$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: 4+INzhaNg+fxatDQGj/cfwaKGlJ45ufbFUOmL4rY+fM= Subject key identifier: B4:C2:76:0E:EB:CD:48:F7:4D:F9:5D:12:5F:A8:D2:99:93:0D:FE:74 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 07C7 Signing time: Fri 22 Aug 2025 21:17:47 +0000 Manifest this update: Fri 22 Aug 2025 21:17:46 +0000 Manifest next update: Fri 29 Aug 2025 21:17:46 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: zmd/VMKcRJS4sWPT3bctMHsPSCrD+W0Uno9cujLW9qQ=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Aug 22 21:17:46 2025 GMT Not After : Aug 29 21:17:46 2025 GMT Subject: CN=68a8de7b-d899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:43:5e:db:35:1a:84:a2:e8:2a:07:69:34: 99:c7:73:b1:cd:0b:e1:5a:71:19:36:84:63:75:61: c5:fd:dd:58:f9:d9:e2:c5:36:9f:3d:19:90:76:00: 62:49:ae:39:aa:9a:68:85:f8:7e:1c:ad:1d:6e:5c: 2b:32:29:a8:be:fb:e0:f9:e7:ec:2c:a7:e7:9e:ad: 1a:f6:cf:d9:ea:e4:51:22:6e:46:df:9e:e6:2a:13: 58:b2:05:98:0c:86:06:4f:c1:6e:16:dd:c0:44:9b: 7e:61:9e:11:af:2a:a5:c1:95:02:1c:24:a6:85:a0: fc:dc:cc:2c:cb:b2:80:e0:77:29:b2:c5:b5:69:21: 60:ff:7e:1c:91:80:26:fc:ae:35:ae:75:9f:f3:83: 85:e9:f4:b2:d3:2a:76:1d:4b:3e:b9:05:07:38:13: 8f:27:82:9b:4a:44:35:dc:89:e9:a6:6c:11:8a:30: ec:99:a0:b8:f0:b9:4a:8e:66:d9:9f:bf:0d:05:f8: 8e:31:8f:d8:6c:97:f9:6f:af:ae:d6:1c:73:04:f7: 2a:e0:f8:e1:0b:e3:6b:d4:9d:63:37:38:9e:0f:76: 07:05:9d:db:5c:6b:09:60:ba:78:78:cc:88:4c:25: 18:07:19:7b:3f:0e:81:56:36:50:1b:2e:14:9a:47: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C2:76:0E:EB:CD:48:F7:4D:F9:5D:12:5F:A8:D2:99:93:0D:FE:74 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c0:c1:17:b3:3f:24:19:48:ee:d3:d1:ea:69:46:57:85:49: f7:27:23:ef:e1:7c:c9:86:3f:bd:76:db:cc:00:85:2d:58:98: 0c:23:71:56:0b:37:df:4c:8f:e2:9e:8d:fc:c4:93:91:9e:b6: 1a:77:d5:4e:d1:ad:61:66:d8:01:4a:00:a0:2c:d5:c0:cf:d2: 63:6a:a0:50:fa:16:11:1d:c5:84:e4:c2:80:3f:11:bb:e7:a0: 4c:b2:88:ed:6a:df:d1:6e:7f:4b:a9:9a:14:b8:89:ea:c4:46: cc:d9:7a:db:e2:00:a6:19:04:a1:ee:69:c6:74:c1:3e:80:b2: c2:9f:bf:19:14:3d:ac:f1:a9:4d:00:14:0b:31:f0:ec:d0:ad: 04:70:5b:dd:ce:11:8f:9c:1c:31:6c:90:19:76:4c:df:27:c5: e7:d1:15:21:c0:ea:6e:f7:19:eb:1b:a2:23:31:b8:20:98:af: 06:c1:29:8c:3a:9e:aa:ad:9a:7a:99:81:46:6e:a6:69:18:cd: 8d:3e:e4:96:7f:af:76:54:d1:a4:19:7a:00:6b:46:65:2d:5d: b4:74:4b:8a:fc:c5:0c:34:f0:25:99:cc:24:ac:7f:3b:56:e2: 67:ce:5c:c4:6e:5d:37:2d:65:a8:97:7c:de:ed:99:7a:74:28: 63:1c:04:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUwODIyMjExNzQ2WhcNMjUwODI5MjExNzQ2WjAYMRYwFAYD VQQDEw02OGE4ZGU3Yi1kODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNhDXts1GoSi6CoHaTSZx3OxzQvhWnEZNoRjdWHF/d1Y+dnixTafPRmQdgBi Sa45qppohfh+HK0dblwrMimovvvg+efsLKfnnq0a9s/Z6uRRIm5G357mKhNYsgWY DIYGT8FuFt3ARJt+YZ4RryqlwZUCHCSmhaD83Mwsy7KA4HcpssW1aSFg/34ckYAm /K41rnWf84OF6fSy0yp2HUs+uQUHOBOPJ4KbSkQ13InppmwRijDsmaC48LlKjmbZ n78NBfiOMY/YbJf5b6+u1hxzBPcq4PjhC+Nr1J1jNzieD3YHBZ3bXGsJYLp4eMyI TCUYBxl7Pw6BVjZQGy4UmkdYTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTCdg7r zUj3TfldEl+o0pmTDf50MB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMwMEXsz8kGUju09HqaUZXhUn3JyPv4XzJhj+9dtvMAIUtWJgMI3FW CzffTI/ino38xJORnrYad9VO0a1hZtgBSgCgLNXAz9JjaqBQ+hYRHcWE5MKAPxG7 56BMsojtat/Rbn9LqZoUuInqxEbM2Xrb4gCmGQSh7mnGdME+gLLCn78ZFD2s8alN ABQLMfDs0K0EcFvdzhGPnBwxbJAZdkzfJ8Xn0RUhwOpu9xnrG6IjMbggmK8GwSmM Op6qrZp6mYFGbqZpGM2NPuSWf692VNGkGXoAa0ZlLV20dEuK/MUMNPAlmcwkrH87 VuJnzlzEbl03LWWol3ze7Zl6dChjHARi -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:00 2025 by rpki-client