$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: z0gGizCekuS4+nS0ClcDVZbSu9HL/xvfc/qz5tEonwI= Subject key identifier: 4D:35:BD:45:81:F9:CB:B8:DF:0D:EF:5B:9E:BC:15:79:CA:C1:87:DF Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C64 Signing time: Sun 08 Jun 2025 18:08:18 +0000 Manifest this update: Sun 08 Jun 2025 18:08:17 +0000 Manifest next update: Sun 15 Jun 2025 18:08:17 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: R3cN+HXw6k8q6ehJo+oB6XZQ3mN3uitF6+0W1xICRMo=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Jun 8 18:08:17 2025 GMT Not After : Jun 15 18:08:17 2025 GMT Subject: CN=6845d192-3385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:36:54:a0:3d:16:69:5b:fa:52:fb:e0:3d: 43:ae:49:da:2d:36:92:af:05:57:36:88:30:6c:93: 59:d3:60:06:06:d5:20:d8:9c:db:b9:75:2d:46:89: aa:91:71:9c:9f:74:26:4c:5c:f9:cb:e6:bc:b3:6a: d4:74:9c:1e:14:a2:95:da:1f:d4:4c:58:c3:29:cd: 15:1f:a8:7d:66:14:ee:5c:05:39:06:10:94:b0:98: 82:75:eb:27:5a:80:c5:d2:01:df:3b:9e:21:a9:8b: 0d:c9:a6:79:af:28:30:c9:60:01:7f:05:13:7a:f0: c9:37:4d:2b:28:02:42:fc:c1:3d:39:d8:a1:69:1f: d3:1f:e1:32:59:85:3d:38:4a:4d:b9:38:8f:74:00: 8f:d1:7f:a7:19:98:ee:97:19:b2:7e:0f:6f:cb:a4: f8:99:83:2e:d6:73:08:be:ae:62:49:00:2c:f1:63: 2e:24:6f:07:53:ef:65:17:eb:23:1e:03:40:06:55: 3a:cb:df:d5:7b:01:61:ee:67:75:bb:25:8a:e1:91: d3:55:f1:d6:f9:91:9e:dc:8e:3f:a0:9e:05:1e:7b: 24:59:c0:38:1d:3a:4a:2f:2c:4e:a9:0c:fa:2e:ac: d6:90:49:ed:9f:44:74:e9:95:e1:1a:a0:50:12:4f: b3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:35:BD:45:81:F9:CB:B8:DF:0D:EF:5B:9E:BC:15:79:CA:C1:87:DF X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:12:7f:d4:4c:60:47:92:7f:d5:47:29:6a:f6:96:c8:df:92: 47:a2:27:63:1d:5c:15:7e:af:c7:eb:58:dd:59:02:ba:8e:cd: 89:84:ff:31:94:ca:c3:5b:5d:bc:e6:2f:1a:53:1e:7b:9e:92: c9:82:24:80:9e:b5:68:b6:f1:12:66:9a:46:78:fd:1d:29:1b: 55:10:c1:a9:2c:aa:52:3b:16:51:db:d6:85:a8:f4:a6:97:6a: e3:dd:72:f7:a0:e2:8d:b6:e4:aa:f9:8d:12:2a:86:bd:8a:15: a3:18:6e:3b:8a:f4:d7:51:7e:cd:18:38:cb:05:b3:4f:07:34: 1c:65:9a:45:49:a1:98:a9:f7:f6:0c:49:55:17:87:5b:84:54: 5f:fa:41:e7:0a:77:90:c9:dd:fa:7b:60:26:4f:0d:1a:9d:7f: d6:25:ea:a7:b2:d1:d6:f9:e8:bd:d0:c1:66:8a:9e:8e:7e:80: d2:92:a5:94:8b:19:eb:e7:e4:70:84:4e:08:fe:5a:e3:c0:11: 79:21:49:3e:03:bd:35:0d:2d:3b:77:9e:10:88:1b:1b:39:9b: 90:3c:53:70:f4:c1:3e:ad:eb:58:56:95:87:ff:42:7b:ab:a8: 63:70:8d:c9:96:1a:bf:be:ad:91:ed:10:07:c3:f4:e7:75:be: c4:74:57:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwNjA4MTgwODE3WhcNMjUwNjE1MTgwODE3WjAYMRYwFAYD VQQDEw02ODQ1ZDE5Mi0zMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5I2VKA9Fmlb+lL74D1DrknaLTaSrwVXNogwbJNZ02AGBtUg2JzbuXUtRomq kXGcn3QmTFz5y+a8s2rUdJweFKKV2h/UTFjDKc0VH6h9ZhTuXAU5BhCUsJiCdesn WoDF0gHfO54hqYsNyaZ5rygwyWABfwUTevDJN00rKAJC/ME9OdihaR/TH+EyWYU9 OEpNuTiPdACP0X+nGZjulxmyfg9vy6T4mYMu1nMIvq5iSQAs8WMuJG8HU+9lF+sj HgNABlU6y9/VewFh7md1uyWK4ZHTVfHW+ZGe3I4/oJ4FHnskWcA4HTpKLyxOqQz6 LqzWkEntn0R06ZXhGqBQEk+zjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE01vUWB +cu43w3vW568FXnKwYffMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFEn/UTGBHkn/VRylq9pbI35JHoidjHVwVfq/H61jdWQK6js2JhP8x lMrDW1285i8aUx57npLJgiSAnrVotvESZppGeP0dKRtVEMGpLKpSOxZR29aFqPSm l2rj3XL3oOKNtuSq+Y0SKoa9ihWjGG47ivTXUX7NGDjLBbNPBzQcZZpFSaGYqff2 DElVF4dbhFRf+kHnCneQyd36e2AmTw0anX/WJeqnstHW+ei90MFmip6OfoDSkqWU ixnr5+RwhE4I/lrjwBF5IUk+A701DS07d54QiBsbOZuQPFNw9ME+retYVpWH/0J7 q6hjcI3Jlhq/vq2R7RAHw/Tndb7EdFfB -----END CERTIFICATE-----Generated at Mon Jun 9 19:38:53 2025 by rpki-client