$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json) Hash identifier: TzhZx+lGN6h0xmeBjc2f4x+0EdfY0IcqqEo7ZQD3p4g= Subject key identifier: 02:2B:81:AD:BC:13:86:3A:46:EF:F4:C6:E1:32:5E:34:E6:AA:B3:7B Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Certificate serial: 19A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft Manifest number: 1972 Signing time: Fri 22 Aug 2025 16:30:24 +0000 Manifest this update: Fri 22 Aug 2025 16:30:23 +0000 Manifest next update: Fri 29 Aug 2025 16:30:23 +0000 Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: eSEIlWf5n6nn5vto5axf/PQkmDd34MWpgmPCOGiQzzM=) 2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=) 3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 3B1RpXRPYovGqaozvCJn8HvxK4358NVTnDJF2IMtKPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6562 (0x19a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09 Validity Not Before: Aug 22 16:30:23 2025 GMT Not After : Aug 29 16:30:23 2025 GMT Subject: CN=68a89b1f-f3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:88:3b:74:d6:b0:63:dd:0f:f4:64:3d:7f: 9d:ad:02:1c:94:6b:c2:1d:e9:ec:98:92:5a:de:07: 70:fc:76:62:63:a4:2f:b6:2a:2d:f9:1f:80:91:1b: e6:e8:17:3a:5d:e2:2c:48:ac:ba:ac:f8:b4:f8:08: 4f:18:01:73:f1:25:0d:d9:3a:80:6e:5c:45:0e:1f: 3e:8d:81:f7:4c:d6:82:a7:d4:92:97:2f:08:97:8d: 36:ab:82:a3:64:b8:00:ed:6d:03:22:40:e2:19:c0: c7:cd:99:12:dd:d8:ae:50:68:33:0a:c1:63:2d:ed: 1f:1f:26:46:8d:eb:ea:24:f1:bb:63:ed:db:87:46: 6e:7d:d7:74:9c:3b:52:30:ee:23:e1:a2:f2:da:4d: d4:d4:7b:48:98:50:75:58:f0:d0:04:c4:d4:5d:fb: df:50:35:17:d6:a6:c3:3b:6b:85:b0:53:54:1e:a8: 2a:ca:5e:b6:3a:9f:ab:90:bf:2c:a5:2f:85:c3:d4: 04:80:f3:67:f4:b3:79:26:b7:14:e6:bb:ff:36:d7: 4e:b9:e8:f9:e3:53:6a:a8:f8:35:79:a9:09:b5:e2: 23:69:b7:c1:39:d6:b1:b4:ea:c8:47:73:81:73:12: 1c:1f:e9:db:e2:30:16:e2:33:3d:d5:b9:fb:64:cd: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:81:AD:BC:13:86:3A:46:EF:F4:C6:E1:32:5E:34:E6:AA:B3:7B X509v3 Authority Key Identifier: keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e6:83:3c:b2:7a:71:6a:f7:ea:de:8b:26:b1:68:fb:6e:e8: e9:46:22:82:55:d5:5e:86:c3:c9:3d:50:05:3c:8e:4d:cd:e0: 4c:d1:61:82:be:de:42:9e:11:f7:11:31:41:52:d0:cc:81:3b: a9:84:7b:3e:2c:df:12:24:61:85:12:a3:cf:5b:ba:89:98:ec: f2:10:40:d0:8a:5d:32:2b:24:37:4d:a1:f8:db:12:65:c6:0c: cb:58:3a:84:51:6d:15:38:c4:dc:4b:cc:1c:4c:66:91:0f:4f: 35:73:da:c4:e0:a2:68:ad:4d:32:80:c4:d1:cc:e9:d2:a5:c6: 63:2d:4e:11:d3:b3:08:d8:aa:c8:31:3b:04:a2:69:04:bb:97: c6:03:78:74:da:d6:a4:a2:86:7c:04:d3:ef:1a:d6:ec:cd:20: f9:4f:be:ca:46:07:6b:3e:be:93:4d:7d:1d:18:75:ae:12:fe: f9:c7:36:26:68:01:85:99:11:a9:fa:c5:a5:96:47:1d:94:fe: be:d6:31:ea:07:f6:95:f0:44:44:c5:d9:6b:99:85:7a:b8:e4: 30:56:d4:ea:1b:91:2d:92:47:83:f6:ca:51:ae:ef:ef:04:f1: ef:6a:10:f4:07:1b:2c:3b:5f:1b:05:59:aa:46:e9:7a:4c:33: 6e:3e:4d:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU4OUExMTAvBgNVBAUTKDI2Mjc5MENEOTE0Q0VBOEVDMTFFMjU4NjlCODk4REUw MDAxRkJEMDkwHhcNMjUwODIyMTYzMDIzWhcNMjUwODI5MTYzMDIzWjAYMRYwFAYD VQQDEw02OGE4OWIxZi1mM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuCIO3TWsGPdD/RkPX+drQIclGvCHensmJJa3gdw/HZiY6Qvtiot+R+AkRvm 6Bc6XeIsSKy6rPi0+AhPGAFz8SUN2TqAblxFDh8+jYH3TNaCp9SSly8Il402q4Kj ZLgA7W0DIkDiGcDHzZkS3diuUGgzCsFjLe0fHyZGjevqJPG7Y+3bh0Zufdd0nDtS MO4j4aLy2k3U1HtImFB1WPDQBMTUXfvfUDUX1qbDO2uFsFNUHqgqyl62Op+rkL8s pS+Fw9QEgPNn9LN5JrcU5rv/NtdOuej541NqqPg1eakJteIjabfBOdaxtOrIR3OB cxIcH+nb4jAW4jM91bn7ZM2lVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIrga28 E4Y6Ru/0xuEyXjTmqrN7MB8GA1UdIwQYMBaAFCYnkM2RTOqOwR4lhpuJjeAAH70J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg5QS9BQ0Q2RkI4QTdE OTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZvN0JIaVdHbTRtTjRBQWZ2 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppZVF6WkZNNm83QkhpV0dtNG1ONEFBZnZRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTg5QS9BQ0Q2RkI4QTdEOTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZv N0JIaVdHbTRtTjRBQWZ2UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF5oM8snpxavfq3osmsWj7bujpRiKCVdVehsPJPVAFPI5NzeBM0WGC vt5CnhH3ETFBUtDMgTuphHs+LN8SJGGFEqPPW7qJmOzyEEDQil0yKyQ3TaH42xJl xgzLWDqEUW0VOMTcS8wcTGaRD081c9rE4KJorU0ygMTRzOnSpcZjLU4R07MI2KrI MTsEomkEu5fGA3h02takooZ8BNPvGtbszSD5T77KRgdrPr6TTX0dGHWuEv75xzYm aAGFmRGp+sWllkcdlP6+1jHqB/aV8ERExdlrmYV6uOQwVtTqG5EtkkeD9spRru/v BPHvahD0BxssO18bBVmqRul6TDNuPk1u -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:20 2025 by rpki-client