$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json) Hash identifier: RFyn7yovX1KwhVKw4wTSr2T6ncyKiA0D1/s2EaD+Dlk= Subject key identifier: 6C:E8:81:59:B8:CE:68:CD:A8:76:31:A7:D7:FE:D0:5A:4D:56:BC:41 Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 Certificate issuer: /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft Manifest number: 0531 Signing time: Fri 22 Aug 2025 23:43:32 +0000 Manifest this update: Fri 22 Aug 2025 23:43:31 +0000 Manifest next update: Fri 29 Aug 2025 23:43:31 +0000 Files and hashes: 1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: VOZyC+K+318xo4vwLHgg2XA/oOkgHMtW7Rbfs4xlHLg=) 2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Validity Not Before: Aug 22 23:43:31 2025 GMT Not After : Aug 29 23:43:31 2025 GMT Subject: CN=68a900a3-f0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:f7:6a:28:07:7c:3b:ce:89:f7:24:94:d4: 46:be:f5:06:c2:40:c6:af:bd:e0:b2:bc:92:99:93: 65:9e:be:c6:ab:49:95:03:54:79:8d:79:65:b0:3b: 8f:7d:a6:9d:92:e9:35:b1:42:9c:99:94:46:cf:60: 01:29:41:de:e1:d1:a6:dd:43:65:cc:98:76:7b:88: 95:fa:54:59:a7:6d:f1:27:6f:7c:47:13:a9:ff:d7: 1f:ef:d2:4d:05:0b:3d:6c:b0:c3:39:0d:89:c4:4e: 88:2b:95:05:e6:5b:de:8b:e6:94:dd:61:17:77:58: fc:2b:a2:7a:6e:fe:3b:7e:45:a1:4d:e0:fa:fe:cf: e8:ae:27:5f:bb:96:5e:8e:ca:43:bb:44:4c:8c:e6: 4a:4f:3f:aa:9c:f8:7c:91:50:52:2d:7e:4a:79:4b: 5f:f8:7a:ba:21:c1:6c:fa:c6:87:bc:3c:23:9d:a1: ec:61:53:74:51:2c:9f:fc:7e:27:01:7e:15:81:ea: 7f:61:be:40:eb:46:65:26:45:c7:b7:47:d0:4d:7f: 9a:50:fc:1c:74:d9:95:7c:01:ba:97:81:d4:10:2d: 31:43:f7:4f:50:77:ca:c4:f1:79:ac:55:c6:7f:98: 18:e9:00:ed:54:fb:29:93:a8:be:12:11:c8:3c:08: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E8:81:59:B8:CE:68:CD:A8:76:31:A7:D7:FE:D0:5A:4D:56:BC:41 X509v3 Authority Key Identifier: keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d6:5c:a0:30:03:44:9f:31:d0:45:74:49:8a:7b:5a:16:0b: 6f:98:dd:10:a3:e7:e7:4a:c8:ae:18:3a:6e:29:4d:b7:fd:e4: ce:8d:c1:e7:a0:10:15:7e:98:de:95:66:7d:28:f5:a8:25:54: ac:fb:29:87:56:80:db:b3:df:c7:63:50:29:31:da:45:db:b4: 0a:50:24:68:fb:50:dd:75:3d:99:56:93:8d:ed:be:75:09:c8: 14:58:8d:b5:53:08:d0:e5:23:8e:0d:8e:b7:d9:9a:93:91:72: 3d:f2:e7:cd:86:b6:f2:52:cd:37:11:94:3d:6b:b7:77:f4:c0: 8d:94:51:99:79:32:a4:f2:54:57:e4:8b:7c:67:f0:1e:96:a3: e3:b9:69:02:ba:d3:2a:20:2b:e2:a8:b7:c0:76:79:c9:e7:54: f3:29:8c:15:2a:6f:a7:5f:f5:47:e1:dd:e9:de:d9:94:71:e0: 54:b5:5a:38:cd:33:0f:ca:9a:dd:3f:2d:ff:3c:05:97:30:58: 11:90:f3:f2:65:fe:37:dc:00:c8:e8:e3:76:b7:2d:5a:c0:7f: 4d:4e:f1:ee:60:67:86:47:93:db:e9:02:b2:32:6d:9d:f1:cc: 16:e5:dd:74:aa:57:69:0f:86:d2:59:ae:fc:9e:5e:84:29:d9: 30:e1:56:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG RjM1Mzc4NzMwHhcNMjUwODIyMjM0MzMxWhcNMjUwODI5MjM0MzMxWjAYMRYwFAYD VQQDEw02OGE5MDBhMy1mMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylP3aigHfDvOifcklNRGvvUGwkDGr73gsrySmZNlnr7Gq0mVA1R5jXllsDuP faadkuk1sUKcmZRGz2ABKUHe4dGm3UNlzJh2e4iV+lRZp23xJ298RxOp/9cf79JN BQs9bLDDOQ2JxE6IK5UF5lvei+aU3WEXd1j8K6J6bv47fkWhTeD6/s/oridfu5Ze jspDu0RMjOZKTz+qnPh8kVBSLX5KeUtf+Hq6IcFs+saHvDwjnaHsYVN0USyf/H4n AX4Vgep/Yb5A60ZlJkXHt0fQTX+aUPwcdNmVfAG6l4HUEC0xQ/dPUHfKxPF5rFXG f5gY6QDtVPspk6i+EhHIPAhiSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzogVm4 zmjNqHYxp9f+0FpNVrxBMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh1lygMANEnzHQRXRJintaFgtvmN0Qo+fnSsiuGDpuKU23/eTOjcHn oBAVfpjelWZ9KPWoJVSs+ymHVoDbs9/HY1ApMdpF27QKUCRo+1DddT2ZVpON7b51 CcgUWI21UwjQ5SOODY632ZqTkXI98ufNhrbyUs03EZQ9a7d39MCNlFGZeTKk8lRX 5It8Z/AelqPjuWkCutMqICviqLfAdnnJ51TzKYwVKm+nX/VH4d3p3tmUceBUtVo4 zTMPyprdPy3/PAWXMFgRkPPyZf433ADI6ON2ty1awH9NTvHuYGeGR5Pb6QKyMm2d 8cwW5d10qldpD4bSWa78nl6EKdkw4VbO -----END CERTIFICATE-----Generated at Sun Aug 24 03:16:04 2025 by rpki-client