$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: CC0pgSFdxx8eYcrVMpaHPDX59WYhouTZRgMkh2NUjew= Subject key identifier: E0:EC:AB:3A:AB:13:70:94:6D:A9:70:EE:2E:9B:8F:94:6C:A4:A2:56 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: D0 Signing time: Sat 23 Aug 2025 05:49:50 +0000 Manifest this update: Sat 23 Aug 2025 05:49:49 +0000 Manifest next update: Sat 30 Aug 2025 05:49:49 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: F13xKoBmKkExsKggbBkU7aek2dEEYqSEgSM27MSp3i0=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: Q8jUoDfTBKkYt+wlmI66aJ+35Q4MifbD8LinqGUg/KY=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: KoaV0URvtmzdHrqA1z33gHV+eShaD03rJhOUSMjsP9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Aug 23 05:49:49 2025 GMT Not After : Aug 30 05:49:49 2025 GMT Subject: CN=68a9567d-5d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8c:0c:aa:f7:93:b3:7a:1f:72:f1:8b:f7:1a: 1b:1a:76:37:79:d0:1b:2e:ab:02:76:7d:3d:18:f4: 1b:0a:99:58:d0:bc:89:03:59:26:41:c8:0b:78:f7: cd:0e:ed:7b:d6:05:0c:4e:d9:55:6b:3c:0a:83:a2: 27:e9:84:e7:9e:18:33:40:3c:4a:fb:4c:ce:03:d5: c3:ad:99:c9:5c:39:be:45:fb:fe:0f:50:8b:5d:76: b1:14:d2:7f:89:1e:56:c3:ed:74:6d:fe:df:39:3f: fa:e4:82:61:1f:cc:52:4f:48:78:b7:3e:ba:53:58: 1e:18:97:b9:94:d5:a6:f0:f5:6a:67:73:c8:2a:3a: 9a:24:72:ac:bd:fb:70:48:4c:82:9b:13:9d:3d:94: a7:c4:d3:31:b7:c4:6f:4d:9d:36:1f:bc:6d:92:28: df:66:32:7f:ae:a5:30:34:17:86:5b:58:df:19:40: 80:8e:bd:80:c2:44:4a:2f:ee:53:26:27:38:cb:82: 5e:48:c0:78:55:da:ba:e7:b7:af:69:fc:3d:71:41: cd:b3:a8:3c:b7:7c:89:e6:0c:ed:12:46:2c:bc:3a: 61:63:1a:f4:8c:74:c8:d4:35:5a:7d:42:60:ec:f9: ed:c4:62:1b:59:e9:bf:95:de:13:c9:6f:40:3b:13: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EC:AB:3A:AB:13:70:94:6D:A9:70:EE:2E:9B:8F:94:6C:A4:A2:56 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c0:3d:8f:41:d5:83:f0:d4:38:42:b3:5b:46:47:ef:15:17: 53:e8:8b:be:cf:96:c4:1e:68:6c:bf:41:94:c1:57:e2:b3:2a: ac:2e:af:bc:ac:68:4f:65:f9:b5:fa:bc:8a:fa:38:b2:3f:05: e8:6f:1f:bf:6a:b4:cd:a8:40:cc:82:1b:8f:40:89:4e:e2:c9: 68:27:9b:a8:3c:93:ec:4f:34:72:6a:ba:e9:54:fe:1d:86:41: 0d:34:c9:5f:47:43:8e:31:5d:49:23:38:9e:df:b1:12:83:a9: c3:56:0f:80:61:da:0f:d0:bc:54:a8:5e:a2:dc:c8:11:53:8e: 9a:96:30:06:64:98:e6:98:13:06:39:d5:a2:ff:c0:f6:de:d1: 7a:71:3a:11:c2:b7:e7:70:a5:d1:13:98:fd:9b:56:46:ce:cf: da:e2:b4:a1:53:78:62:f7:4a:11:0c:97:94:29:48:2d:4e:73: 3e:9e:8a:33:5f:e1:21:b4:bb:40:c3:f4:79:dc:0e:f0:65:d9: 69:fb:7b:25:ac:ad:24:21:ca:22:91:90:b1:4f:55:36:d0:26: 82:a8:ca:8b:ec:c7:ae:a6:c0:62:b5:a4:54:f1:48:d4:9a:1d: 4b:e0:11:3d:f6:d0:35:2f:57:fc:54:95:75:ee:a7:1b:f3:70: 18:10:73:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwODIzMDU0OTQ5WhcNMjUwODMwMDU0OTQ5WjAYMRYwFAYD VQQDEw02OGE5NTY3ZC01ZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YwMqveTs3ofcvGL9xobGnY3edAbLqsCdn09GPQbCplY0LyJA1kmQcgLePfN Du171gUMTtlVazwKg6In6YTnnhgzQDxK+0zOA9XDrZnJXDm+Rfv+D1CLXXaxFNJ/ iR5Ww+10bf7fOT/65IJhH8xST0h4tz66U1geGJe5lNWm8PVqZ3PIKjqaJHKsvftw SEyCmxOdPZSnxNMxt8RvTZ02H7xtkijfZjJ/rqUwNBeGW1jfGUCAjr2AwkRKL+5T Jic4y4JeSMB4Vdq657evafw9cUHNs6g8t3yJ5gztEkYsvDphYxr0jHTI1DVafUJg 7PntxGIbWem/ld4TyW9AOxNe0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODsqzqr E3CUbalw7i6bj5RspKJWMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjwD2PQdWD8NQ4QrNbRkfvFRdT6Iu+z5bEHmhsv0GUwVfisyqsLq+8 rGhPZfm1+ryK+jiyPwXobx+/arTNqEDMghuPQIlO4sloJ5uoPJPsTzRyarrpVP4d hkENNMlfR0OOMV1JIzie37ESg6nDVg+AYdoP0LxUqF6i3MgRU46aljAGZJjmmBMG OdWi/8D23tF6cToRwrfncKXRE5j9m1ZGzs/a4rShU3hi90oRDJeUKUgtTnM+nooz X+EhtLtAw/R53A7wZdlp+3slrK0kIcoikZCxT1U20CaCqMqL7MeupsBitaRU8UjU mh1L4BE99tA1L1f8VJV17qcb83AYEHMN -----END CERTIFICATE-----Generated at Sat Aug 23 10:39:41 2025 by rpki-client