$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft File: jDgUcj_HVempuhvDNWZKUZu8HO4.mft (raw, json) Hash identifier: SqGfNhHnKvU5/ybLtQfrNLRzuMi1D3MLRSzNmrszrNE= Subject key identifier: 7C:A0:C8:3A:A7:1C:6F:2C:20:88:21:83:DF:DF:29:07:BB:06:3C:45 Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE Certificate issuer: /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft Manifest number: 04BF Signing time: Sat 23 Aug 2025 00:05:57 +0000 Manifest this update: Sat 23 Aug 2025 00:05:57 +0000 Manifest next update: Sat 30 Aug 2025 00:05:57 +0000 Files and hashes: 1: jDgUcj_HVempuhvDNWZKUZu8HO4.crl (hash: pIqvQf6oceEOi7NZCWmnNEVPuWTuViq+WLXJ6eOiYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C40D, serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Validity Not Before: Aug 23 00:05:57 2025 GMT Not After : Aug 30 00:05:57 2025 GMT Subject: CN=68a905e5-6d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:f0:d2:14:a4:d2:87:ab:80:1a:e1:53:79: b6:2f:37:16:90:a8:cb:ce:21:72:3e:a3:1d:93:b8: f6:b0:62:1e:ee:a9:4e:b9:3c:05:66:5e:ef:ab:9b: f9:b1:bd:9a:1d:fb:7d:d5:f7:85:7e:53:ce:55:71: a4:51:5f:cd:40:ec:9c:ac:65:d2:ef:73:bb:3a:f3: d7:3d:75:1b:95:3c:42:09:11:64:6f:29:ae:19:93: b9:3e:63:00:62:83:15:3e:21:55:20:80:1e:ec:35: 95:6f:35:72:91:9d:3b:40:ba:3a:fc:a9:bd:6d:b0: 5e:73:f8:30:47:39:86:0c:4d:57:39:5e:64:c9:a7: 27:3c:8c:4a:ad:6c:92:a4:29:9e:53:4d:6b:48:90: 96:8f:8c:7d:fa:fc:0f:43:24:4d:c3:64:06:fe:82: 7d:8f:65:86:07:54:73:73:41:7f:d8:24:64:a6:7b: d9:e3:04:7a:83:8a:e0:b3:89:f2:5d:b8:e2:c8:95: 18:c5:00:9d:96:5f:76:c5:a6:5b:c9:eb:93:21:61: bb:fa:f7:b5:ef:7a:c2:fb:dc:c3:1d:24:02:2c:5b: 0b:a1:3b:77:45:9c:2c:cc:f6:34:cb:fc:20:50:22: cb:92:dc:c2:07:58:7d:a0:2c:59:5e:1a:e4:10:9c: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A0:C8:3A:A7:1C:6F:2C:20:88:21:83:DF:DF:29:07:BB:06:3C:45 X509v3 Authority Key Identifier: keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:13:c3:e6:fe:6a:20:66:72:b6:23:83:03:32:ac:5c:2d:34: 72:55:ba:e5:b2:69:73:b6:d7:d9:59:9a:22:f4:f6:c5:c1:92: 78:97:db:e5:98:34:91:e1:44:5a:21:e4:22:1d:50:48:81:3d: 6b:a8:d6:35:52:65:ab:6f:42:e8:fd:7c:e6:da:bd:a3:a2:c0: 02:9e:07:65:73:8d:5d:d8:7b:8d:a3:41:1e:eb:a3:d8:27:72: 50:b4:2e:9b:b4:b6:35:81:e6:41:24:1a:b7:ce:34:ac:b9:89: bb:3d:14:a6:a6:fc:83:4a:b2:29:8d:85:5b:ed:78:d7:cb:53: 8b:92:ad:c4:5d:3b:e6:f0:32:da:f7:65:d0:ab:95:94:a2:68: da:5e:a1:5d:1c:cd:6b:75:86:8b:dd:f5:49:ad:50:4c:93:13: bc:5d:db:85:fd:6f:61:89:ca:bd:64:fa:ee:0c:23:11:fb:8e: 0e:1a:98:d3:a8:72:7e:28:11:8b:a1:52:fa:e8:05:0f:4d:e3: 27:8e:26:ba:56:11:58:92:e4:d1:52:bd:48:e2:d7:d4:b5:0d: 5c:37:48:55:9f:8b:8d:95:65:e7:e9:e7:29:91:8c:84:1b:ab: ce:48:9a:7f:ca:eb:4c:a9:bc:56:9d:37:df:b7:c4:b4:94:d2: 98:fd:d9:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MEQxMTAvBgNVBAUTKDhDMzgxNDcyM0ZDNzU1RTlBOUJBMUJDMzM1NjY0QTUx OUJCQzFDRUUwHhcNMjUwODIzMDAwNTU3WhcNMjUwODMwMDAwNTU3WjAYMRYwFAYD VQQDEw02OGE5MDVlNS02ZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGHw0hSk0oergBrhU3m2LzcWkKjLziFyPqMdk7j2sGIe7qlOuTwFZl7vq5v5 sb2aHft91feFflPOVXGkUV/NQOycrGXS73O7OvPXPXUblTxCCRFkbymuGZO5PmMA YoMVPiFVIIAe7DWVbzVykZ07QLo6/Km9bbBec/gwRzmGDE1XOV5kyacnPIxKrWyS pCmeU01rSJCWj4x9+vwPQyRNw2QG/oJ9j2WGB1Rzc0F/2CRkpnvZ4wR6g4rgs4ny XbjiyJUYxQCdll92xaZbyeuTIWG7+ve173rC+9zDHSQCLFsLoTt3RZwszPY0y/wg UCLLktzCB1h9oCxZXhrkEJzTCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHygyDqn HG8sIIghg9/fKQe7BjxFMB8GA1UdIwQYMBaAFIw4FHI/x1XpqbobwzVmSlGbvBzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQwRC81MEY3NzVBNjNC Q0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZlbXB1aHZETldaS1VadThI TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEZ1Vjal9IVmVtcHVodkROV1pLVVp1OEhPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQwRC81MEY3NzVBNjNCQ0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZl bXB1aHZETldaS1VadThITzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1E8Pm/mogZnK2I4MDMqxcLTRyVbrlsmlzttfZWZoi9PbFwZJ4l9vl mDSR4URaIeQiHVBIgT1rqNY1UmWrb0Lo/Xzm2r2josACngdlc41d2HuNo0Ee66PY J3JQtC6btLY1geZBJBq3zjSsuYm7PRSmpvyDSrIpjYVb7XjXy1OLkq3EXTvm8DLa 92XQq5WUomjaXqFdHM1rdYaL3fVJrVBMkxO8XduF/W9hicq9ZPruDCMR+44OGpjT qHJ+KBGLoVL66AUPTeMnjia6VhFYkuTRUr1I4tfUtQ1cN0hVn4uNlWXn6ecpkYyE G6vOSJp/yutMqbxWnTfft8S0lNKY/dl0 -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:30 2025 by rpki-client