$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: rMPvGAwpBaUjKvabuPCetFnAUADtqCD8cXxpZXpg1JE= Subject key identifier: 3F:F5:C0:96:49:78:EC:B6:C8:B6:7F:45:4E:60:44:D1:6E:A5:3F:1E Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: F3 Signing time: Sat 23 Aug 2025 05:25:14 +0000 Manifest this update: Sat 23 Aug 2025 05:25:13 +0000 Manifest next update: Sat 30 Aug 2025 05:25:13 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: H3tJJ8rRiTjHsh5OIChNKnoA7q31FAVmFdGCPFPNP+M=) 2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=) 3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Validity Not Before: Aug 23 05:25:13 2025 GMT Not After : Aug 30 05:25:13 2025 GMT Subject: CN=68a950ba-5f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:c3:8b:66:18:20:70:44:bf:88:46:f6:64: 95:00:36:9a:f6:88:26:9c:aa:aa:f1:9a:a2:ad:53: 9a:1d:a7:1c:20:7b:8e:7f:5e:65:44:a3:0d:41:f0: f9:18:63:12:97:10:df:cb:20:5b:40:03:37:39:6b: b9:b3:bd:9e:11:be:96:86:ee:f9:1f:f7:54:97:cc: dd:59:7d:10:9a:59:47:58:8a:3d:2f:1c:9c:74:c8: 8b:b3:51:35:56:97:75:8e:f0:d6:b0:9e:56:42:b7: 8c:81:1c:37:c6:d5:cb:86:0a:3a:2b:51:f2:a6:45: df:38:fb:9f:77:f3:03:53:98:82:ba:43:16:f5:0a: e5:95:1d:de:c4:73:cd:dd:8a:06:0b:65:63:d3:a7: 54:dd:5b:de:6e:c8:9d:17:54:d4:ee:c7:ed:1b:08: ad:c6:61:18:c8:cf:37:45:19:ab:d9:0b:83:fe:86: f3:7f:ca:7e:51:d1:0e:92:eb:8f:bb:b9:79:f7:4d: 87:c3:6c:af:03:e5:c1:1b:5c:24:79:f8:56:84:3d: 72:61:80:1f:db:8a:e5:0a:6d:44:d2:fb:95:d5:b4: 7b:fb:73:16:0f:2e:27:9c:fc:0e:1c:c7:d1:fa:75: 42:11:ca:56:e9:12:84:01:d1:83:5f:a5:b4:c3:8d: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:C0:96:49:78:EC:B6:C8:B6:7F:45:4E:60:44:D1:6E:A5:3F:1E X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:b7:9a:96:c6:be:ba:c8:0b:73:96:ab:0a:f1:1f:d2:e1:38: 6d:e6:9e:b5:de:9e:9e:f8:2d:49:4e:af:d9:74:cd:61:e2:ed: 00:9e:67:fb:72:98:b7:0f:ef:b0:67:ab:bc:6e:52:cc:ec:28: a5:b6:c6:7f:66:ba:dc:df:1f:39:31:27:d8:3d:e4:61:b6:ca: f5:de:d2:31:55:a5:5f:e6:86:02:0e:fd:9d:a4:e7:da:b1:5d: bd:f2:e6:ec:1e:dd:5e:17:63:fb:71:9d:c0:f0:1c:4f:91:0d: 93:19:f5:1d:4c:71:84:af:bf:cf:b2:3a:bf:db:9c:d3:99:9e: 1b:78:2c:89:c2:bb:1c:8c:87:d8:a0:ea:8c:d9:5e:3a:7d:89: d8:e7:61:c4:aa:77:89:58:80:a4:59:b2:e1:a8:0d:c3:2b:e8: f9:29:32:95:e5:bf:18:cc:4c:86:a6:1e:07:49:c1:61:dc:e0: aa:d6:73:b9:ec:63:f5:76:9b:00:e3:15:fc:d2:41:2e:07:af: 4b:08:12:d8:e6:cf:66:52:18:57:df:a4:b5:0e:4b:53:da:9e: d2:22:09:b2:01:1a:cf:fe:8b:4d:f1:d7:57:e2:44:dc:fd:be: 49:b3:31:73:53:12:f7:62:7d:47:44:7b:ef:23:44:77:97:22: d7:ec:1e:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQUIxMTAvBgNVBAUTKDI2NTcwM0Q4NTkzM0Y0NUQ5QjA0REFCNzcyMzc1ODRG QzkyRDlENDQwHhcNMjUwODIzMDUyNTEzWhcNMjUwODMwMDUyNTEzWjAYMRYwFAYD VQQDEw02OGE5NTBiYS01ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstbDi2YYIHBEv4hG9mSVADaa9ogmnKqq8ZqirVOaHaccIHuOf15lRKMNQfD5 GGMSlxDfyyBbQAM3OWu5s72eEb6Whu75H/dUl8zdWX0QmllHWIo9LxycdMiLs1E1 Vpd1jvDWsJ5WQreMgRw3xtXLhgo6K1HypkXfOPufd/MDU5iCukMW9QrllR3exHPN 3YoGC2Vj06dU3VvebsidF1TU7sftGwitxmEYyM83RRmr2QuD/obzf8p+UdEOkuuP u7l5902Hw2yvA+XBG1wkefhWhD1yYYAf24rlCm1E0vuV1bR7+3MWDy4nnPwOHMfR +nVCEcpW6RKEAdGDX6W0w43KuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/1wJZJ eOy2yLZ/RU5gRNFupT8eMB8GA1UdIwQYMBaAFCZXA9hZM/RdmwTat3I3WE/JLZ1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBBQi83NDQ1MjZGNjBG QTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlGMmJCTnEzY2pkWVQ4a3Ru VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlG MmJCTnEzY2pkWVQ4a3RuVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7t5qWxr66yAtzlqsK8R/S4Tht5p613p6e+C1JTq/ZdM1h4u0Anmf7 cpi3D++wZ6u8blLM7CiltsZ/Zrrc3x85MSfYPeRhtsr13tIxVaVf5oYCDv2dpOfa sV298ubsHt1eF2P7cZ3A8BxPkQ2TGfUdTHGEr7/Psjq/25zTmZ4beCyJwrscjIfY oOqM2V46fYnY52HEqneJWICkWbLhqA3DK+j5KTKV5b8YzEyGph4HScFh3OCq1nO5 7GP1dpsA4xX80kEuB69LCBLY5s9mUhhX36S1DktT2p7SIgmyARrP/otN8ddX4kTc /b5JszFzUxL3Yn1HRHvvI0R3lyLX7B4A -----END CERTIFICATE-----Generated at Sun Aug 24 09:40:07 2025 by rpki-client