$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: 24xvRpn2qnaBb75DpYA1J1WJW539YYnnGF2Zp/KIJNQ= Subject key identifier: 0E:DA:59:AE:C9:68:51:3A:29:BA:3B:A9:F0:98:3A:5D:49:72:87:E5 Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C66 Signing time: Thu 12 Jun 2025 18:09:15 +0000 Manifest this update: Thu 12 Jun 2025 18:09:15 +0000 Manifest next update: Thu 19 Jun 2025 18:09:15 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: q23tpy+aL562PJ3oa4uTOq8maLwZZq7vDztOo54y52A=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Jun 12 18:09:15 2025 GMT Not After : Jun 19 18:09:15 2025 GMT Subject: CN=684b17cb-fef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:ee:46:b5:16:84:ec:06:76:df:c7:22:fa: 1f:9a:05:b2:cb:3a:df:95:6f:a9:fc:c3:77:a2:46: 5c:6d:04:1b:21:34:d2:b1:21:0b:da:b8:0e:14:9f: 64:e3:17:fd:42:ab:f2:24:a0:94:23:cd:e0:13:79: 87:21:bb:39:f3:01:c5:8a:d5:8c:e9:61:b1:9f:f5: 50:40:2a:5b:b2:81:d8:fd:43:d6:43:aa:ba:1f:b5: b9:b0:8f:3a:ae:82:4f:28:12:82:be:4d:7c:0d:ad: ab:aa:30:9a:dd:38:21:0c:45:be:c7:cb:a8:96:10: d7:5c:a5:0a:8b:2d:e2:39:e5:45:d4:21:89:75:d5: ec:e4:73:60:90:af:da:52:04:39:11:f0:5a:80:8b: 0f:82:be:ca:f1:d2:3f:65:7e:4d:69:e3:11:e1:eb: 0e:86:ad:c7:92:e0:70:e1:dc:13:2b:bd:62:25:9a: 77:98:25:fc:5f:13:84:87:65:11:bf:fc:48:5c:a1: e9:77:3f:3f:04:ac:d4:4b:39:59:a0:f6:db:1f:a7: 22:fe:ef:92:07:a9:78:0d:bd:b6:c9:93:da:6f:30: 61:b7:83:9c:37:00:45:a4:44:d5:30:6c:a7:29:7c: dd:96:10:bb:65:53:ca:ee:37:87:39:49:c6:98:b7: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DA:59:AE:C9:68:51:3A:29:BA:3B:A9:F0:98:3A:5D:49:72:87:E5 X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:65:fc:20:db:c5:66:bd:ac:6b:81:70:5c:3a:ab:46:e3:fd: 03:82:5d:65:af:9e:ec:61:21:21:18:da:23:35:31:66:ec:6d: 1d:10:20:64:cd:63:91:be:22:9f:8f:22:55:a2:36:f7:97:9a: ed:fe:11:b6:ac:29:bf:0d:58:cf:8a:4c:b7:40:5c:15:34:28: 92:e4:25:9d:04:1a:9e:d6:e5:9e:75:30:ad:3e:7c:f8:ad:e7: a8:0c:22:3e:c5:97:5c:33:db:a1:d5:ca:db:f9:50:6d:02:78: 86:85:0e:62:cf:02:d3:3d:52:83:ef:ac:ff:7f:ba:af:4b:f4: 83:6d:7d:2e:33:b2:08:c0:2b:b8:ce:ae:ca:eb:0b:4b:47:e8: 56:32:24:b6:28:3c:a8:13:db:59:80:70:e7:6b:f9:20:a7:48: 2a:5f:76:47:b5:19:1b:6c:43:80:5e:e7:07:dc:2d:39:3f:db: b4:94:5c:49:67:b8:38:f0:93:6e:b1:77:2d:62:62:d9:c3:05: e5:e5:6f:9f:26:b8:35:ed:12:13:f3:94:57:b2:d3:6c:ea:a2: 29:49:1b:ec:44:ce:e3:e9:09:5a:b9:ae:d0:12:40:16:7d:9b: c1:67:ec:55:fc:b4:10:e3:b7:8d:88:df:66:b1:47:32:30:6b: 63:ab:fc:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwNjEyMTgwOTE1WhcNMjUwNjE5MTgwOTE1WjAYMRYwFAYD VQQDEw02ODRiMTdjYi1mZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRzuRrUWhOwGdt/HIvofmgWyyzrflW+p/MN3okZcbQQbITTSsSEL2rgOFJ9k 4xf9QqvyJKCUI83gE3mHIbs58wHFitWM6WGxn/VQQCpbsoHY/UPWQ6q6H7W5sI86 roJPKBKCvk18Da2rqjCa3TghDEW+x8uolhDXXKUKiy3iOeVF1CGJddXs5HNgkK/a UgQ5EfBagIsPgr7K8dI/ZX5NaeMR4esOhq3HkuBw4dwTK71iJZp3mCX8XxOEh2UR v/xIXKHpdz8/BKzUSzlZoPbbH6ci/u+SB6l4Db22yZPabzBht4OcNwBFpETVMGyn KXzdlhC7ZVPK7jeHOUnGmLeueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7aWa7J aFE6Kbo7qfCYOl1JcoflMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSZfwg28VmvaxrgXBcOqtG4/0Dgl1lr57sYSEhGNojNTFm7G0dECBk zWORviKfjyJVojb3l5rt/hG2rCm/DVjPiky3QFwVNCiS5CWdBBqe1uWedTCtPnz4 reeoDCI+xZdcM9uh1crb+VBtAniGhQ5izwLTPVKD76z/f7qvS/SDbX0uM7IIwCu4 zq7K6wtLR+hWMiS2KDyoE9tZgHDna/kgp0gqX3ZHtRkbbEOAXucH3C05P9u0lFxJ Z7g48JNusXctYmLZwwXl5W+fJrg17RIT85RXstNs6qIpSRvsRM7j6Qlaua7QEkAW fZvBZ+xV/LQQ47eNiN9msUcyMGtjq/w/ -----END CERTIFICATE-----Generated at Fri Jun 13 22:17:21 2025 by rpki-client