$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: 0QEomUBn9WWQxsOuqcPb8XxRLQrydrvg3/w7Dq3Rn8g= Subject key identifier: ED:F7:C9:31:86:D4:B4:9A:A3:1D:C6:B5:9F:64:72:89:3A:9E:2A:59 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A48 Signing time: Fri 22 Aug 2025 19:52:25 +0000 Manifest this update: Fri 22 Aug 2025 19:52:24 +0000 Manifest next update: Fri 29 Aug 2025 19:52:24 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: lL1jllV5tFwFvM2p5i9KsOVjiLsJygehX/Fr6kTGydM=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: NYdc2f4yDizOBPmg8EBE/rQVPUKcax5Hh13GoWVtgRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Aug 22 19:52:24 2025 GMT Not After : Aug 29 19:52:24 2025 GMT Subject: CN=68a8ca78-4277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:2c:0d:2e:b4:e1:63:42:41:ce:b1:ac:d8: 01:0a:b3:47:a8:62:3a:4d:7b:84:75:79:74:69:d7: a2:50:41:dd:c5:0c:a9:24:b4:e2:f3:09:b7:79:06: e9:63:d5:82:c8:ac:20:1f:f3:d5:e1:49:16:48:ad: cf:e5:2a:bd:e2:04:db:77:de:7e:76:58:d6:cf:c9: 2b:4c:b5:0f:f8:df:95:d0:41:88:90:f7:5b:f8:e2: 03:f9:6c:25:9f:37:b1:81:a0:a4:bd:db:34:0e:03: 90:ed:75:18:b2:9c:b7:d0:ef:1b:80:ed:b7:ec:e0: 25:7d:95:99:81:54:c3:33:89:26:75:5b:95:6b:e9: a9:10:38:e6:7f:ef:5b:78:10:a8:f4:7d:05:d6:fb: 69:b0:94:32:08:af:12:a0:ac:eb:24:74:d9:fc:ff: b8:be:32:4f:d6:a9:eb:02:fc:16:68:99:bf:51:04: fb:22:3b:57:8f:e9:1f:66:37:ee:8b:91:7b:cc:5a: 3b:ed:b8:e6:99:bd:e7:a6:df:0c:fc:31:a4:60:6a: a9:9a:d6:8f:fc:3e:a2:a3:d6:0a:d1:8b:da:ea:f7: d9:c6:21:a3:ea:e1:19:95:0f:09:12:b8:08:be:a1: 19:71:bf:54:0e:07:c4:4d:ff:a8:b0:d3:0f:5f:20: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F7:C9:31:86:D4:B4:9A:A3:1D:C6:B5:9F:64:72:89:3A:9E:2A:59 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:38:d3:18:8a:99:4c:52:85:18:d2:a5:fb:81:f1:06:20:aa: 72:ba:ef:b4:ee:31:34:36:f2:f7:38:f0:4f:f9:38:51:be:20: e0:2e:d0:01:67:3f:9d:33:c1:3c:4c:e9:80:f1:83:9e:52:9e: 0b:af:75:0a:a6:53:77:7a:dc:75:f1:0d:46:d6:f9:88:c3:be: a5:0b:bf:fd:72:50:b7:04:74:34:29:73:27:44:a0:ef:d7:0d: 5d:e8:16:d1:cf:bf:70:cb:61:13:2b:86:a0:9c:77:98:c2:fd: 1b:68:b9:af:59:3a:3b:09:c9:66:da:c9:1d:51:d3:af:8f:b5: b1:6c:0c:4c:81:06:25:ee:b3:7c:61:92:4e:e6:27:9b:e3:d0: 48:12:d9:10:f2:f5:16:16:6c:09:91:61:7a:b7:5d:ed:e4:7d: 5a:f5:50:02:ea:86:10:c9:6c:c5:84:c9:4c:f7:04:b7:e2:84: 30:a7:1a:8b:ff:8d:24:96:c0:04:c3:0a:15:56:cf:81:72:47: 03:15:ef:74:5e:19:90:e1:66:4f:46:6b:65:56:b6:81:cb:51: ab:86:26:2e:bc:41:5d:00:d8:bb:3e:8f:fd:db:33:f1:b7:4c: 52:8f:f3:ab:e6:72:b9:50:94:84:6a:ae:1e:ab:75:3b:72:4e: fb:df:45:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUwODIyMTk1MjI0WhcNMjUwODI5MTk1MjI0WjAYMRYwFAYD VQQDEw02OGE4Y2E3OC00Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznssDS604WNCQc6xrNgBCrNHqGI6TXuEdXl0adeiUEHdxQypJLTi8wm3eQbp Y9WCyKwgH/PV4UkWSK3P5Sq94gTbd95+dljWz8krTLUP+N+V0EGIkPdb+OID+Wwl nzexgaCkvds0DgOQ7XUYspy30O8bgO237OAlfZWZgVTDM4kmdVuVa+mpEDjmf+9b eBCo9H0F1vtpsJQyCK8SoKzrJHTZ/P+4vjJP1qnrAvwWaJm/UQT7IjtXj+kfZjfu i5F7zFo77bjmmb3npt8M/DGkYGqpmtaP/D6io9YK0Yva6vfZxiGj6uEZlQ8JErgI vqEZcb9UDgfETf+osNMPXyDO6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO33yTGG 1LSaox3GtZ9kcok6nipZMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgONMYiplMUoUY0qX7gfEGIKpyuu+07jE0NvL3OPBP+ThRviDgLtAB Zz+dM8E8TOmA8YOeUp4Lr3UKplN3etx18Q1G1vmIw76lC7/9clC3BHQ0KXMnRKDv 1w1d6BbRz79wy2ETK4agnHeYwv0baLmvWTo7Cclm2skdUdOvj7WxbAxMgQYl7rN8 YZJO5ieb49BIEtkQ8vUWFmwJkWF6t13t5H1a9VAC6oYQyWzFhMlM9wS34oQwpxqL /40klsAEwwoVVs+BckcDFe90XhmQ4WZPRmtlVraBy1GrhiYuvEFdANi7Po/92zPx t0xSj/Or5nK5UJSEaq4eq3U7ck7730Wc -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:31 2025 by rpki-client