$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json) Hash identifier: kjpjosuPles1l9gDgTD6oC4oxdHhlPD1tDOOMm4C6js= Subject key identifier: A6:79:CC:66:61:32:44:15:3A:7B:58:BD:2F:1B:B6:6D:E9:A7:C9:41 Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft Manifest number: D7 Signing time: Sat 23 Aug 2025 05:42:49 +0000 Manifest this update: Sat 23 Aug 2025 05:42:49 +0000 Manifest next update: Sat 30 Aug 2025 05:42:49 +0000 Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: mFs5upC9f7Fjx+Hi0guja2RRgUSir6KDDeT6rh3jF7s=) 2: 95C79E36379611EF87CBA24DC4F9AE02.roa (hash: ZMHJbDurrQwg9LuHdJ4fXoBTwDMXXjxbFZ/gpf/dfBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Validity Not Before: Aug 23 05:42:49 2025 GMT Not After : Aug 30 05:42:49 2025 GMT Subject: CN=68a954d9-ec3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:50:53:4e:b1:ae:05:4f:fb:7a:a6:62:0d: 7b:1e:02:d2:7e:2d:09:9d:cd:d1:94:7b:7f:52:47: 17:18:4c:c0:19:ba:1a:13:2c:8e:19:7c:d1:3c:6f: 17:fe:fe:f2:f2:70:b8:68:75:f2:b3:cc:ec:b1:23: f2:b7:55:f3:65:d5:97:d4:58:92:a1:34:b0:c2:c2: 97:91:2e:ef:95:f3:20:14:c1:43:0d:c6:3b:e0:b5: c5:e0:c9:5e:a8:4f:b9:05:72:00:15:a8:8d:1c:01: 4f:dc:85:b2:f3:df:db:1c:29:86:f0:ca:7d:ec:cd: 57:cc:35:5d:79:08:e8:e3:24:30:95:1a:eb:99:bd: 64:52:49:dc:cf:fc:e7:44:c8:5a:65:41:2d:24:a3: ec:e7:c0:2a:4d:cc:8c:7e:f4:29:1b:fa:14:35:2f: a5:ca:fb:79:c8:e1:63:d4:66:bd:b9:20:62:29:35: d9:58:c0:5b:bd:79:c6:fe:85:1d:09:cd:08:87:10: 7c:c5:c5:d9:18:37:28:df:94:75:bd:b9:53:bf:e0: 89:1c:9f:af:fc:cd:53:9e:04:1c:7a:c3:7a:8c:bc: ba:09:a0:b2:28:ec:a6:36:0b:c3:05:9b:60:86:a0: bd:3a:0e:1f:0e:cf:53:b8:d7:c0:5f:40:20:b2:e2: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:79:CC:66:61:32:44:15:3A:7B:58:BD:2F:1B:B6:6D:E9:A7:C9:41 X509v3 Authority Key Identifier: keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7f:47:38:5e:03:38:88:32:e5:f6:58:b3:d5:3b:2f:9f:61: bc:f7:ba:86:c1:ea:d4:1e:f9:56:c9:f2:fb:72:93:5e:ce:2a: bd:47:b4:eb:30:17:7b:82:42:ca:71:1c:c2:35:83:a2:9a:5e: bc:f9:eb:85:76:15:22:68:98:42:3f:9e:2b:51:53:7f:7b:ad: ef:77:18:c8:f1:b5:95:dd:99:43:7f:7a:f4:0c:a1:51:38:68: 31:d5:0a:14:35:67:fb:cb:af:41:fb:85:af:88:30:cc:f2:08: dc:13:3e:36:a7:d3:07:bc:17:14:38:69:96:47:d5:a5:e6:d4: 03:e6:12:af:02:35:3d:a1:18:bc:a1:72:63:c5:5f:aa:5d:ca: d1:7a:5f:7a:fb:e9:d1:34:7d:4e:79:40:9a:e1:e3:55:2d:0a: cd:25:fd:9d:5b:08:82:f9:1d:09:d8:89:2c:5d:d0:38:70:f0: 18:e5:74:60:15:f9:21:6c:47:b7:77:4c:dd:81:1e:92:bf:4d: a4:12:03:dc:e5:4e:2c:22:e8:86:9c:ad:66:d0:a4:46:51:dc: c6:56:b5:6e:c1:85:b6:8f:7d:e2:a3:cb:62:12:19:3b:2b:77: 4e:cd:d1:a3:97:88:52:d5:b2:c1:ef:15:08:9d:79:8e:18:ab: 14:aa:1b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD MEIxNUI4RTAwHhcNMjUwODIzMDU0MjQ5WhcNMjUwODMwMDU0MjQ5WjAYMRYwFAYD VQQDEw02OGE5NTRkOS1lYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qlQU06xrgVP+3qmYg17HgLSfi0Jnc3RlHt/UkcXGEzAGboaEyyOGXzRPG8X /v7y8nC4aHXys8zssSPyt1XzZdWX1FiSoTSwwsKXkS7vlfMgFMFDDcY74LXF4Mle qE+5BXIAFaiNHAFP3IWy89/bHCmG8Mp97M1XzDVdeQjo4yQwlRrrmb1kUkncz/zn RMhaZUEtJKPs58AqTcyMfvQpG/oUNS+lyvt5yOFj1Ga9uSBiKTXZWMBbvXnG/oUd Cc0IhxB8xcXZGDco35R1vblTv+CJHJ+v/M1TngQcesN6jLy6CaCyKOymNgvDBZtg hqC9Og4fDs9TuNfAX0AgsuLFYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ5zGZh MkQVOntYvS8btm3pp8lBMB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlf0c4XgM4iDLl9liz1Tsvn2G897qGwerUHvlWyfL7cpNeziq9R7Tr MBd7gkLKcRzCNYOiml68+euFdhUiaJhCP54rUVN/e63vdxjI8bWV3ZlDf3r0DKFR OGgx1QoUNWf7y69B+4WviDDM8gjcEz42p9MHvBcUOGmWR9Wl5tQD5hKvAjU9oRi8 oXJjxV+qXcrRel96++nRNH1OeUCa4eNVLQrNJf2dWwiC+R0J2IksXdA4cPAY5XRg FfkhbEe3d0zdgR6Sv02kEgPc5U4sIuiGnK1m0KRGUdzGVrVuwYW2j33io8tiEhk7 K3dOzdGjl4hS1bLB7xUInXmOGKsUqhs3 -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:12 2025 by rpki-client