$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: lVOqJVVvZtwmBKyKzuoDGHrkFXv6CVN95OygOO28c9U= Subject key identifier: B5:4B:BD:E6:A6:4A:E6:E6:D6:D2:98:B9:C9:CC:F5:19:F6:2F:E6:3F Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1A5A Signing time: Fri 30 May 2025 16:31:48 +0000 Manifest this update: Fri 30 May 2025 16:31:48 +0000 Manifest next update: Fri 06 Jun 2025 16:31:48 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: DrTU8/gN39v1cNeKwte7wA80rD9cwRoWZI7EiEDtqtc=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6756 (0x1a64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: May 30 16:31:48 2025 GMT Not After : Jun 6 16:31:48 2025 GMT Subject: CN=6839dd74-4c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:63:a2:b2:58:ec:0f:8a:9f:4d:88:da:69: 2d:70:c1:8b:54:14:e1:04:5c:9d:3a:51:1b:6f:a5: c5:e4:35:cc:de:9f:a3:54:d8:b2:eb:e3:bb:e1:95: 65:06:ce:f9:58:b1:17:6a:50:df:a5:13:01:e0:16: 31:92:31:23:45:89:03:e1:d3:70:26:3c:b2:b5:2b: 0c:62:2e:61:f1:37:05:ec:91:8e:36:8c:63:f9:ab: 24:38:85:e6:59:c2:c0:e7:ac:7b:f6:f9:10:e5:96: c6:59:11:a8:cf:b7:d8:95:8d:17:64:c5:ba:b3:d6: 97:73:36:f7:fa:a1:4d:89:49:d4:8a:5c:3a:96:e5: 0e:60:56:0a:13:2c:31:86:30:7e:f2:9f:f4:76:07: 2f:fb:70:39:cb:ee:0d:6e:a8:12:69:66:e0:92:0e: 55:48:e9:39:ad:5c:4c:14:da:b8:d0:83:0e:8d:d2: 4f:b1:d2:86:78:01:84:3b:9f:84:ad:78:94:69:a1: 6a:16:74:4a:8e:2a:1c:7a:e5:81:32:af:91:79:24: b6:ce:90:e1:71:d6:41:80:f3:de:da:71:8f:4e:e5: da:5f:80:65:1a:3d:77:63:30:c0:6c:b2:d4:fa:cc: ad:c1:66:3b:46:05:13:0a:2c:72:94:17:52:96:ba: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4B:BD:E6:A6:4A:E6:E6:D6:D2:98:B9:C9:CC:F5:19:F6:2F:E6:3F X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:39:94:68:0b:a6:42:04:b1:de:16:13:ba:a1:1b:b6:0b:11: bc:f7:27:bc:40:da:9e:92:97:6d:d6:cf:89:80:07:10:1b:f7: 05:03:bd:2e:e4:2e:44:19:c5:2a:c5:f0:dc:c0:b4:1e:1c:cf: 3c:16:d6:f7:02:4e:e2:b7:1a:44:a8:cc:49:f9:1d:5f:c4:ee: 7d:62:5a:82:82:6f:76:67:eb:d5:df:ba:fb:4d:50:48:5f:62: db:2b:ef:f0:d7:b2:ae:24:6e:f3:9a:a8:b4:b4:ae:58:67:71: 43:04:24:78:0f:6b:ee:fc:63:fa:b6:07:82:55:e9:16:d0:2e: 94:8b:d2:f1:ba:39:29:c1:8c:a9:ee:d2:58:9d:5c:89:87:26: c0:7d:72:c6:82:1a:0b:4d:f5:ab:92:50:40:7d:8a:a8:f9:2f: 00:30:a5:e2:fb:fb:05:aa:8e:9f:51:96:f9:8a:27:91:c9:37: be:5a:da:23:e4:a6:fc:58:c9:05:d5:01:c8:51:0b:15:79:47: 44:ea:33:f7:af:2f:fe:41:54:b3:a0:cf:1e:de:70:89:71:28: 85:3b:46:95:6b:66:4c:5b:7e:4c:f4:94:ac:c1:ab:b1:03:a0: a7:62:60:eb:31:0a:56:eb:f5:b0:e1:11:7b:f7:e6:80:46:62: 0d:11:c2:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwNTMwMTYzMTQ4WhcNMjUwNjA2MTYzMTQ4WjAYMRYwFAYD VQQDEw02ODM5ZGQ3NC00Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbdjorJY7A+Kn02I2mktcMGLVBThBFydOlEbb6XF5DXM3p+jVNiy6+O74ZVl Bs75WLEXalDfpRMB4BYxkjEjRYkD4dNwJjyytSsMYi5h8TcF7JGONoxj+askOIXm WcLA56x79vkQ5ZbGWRGoz7fYlY0XZMW6s9aXczb3+qFNiUnUilw6luUOYFYKEywx hjB+8p/0dgcv+3A5y+4NbqgSaWbgkg5VSOk5rVxMFNq40IMOjdJPsdKGeAGEO5+E rXiUaaFqFnRKjioceuWBMq+ReSS2zpDhcdZBgPPe2nGPTuXaX4BlGj13YzDAbLLU +sytwWY7RgUTCixylBdSlroGdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVLveam Subm1tKYucnM9Rn2L+Y/MB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeOZRoC6ZCBLHeFhO6oRu2CxG89ye8QNqekpdt1s+JgAcQG/cFA70u 5C5EGcUqxfDcwLQeHM88Ftb3Ak7itxpEqMxJ+R1fxO59YlqCgm92Z+vV37r7TVBI X2LbK+/w17KuJG7zmqi0tK5YZ3FDBCR4D2vu/GP6tgeCVekW0C6Ui9LxujkpwYyp 7tJYnVyJhybAfXLGghoLTfWrklBAfYqo+S8AMKXi+/sFqo6fUZb5iieRyTe+Wtoj 5Kb8WMkF1QHIUQsVeUdE6jP3ry/+QVSzoM8e3nCJcSiFO0aVa2ZMW35M9JSswaux A6CnYmDrMQpW6/Ww4RF79+aARmINEcKh -----END CERTIFICATE-----Generated at Sat May 31 17:30:18 2025 by rpki-client