$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: WZYvq8kPZkmrghGlmgyUQ/15dVbHyQGSzbCnk64vo2s= Subject key identifier: 73:24:D0:81:AB:E5:D7:AD:2D:AA:80:56:47:C7:10:4F:07:9A:35:4E Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C65 Signing time: Tue 10 Jun 2025 18:13:57 +0000 Manifest this update: Tue 10 Jun 2025 18:13:56 +0000 Manifest next update: Tue 17 Jun 2025 18:13:56 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: zZ4zy4BNC2JbBtfkax5ZE30QJsrYKPPTJnl/4/T2W6w=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Jun 10 18:13:56 2025 GMT Not After : Jun 17 18:13:56 2025 GMT Subject: CN=684875e4-7682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:8f:ec:d3:7e:db:f7:8b:85:2e:69:36:49: 1d:6e:3a:3e:90:8f:4e:79:25:28:85:e1:cb:c9:7e: e5:49:fd:a3:f7:90:38:8b:20:51:4f:83:da:b2:32: a5:57:bd:8d:fd:e2:7b:a8:01:8d:82:fa:40:95:19: 4e:91:a6:1a:53:40:0f:63:35:43:79:45:b5:b0:08: 4a:5d:1b:98:9c:59:ab:58:ec:31:3a:47:f4:55:ae: 8d:0e:e8:23:ba:a5:3d:fb:20:2c:95:d0:69:87:d4: bc:aa:f5:96:49:0f:c2:47:bc:09:bc:4e:9e:1a:80: cf:08:64:23:84:dc:1b:9d:f6:43:1d:7a:75:0e:ee: ae:7e:07:d2:04:40:05:cd:c5:ed:a6:7f:3c:12:88: 66:70:03:1c:62:f5:e4:35:03:dc:47:0c:1e:ae:4f: e2:4b:01:86:79:2a:b4:80:e7:ee:d9:4f:ce:5d:39: 25:8b:44:87:ad:ce:0b:35:10:11:bd:91:dd:3a:77: a9:3e:a2:c3:8f:b5:13:b6:bb:81:99:ae:31:f6:1f: 0f:c1:fb:28:39:5b:80:cc:29:7c:3d:4f:0e:ed:93: 0e:b5:fd:25:fd:ba:af:7f:85:5f:f7:06:a2:72:32: 2b:d4:a0:89:35:f1:29:18:0e:d9:20:21:55:bb:c0: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:D0:81:AB:E5:D7:AD:2D:AA:80:56:47:C7:10:4F:07:9A:35:4E X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:e9:6d:d1:d8:f6:f8:bd:b2:c3:87:f0:85:d4:3d:d6:01:08: 45:e7:8a:a4:92:2a:82:e4:02:58:3a:38:7c:e5:96:a0:ea:58: b6:5d:f9:e7:a8:d0:de:62:75:e0:a0:2e:b8:e9:7f:dc:16:e7: 1d:31:d4:33:1c:76:98:74:08:d5:66:58:37:f1:6e:28:1f:9d: c6:40:69:f1:9a:dc:e7:55:b0:7d:49:0b:01:29:6e:e1:ae:35: ef:b0:eb:af:74:11:f8:a0:07:08:f1:f4:38:42:06:6c:8a:02: 8d:86:06:c2:ba:3e:16:cc:15:8d:20:39:6c:df:5a:1f:2f:e9: 61:1e:83:c9:24:79:5b:05:0a:92:fb:99:f5:71:bf:7b:08:70: b4:e5:38:f1:bb:a7:fe:56:4b:69:cb:07:26:21:4f:e1:a2:18: 0e:d4:90:6f:4a:53:8b:ec:99:8f:2a:11:3c:0a:68:02:e4:59: 88:6e:80:b3:df:61:b0:18:96:d3:86:5e:5e:b9:5a:b1:1e:c1: 27:10:75:bc:6a:d3:bc:26:c7:9a:99:99:52:32:63:a7:87:92: 60:04:00:e8:a4:35:94:6b:2a:43:9f:6d:d0:ac:82:7e:9e:43: 9c:02:6b:c1:ba:42:4f:f6:36:67:8d:6c:7b:63:f0:b9:80:23: 16:94:92:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwNjEwMTgxMzU2WhcNMjUwNjE3MTgxMzU2WjAYMRYwFAYD VQQDEw02ODQ4NzVlNC03NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+6P7NN+2/eLhS5pNkkdbjo+kI9OeSUoheHLyX7lSf2j95A4iyBRT4PasjKl V72N/eJ7qAGNgvpAlRlOkaYaU0APYzVDeUW1sAhKXRuYnFmrWOwxOkf0Va6NDugj uqU9+yAsldBph9S8qvWWSQ/CR7wJvE6eGoDPCGQjhNwbnfZDHXp1Du6ufgfSBEAF zcXtpn88EohmcAMcYvXkNQPcRwwerk/iSwGGeSq0gOfu2U/OXTkli0SHrc4LNRAR vZHdOnepPqLDj7UTtruBma4x9h8PwfsoOVuAzCl8PU8O7ZMOtf0l/bqvf4Vf9wai cjIr1KCJNfEpGA7ZICFVu8DVDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMk0IGr 5detLaqAVkfHEE8HmjVOMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF6W3R2Pb4vbLDh/CF1D3WAQhF54qkkiqC5AJYOjh85Zag6li2Xfnn qNDeYnXgoC646X/cFucdMdQzHHaYdAjVZlg38W4oH53GQGnxmtznVbB9SQsBKW7h rjXvsOuvdBH4oAcI8fQ4QgZsigKNhgbCuj4WzBWNIDls31ofL+lhHoPJJHlbBQqS +5n1cb97CHC05Tjxu6f+VktpywcmIU/hohgO1JBvSlOL7JmPKhE8CmgC5FmIboCz 32GwGJbThl5euVqxHsEnEHW8atO8JseamZlSMmOnh5JgBADopDWUaypDn23QrIJ+ nkOcAmvBukJP9jZnjWx7Y/C5gCMWlJKq -----END CERTIFICATE-----Generated at Wed Jun 11 23:24:42 2025 by rpki-client