$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: YneMmDKskDAPiK+5wJvT7P2ezIx9tYL49I3G8PouXR8= Subject key identifier: 74:8D:A2:CD:CB:B1:69:19:36:79:AB:6C:5B:CD:8B:B5:B2:1E:D3:C6 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0710 Signing time: Fri 22 Aug 2025 22:06:58 +0000 Manifest this update: Fri 22 Aug 2025 22:06:58 +0000 Manifest next update: Fri 29 Aug 2025 22:06:58 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: HQ9jPzh1D45Rai6iGEqgGAO6Tdg9qbzhutu98iGVg14=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: oH6etJLll8/xa7dgaHGyb02OWTJ3NWMaSZZdVBiHK0Q=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: FOUqi/Zhh8esXFcRli/yVF/Rw56vHIwH4UuHSxeTaMk=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: qk7Bx30QrpdNU4t2WsWpt2osPi+DUzc4S7fF1pPsooQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Aug 22 22:06:58 2025 GMT Not After : Aug 29 22:06:58 2025 GMT Subject: CN=68a8ea02-1679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:f0:f7:95:6c:66:b1:f7:75:9f:68:1c:03: cb:eb:b1:ac:ee:94:32:78:56:61:8c:c7:03:be:97: b4:3e:5c:5d:b2:63:d0:1d:9a:76:75:10:57:8d:7a: 36:ea:a6:31:a6:69:17:cf:16:13:e2:7c:ef:0d:ac: c5:fc:05:ce:03:27:56:54:b6:4c:85:55:69:37:82: eb:8d:2e:69:0c:d1:f5:f4:14:29:f9:41:c2:a2:07: c7:8b:8b:a0:b7:b0:85:93:49:fe:f4:5a:db:09:31: a8:32:ad:d2:23:83:d4:6e:ea:4d:9f:e0:73:96:57: dd:8f:5a:41:68:02:ee:9a:cd:68:68:01:70:eb:71: 32:21:93:aa:f8:b7:dd:91:58:e9:b0:4a:9c:20:2c: 2e:81:16:d2:2e:40:f2:38:83:82:ec:73:a7:11:ef: ff:06:84:03:44:9f:57:0d:c4:a6:4e:da:49:0f:52: 0c:6f:19:6d:e7:d9:d3:8b:2d:1b:d2:de:e1:4e:4b: 9a:7d:8c:d1:1c:a1:72:62:aa:8a:ec:40:0d:2f:68: 13:43:b2:c0:75:b7:0f:1f:aa:87:a9:a6:7d:a4:d4: b4:5d:ab:83:c4:70:50:79:47:32:4e:ec:69:9f:b7: 5c:71:02:5a:24:6a:79:2f:dc:54:8a:b5:78:74:21: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:A2:CD:CB:B1:69:19:36:79:AB:6C:5B:CD:8B:B5:B2:1E:D3:C6 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4a:30:8e:37:7f:a7:f6:09:e2:4e:15:f3:9b:43:8c:12:f0: e1:71:38:59:7f:85:7c:d5:d3:dc:7d:6e:0a:44:60:66:9f:9d: c6:24:3d:f6:a2:c1:ec:7a:a4:1d:d0:fa:78:2a:e0:73:8e:36: f6:64:24:ba:20:83:a7:01:cf:be:b1:03:b9:e0:d5:fe:6e:87: 41:9e:f6:25:81:03:31:7d:0e:a2:49:9a:ac:38:e4:9c:d0:50: 3a:a8:98:52:45:f3:7e:40:27:6e:48:ad:dd:69:63:8e:80:60: 3a:f7:9e:12:d8:98:ab:cc:df:c8:e6:c9:da:73:9d:ea:2a:26: 8a:79:6a:84:f1:07:35:5c:f8:10:ed:5f:68:23:61:88:94:36: 7c:52:b0:3f:64:51:48:34:d2:0f:6a:6d:e5:a1:fd:c4:3c:24: 03:de:18:5a:5d:06:21:b2:fb:f3:27:bd:a1:1f:f9:a3:fa:6f: 22:d9:c3:bd:50:da:51:f8:05:c9:c0:1a:be:70:b5:56:4c:2a: 8a:e8:0b:1f:9b:78:ba:9d:c5:79:d8:a1:8a:ae:01:ba:f6:3b: 8a:10:94:a5:05:b5:a0:6f:84:e1:fb:f3:26:5f:da:95:e8:84: a3:08:c0:fc:61:e8:0b:6a:cc:ca:37:cd:b0:ce:9f:80:56:ee: f9:15:0b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwODIyMjIwNjU4WhcNMjUwODI5MjIwNjU4WjAYMRYwFAYD VQQDEw02OGE4ZWEwMi0xNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWnw95VsZrH3dZ9oHAPL67Gs7pQyeFZhjMcDvpe0PlxdsmPQHZp2dRBXjXo2 6qYxpmkXzxYT4nzvDazF/AXOAydWVLZMhVVpN4LrjS5pDNH19BQp+UHCogfHi4ug t7CFk0n+9FrbCTGoMq3SI4PUbupNn+Bzllfdj1pBaALums1oaAFw63EyIZOq+Lfd kVjpsEqcICwugRbSLkDyOIOC7HOnEe//BoQDRJ9XDcSmTtpJD1IMbxlt59nTiy0b 0t7hTkuafYzRHKFyYqqK7EANL2gTQ7LAdbcPH6qHqaZ9pNS0XauDxHBQeUcyTuxp n7dccQJaJGp5L9xUirV4dCE6cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSNos3L sWkZNnmrbFvNi7WyHtPGMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeSjCON3+n9gniThXzm0OMEvDhcThZf4V81dPcfW4KRGBmn53GJD32 osHseqQd0Pp4KuBzjjb2ZCS6IIOnAc++sQO54NX+bodBnvYlgQMxfQ6iSZqsOOSc 0FA6qJhSRfN+QCduSK3daWOOgGA6954S2JirzN/I5snac53qKiaKeWqE8Qc1XPgQ 7V9oI2GIlDZ8UrA/ZFFINNIPam3lof3EPCQD3hhaXQYhsvvzJ72hH/mj+m8i2cO9 UNpR+AXJwBq+cLVWTCqK6Asfm3i6ncV52KGKrgG69juKEJSlBbWgb4Th+/MmX9qV 6ISjCMD8YegLaszKN82wzp+AVu75FQsf -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:49 2025 by rpki-client