$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: 2d7Z/cmrzpwOe8k3/6AJMSBJ4rqaqqlc6KbYvFxYBbA= Subject key identifier: 76:7E:28:F7:A2:91:D5:2E:0E:72:44:AC:D0:50:06:3B:80:85:48:BE Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 1635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 162B Signing time: Fri 22 Aug 2025 16:51:55 +0000 Manifest this update: Fri 22 Aug 2025 16:51:54 +0000 Manifest next update: Fri 29 Aug 2025 16:51:54 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: clodQmF0nEYV4v7mb2hxw5GjlOpOBlb/vciJsnMuxWc=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5685 (0x1635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: Aug 22 16:51:54 2025 GMT Not After : Aug 29 16:51:54 2025 GMT Subject: CN=68a8a02b-f6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:43:32:5a:65:ce:8d:b0:3e:e1:a3:f1:32:b3: a6:c4:88:9a:9b:a1:b5:6b:a8:3a:c5:18:f4:96:ef: e2:88:79:68:5c:06:d5:75:59:14:db:75:b3:1e:53: 5c:6c:0d:e2:c1:8d:a7:38:32:13:bf:48:c3:1f:c2: b4:5f:e7:73:4c:a9:51:a0:a4:3c:ac:78:c1:56:be: 5e:65:d8:9c:ba:f7:70:ef:b4:66:aa:87:91:1d:54: 64:25:fa:d6:0a:79:e3:da:e6:40:b5:b4:94:c7:bb: 2a:00:5f:aa:18:b1:74:67:aa:3b:a6:31:64:10:8d: 73:88:55:e6:e2:29:92:6d:5c:49:69:ea:c9:cb:be: e2:be:f6:81:5e:7a:9b:3f:7d:c1:a3:5a:bb:ba:57: fc:a0:ea:f2:a6:d0:bc:62:93:fc:2d:7e:4d:ad:98: e0:89:78:37:8c:ea:79:ad:c8:6e:ac:b4:5a:4c:6e: 0b:6a:e1:db:83:02:05:9e:51:d2:9e:99:13:8e:f5: 48:0b:96:1e:ea:7a:c3:a7:25:45:1c:88:12:b0:c8: 49:fc:97:5c:16:b6:ed:cf:80:3d:6b:e7:1c:92:bd: 0b:56:f4:ca:af:21:d8:63:2d:1c:49:88:29:b6:1e: 21:2b:52:9e:14:68:3c:80:31:b5:bf:4b:04:bb:78: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7E:28:F7:A2:91:D5:2E:0E:72:44:AC:D0:50:06:3B:80:85:48:BE X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5e:0c:ec:90:67:e9:1e:2f:ae:92:ff:30:a0:f4:90:37:06: ef:a8:c5:eb:45:f3:55:d9:36:2b:27:0a:6d:dd:58:a6:a7:fd: 23:c2:a0:67:c6:3e:86:c0:61:64:5a:02:64:24:ff:92:af:0d: 63:11:7c:93:f1:15:b0:0d:3d:ff:36:dc:b7:fd:37:5b:98:2f: b7:ca:6c:db:23:ba:c6:41:14:0c:7e:ac:d4:eb:cc:a4:31:11: 3f:4f:69:42:87:4c:e6:21:01:b3:78:8b:19:e0:7e:d9:b6:8f: 63:84:6b:1e:17:84:0e:e7:cd:12:88:b8:23:b9:01:2c:4a:8d: ce:46:eb:02:30:8d:56:66:1f:f3:f3:6b:ec:40:aa:e0:df:7d: ba:db:2b:e9:da:94:71:e2:fe:ef:2c:b2:5a:0f:fb:6b:30:7f: 3f:fa:fc:a7:4f:14:63:b2:89:45:0f:1b:77:18:e5:dd:57:2e: f4:65:07:e8:7d:33:96:6a:58:10:da:a3:b7:89:d3:91:66:9d: 0a:8a:c6:8c:0f:66:3e:0a:1d:60:67:fa:0c:c1:74:ea:3b:2a: c5:06:3c:9b:f0:c9:34:a2:7b:23:1e:d5:71:81:1e:ef:cf:e5: ca:af:c6:2c:03:d3:18:57:42:97:6d:24:8e:d3:a2:14:42:86: 29:bf:e6:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUwODIyMTY1MTU0WhcNMjUwODI5MTY1MTU0WjAYMRYwFAYD VQQDEw02OGE4YTAyYi1mNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kMyWmXOjbA+4aPxMrOmxIiam6G1a6g6xRj0lu/iiHloXAbVdVkU23WzHlNc bA3iwY2nODITv0jDH8K0X+dzTKlRoKQ8rHjBVr5eZdicuvdw77RmqoeRHVRkJfrW Cnnj2uZAtbSUx7sqAF+qGLF0Z6o7pjFkEI1ziFXm4imSbVxJaerJy77ivvaBXnqb P33Bo1q7ulf8oOryptC8YpP8LX5NrZjgiXg3jOp5rchurLRaTG4LauHbgwIFnlHS npkTjvVIC5Ye6nrDpyVFHIgSsMhJ/JdcFrbtz4A9a+cckr0LVvTKryHYYy0cSYgp th4hK1KeFGg8gDG1v0sEu3gx7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ+KPei kdUuDnJErNBQBjuAhUi+MB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZXgzskGfpHi+ukv8woPSQNwbvqMXrRfNV2TYrJwpt3Vimp/0jwqBn xj6GwGFkWgJkJP+Srw1jEXyT8RWwDT3/Nty3/TdbmC+3ymzbI7rGQRQMfqzU68yk MRE/T2lCh0zmIQGzeIsZ4H7Zto9jhGseF4QO580SiLgjuQEsSo3ORusCMI1WZh/z 82vsQKrg33262yvp2pRx4v7vLLJaD/trMH8/+vynTxRjsolFDxt3GOXdVy70ZQfo fTOWalgQ2qO3idORZp0KisaMD2Y+Ch1gZ/oMwXTqOyrFBjyb8Mk0onsjHtVxgR7v z+XKr8YsA9MYV0KXbSSO06IUQoYpv+ZY -----END CERTIFICATE-----Generated at Sat Aug 23 21:07:07 2025 by rpki-client