$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json) Hash identifier: zoQ5pyiAk8+1LO8spnNJoi1CzAsco5iysg++ohDIq64= Subject key identifier: BD:AE:C9:E1:2E:F5:C9:80:80:59:72:50:86:94:BC:3E:81:9F:53:2B Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft Manifest number: 0761 Signing time: Fri 22 Aug 2025 21:46:38 +0000 Manifest this update: Fri 22 Aug 2025 21:46:36 +0000 Manifest next update: Fri 29 Aug 2025 21:46:36 +0000 Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: ZURqs2DOuDseZc4muCjyo1Ppv7IdhFu1xDgDHf0MFkM=) 2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: 1nDYvzLxRQLfDg2+9LpFsB+uny5wVx/68LnNdYTQqaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Validity Not Before: Aug 22 21:46:36 2025 GMT Not After : Aug 29 21:46:36 2025 GMT Subject: CN=68a8e53c-4717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:90:6f:81:a3:b6:0b:10:ea:56:75:92:4d: 85:0b:37:c1:ee:1f:f6:8c:e4:7a:bf:2e:93:dc:87: 96:bd:7c:37:9e:93:d7:98:f7:c5:25:9c:57:6b:9d: 96:11:d2:67:91:4b:34:5c:c4:e8:9d:2b:4a:11:ea: 1a:3b:96:a9:df:b1:ef:0a:4c:96:7a:2b:39:f3:80: d9:9a:66:5d:f4:4b:8a:50:38:a9:aa:fc:07:17:e6: c9:7d:98:be:f5:bc:88:43:86:29:cc:3b:74:09:fb: a4:49:83:fd:70:38:2e:0e:7c:cd:90:f5:2a:c7:0d: 7c:6f:2d:64:9e:0d:8c:16:8c:d3:cd:c9:9a:72:57: 28:04:e7:30:1e:14:70:09:ea:6b:65:83:2a:b3:db: ce:b1:f3:51:b7:18:74:77:b4:c2:42:2e:c2:3d:ca: e3:ce:c9:7e:13:89:b8:bb:9c:0d:4e:77:b8:7d:63: e8:bb:67:ce:be:f6:ff:ad:a7:c7:a3:c8:b2:ac:41: f3:95:3f:28:c3:46:4f:87:8d:b4:57:cd:86:97:39: 2e:5a:8e:cc:b9:45:2c:db:c7:6c:b2:1b:04:08:d8: 03:5f:90:37:99:60:6e:c0:17:e8:50:57:02:45:e7: 63:42:94:fa:32:2a:dd:4f:00:1d:1f:83:a6:43:c4: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:C9:E1:2E:F5:C9:80:80:59:72:50:86:94:BC:3E:81:9F:53:2B X509v3 Authority Key Identifier: keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ed:6b:72:53:c6:4b:32:0c:b8:2f:4b:90:dd:6d:5c:76:48: af:56:72:34:d9:cb:49:5f:cf:3b:e5:08:74:a3:b8:ae:8d:5f: f8:77:4f:65:ae:c1:16:b3:ff:0f:fb:c5:09:fb:93:86:0f:a4: eb:c7:9d:b3:d1:8e:c7:a3:39:3e:83:0c:3a:1a:0e:35:1d:51: 9b:30:9b:ef:61:38:7d:af:fe:80:ba:57:a0:ee:c9:f3:9e:c1: 23:be:57:06:b0:bf:72:07:99:7b:da:71:2c:75:92:3c:40:93: eb:32:a9:cd:ae:58:18:f6:18:ec:71:73:9e:ac:31:6d:53:04: d9:29:38:df:de:52:c3:01:28:0a:95:d6:ba:29:ef:c9:52:bc: cf:1d:4c:39:af:82:08:97:4d:be:09:ae:c7:e7:d7:91:4a:d2: cd:c0:1d:41:68:30:31:82:a4:4a:88:06:e1:08:08:0a:e0:da: 69:b2:26:b5:12:f8:8c:33:e9:fb:f1:11:7d:1c:ee:41:bb:11: ea:58:49:08:20:29:af:15:00:52:60:3b:9a:e0:44:09:ba:a4: 3c:f3:39:4d:3b:b5:bd:aa:cf:8c:67:2f:86:9d:e8:9b:79:ad: 55:53:5f:09:df:d8:b4:32:ba:07:8b:2f:d6:2b:53:6b:12:5c: f2:ed:1e:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx QjQ1NzgxMTUwHhcNMjUwODIyMjE0NjM2WhcNMjUwODI5MjE0NjM2WjAYMRYwFAYD VQQDEw02OGE4ZTUzYy00NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ2Qb4GjtgsQ6lZ1kk2FCzfB7h/2jOR6vy6T3IeWvXw3npPXmPfFJZxXa52W EdJnkUs0XMTonStKEeoaO5ap37HvCkyWeis584DZmmZd9EuKUDipqvwHF+bJfZi+ 9byIQ4YpzDt0CfukSYP9cDguDnzNkPUqxw18by1kng2MFozTzcmaclcoBOcwHhRw CeprZYMqs9vOsfNRtxh0d7TCQi7CPcrjzsl+E4m4u5wNTne4fWPou2fOvvb/rafH o8iyrEHzlT8ow0ZPh420V82GlzkuWo7MuUUs28dsshsECNgDX5A3mWBuwBfoUFcC RedjQpT6MirdTwAdH4OmQ8Tj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2uyeEu 9cmAgFlyUIaUvD6Bn1MrMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0 N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr7WtyU8ZLMgy4L0uQ3W1cdkivVnI02ctJX8875Qh0o7iujV/4d09l rsEWs/8P+8UJ+5OGD6Trx52z0Y7Hozk+gww6Gg41HVGbMJvvYTh9r/6Auleg7snz nsEjvlcGsL9yB5l72nEsdZI8QJPrMqnNrlgY9hjscXOerDFtUwTZKTjf3lLDASgK lda6Ke/JUrzPHUw5r4IIl02+Ca7H59eRStLNwB1BaDAxgqRKiAbhCAgK4Nppsia1 EviMM+n78RF9HO5BuxHqWEkIICmvFQBSYDua4EQJuqQ88zlNO7W9qs+MZy+Gneib ea1VU18J39i0MroHiy/WK1NrElzy7R4H -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:54 2025 by rpki-client