$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: 1cMCY2riEljC9InByh5Z9KqEnZs5Lt5880N/ey4/1Ao= Subject key identifier: 40:E2:6E:9A:A1:7B:A9:38:22:09:9C:08:9A:AE:AE:DD:47:31:5F:24 Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1C26 Signing time: Fri 22 Aug 2025 16:16:52 +0000 Manifest this update: Fri 22 Aug 2025 16:16:51 +0000 Manifest next update: Fri 29 Aug 2025 16:16:51 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: LEX4RRRhw4LzDu9QU1iYgR0TZJ/KJy3MtKxvd0cISqQ=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7230 (0x1c3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Aug 22 16:16:51 2025 GMT Not After : Aug 29 16:16:51 2025 GMT Subject: CN=68a897f4-3bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:4e:7e:5b:ad:4b:cc:7f:69:11:cc:40:42: e2:d8:2f:00:cb:40:b8:7c:bd:9c:0a:4b:b2:f3:44: 58:d4:07:b3:41:ad:c1:bf:44:f8:e0:44:78:57:62: 6d:68:94:85:7a:6e:57:ba:a7:19:d6:79:56:2a:e1: 5e:ed:5f:eb:17:89:a1:35:2c:4f:d9:7e:a3:dc:d1: f1:76:a1:a6:a3:11:09:21:ae:0c:8a:21:da:6d:2f: 74:f8:d6:ea:9f:4f:10:c8:7d:33:fa:1c:b7:33:23: d3:1a:d7:82:28:e3:29:ee:23:7b:5e:1b:c2:e3:74: 79:11:ba:5e:54:09:75:86:42:25:45:2e:35:01:af: 78:3c:c1:bd:be:94:24:db:36:91:0f:09:08:b9:9f: 3c:07:a3:2a:a4:3c:64:36:6d:dc:af:5d:3f:c2:73: 60:40:71:d8:0b:c3:72:1c:b6:9d:56:a3:4f:5c:06: 30:e6:d8:2a:b6:bf:6c:2a:eb:34:86:27:89:61:f3: 49:03:02:b0:ce:5c:a7:48:18:5d:92:46:8c:1b:27: e7:4c:31:b6:35:68:90:ac:61:71:35:c7:d8:2c:09: 0e:fc:66:eb:4e:a3:f5:4d:d7:df:04:68:8e:37:bb: 2c:46:29:48:da:98:c0:96:0d:4f:b9:2d:27:5d:e3: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E2:6E:9A:A1:7B:A9:38:22:09:9C:08:9A:AE:AE:DD:47:31:5F:24 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ea:16:57:3e:c2:51:8c:6c:2e:1e:00:58:38:56:48:bb:dd: eb:20:22:a8:56:17:65:d6:50:ed:1d:11:23:96:d4:15:61:54: d1:72:bf:66:89:58:27:a2:83:65:3f:cd:e0:50:54:c8:3f:0a: fe:04:c9:8c:4a:c6:73:2a:2c:7e:78:5c:31:f1:6a:76:6e:df: 18:8e:2d:cf:d4:5b:7e:bb:90:fc:34:b7:a7:24:00:df:e4:e1: ae:13:ad:06:92:ab:c3:10:42:da:d4:e1:c6:9e:25:3e:b7:4e: 17:9d:fd:bd:04:97:0d:f3:ff:db:9f:b0:be:1d:d3:2a:a8:27: 76:48:59:7f:6b:fb:c8:2a:bf:b0:9c:89:d4:45:05:98:f3:fd: 1d:9c:c2:26:4b:ac:e7:65:54:65:ef:83:20:26:88:33:9a:89: 6d:1c:07:8d:f6:c7:a2:ee:6a:d8:b7:a9:71:c9:50:af:f7:a3: 3e:6a:9f:82:ff:11:e1:e6:c9:11:3c:d9:e6:69:af:30:33:c5: 3a:5f:71:a1:17:fd:81:7c:83:e7:14:ab:b6:61:e1:67:11:12: 37:09:25:e2:56:da:b2:4f:9b:7e:51:cc:4b:11:c8:8e:8f:cf: 17:bd:6c:c2:b4:91:78:d1:1b:8c:fa:0e:b2:b7:fc:8c:57:03: 3a:6f:72:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwODIyMTYxNjUxWhcNMjUwODI5MTYxNjUxWjAYMRYwFAYD VQQDEw02OGE4OTdmNC0zYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyz5OflutS8x/aRHMQELi2C8Ay0C4fL2cCkuy80RY1AezQa3Bv0T44ER4V2Jt aJSFem5XuqcZ1nlWKuFe7V/rF4mhNSxP2X6j3NHxdqGmoxEJIa4MiiHabS90+Nbq n08QyH0z+hy3MyPTGteCKOMp7iN7XhvC43R5EbpeVAl1hkIlRS41Aa94PMG9vpQk 2zaRDwkIuZ88B6MqpDxkNm3cr10/wnNgQHHYC8NyHLadVqNPXAYw5tgqtr9sKus0 hieJYfNJAwKwzlynSBhdkkaMGyfnTDG2NWiQrGFxNcfYLAkO/GbrTqP1TdffBGiO N7ssRilI2pjAlg1PuS0nXeN0QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDibpqh e6k4IgmcCJqurt1HMV8kMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB6hZXPsJRjGwuHgBYOFZIu93rICKoVhdl1lDtHREjltQVYVTRcr9m iVgnooNlP83gUFTIPwr+BMmMSsZzKix+eFwx8Wp2bt8Yji3P1Ft+u5D8NLenJADf 5OGuE60GkqvDEELa1OHGniU+t04Xnf29BJcN8//bn7C+HdMqqCd2SFl/a/vIKr+w nInURQWY8/0dnMImS6znZVRl74MgJogzmoltHAeN9sei7mrYt6lxyVCv96M+ap+C /xHh5skRPNnmaa8wM8U6X3GhF/2BfIPnFKu2YeFnERI3CSXiVtqyT5t+UcxLEciO j88XvWzCtJF40RuM+g6yt/yMVwM6b3Lo -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:13 2025 by rpki-client