMZp5oK4ro5UztkpaZDiquTN5O7 x2Azs/qJlPZfI/Je+z2zaZ4OjjUr2fKKJruw3ETUEsT2qieHEgT1z7dJv2c1Khss WkFUmCOE3If7wuOKSIqknZhzlKTGJuUbc/WpT1kO86soxt2xBk8lFpMde9KdwL7W wFuZUEZmSTkOUxAqgGM/aaFL6u4qka3MG0ixkefjs9f9Y92qOkeStMteAU46kqpY ZDINiM3BtIEJ+M+7oCCgD8V84mjAJAtR -----END CERTIFICATE-----Generated at Sat May 31 16:52:14 2025 by rpki-client