$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: e2Ye/jeRxYoAslgzrCKR7hJ/ry6T4znObElxai209kw= Subject key identifier: 7D:32:2F:64:80:68:BE:95:D4:C5:8E:2B:88:41:AE:20:9F:05:B6:91 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 05C5 Signing time: Fri 22 Aug 2025 23:15:52 +0000 Manifest this update: Fri 22 Aug 2025 23:15:52 +0000 Manifest next update: Fri 29 Aug 2025 23:15:52 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: 7ly9aGSNiE2nIndbARSvZdqACbseIxevhTy5MAVk2K4=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Aug 22 23:15:52 2025 GMT Not After : Aug 29 23:15:52 2025 GMT Subject: CN=68a8fa28-aff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:b6:a8:62:a6:01:68:24:3a:bb:f5:5a:20: 92:6a:4f:f0:e3:64:7f:55:d3:cd:1b:08:77:ac:d1: ca:f1:55:00:f1:f4:30:34:48:4c:9c:33:e9:75:a4: 0a:9f:69:25:e2:a5:34:65:e5:66:c0:ae:40:68:d4: 68:72:14:45:21:11:5b:65:c1:75:87:36:81:a9:8b: 6a:16:45:a7:44:e2:0d:71:d8:19:53:76:9c:47:c9: 96:5c:5b:12:95:51:0f:c3:43:23:82:6e:66:2a:8a: c0:ee:0b:f9:ee:fa:eb:b0:6e:4d:d3:a4:65:47:92: a7:fe:e2:61:e0:f7:da:25:22:fb:6b:47:ae:be:bd: 3f:2a:75:68:f7:55:8b:e8:c2:7e:c3:40:1b:f8:ad: d2:36:55:5d:ef:86:ec:ff:59:a9:b7:4a:9d:0c:15: 9d:b0:a2:7e:a7:3d:8a:3a:ce:d1:30:63:89:27:44: cb:bd:48:c1:c6:c8:09:3f:9c:b0:c2:ea:dc:f2:36: 07:f4:89:c4:3d:b5:79:82:bc:ca:7a:78:69:07:57: 1f:97:db:b1:08:e6:ea:aa:7d:2e:c1:7d:aa:3c:8b: b5:26:d2:d8:fa:f2:1b:73:ff:08:89:11:27:67:7c: 17:cc:9f:a4:3e:a1:15:11:4f:9a:6b:c4:98:19:f0: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:32:2F:64:80:68:BE:95:D4:C5:8E:2B:88:41:AE:20:9F:05:B6:91 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:85:7e:c3:c1:63:4d:4d:40:5f:c2:bb:86:11:ae:b7:09:8f: ec:cc:7b:77:db:61:b0:54:a9:b2:dd:50:00:af:aa:33:bc:66: 8b:8a:d7:95:f1:d7:6d:ad:b5:df:a0:2a:f8:71:ed:c4:33:a2: 24:d7:b9:95:8a:4c:25:fe:5a:64:d2:5c:c3:6d:0f:17:0a:05: 0c:fa:dc:79:a2:4d:9a:9e:36:87:87:59:fc:fc:b7:54:25:da: 1d:73:63:63:9e:ec:e8:da:63:9e:e4:17:e8:09:78:d5:b9:9e: 43:f7:69:f4:b1:2a:e6:fb:02:03:40:83:f9:c3:11:69:07:3d: b3:ed:06:b3:84:1b:9a:ae:26:fc:2b:f8:59:96:6a:c8:55:9c: b5:e5:24:79:3f:18:fc:08:e9:ea:78:43:2c:03:e7:2b:66:38: d7:62:b9:e3:ba:f4:37:c4:41:e3:1f:f9:c0:80:57:65:30:ae: 14:1c:34:77:a7:4f:d3:ab:b5:a3:52:00:eb:d1:e7:75:57:10: b9:a9:3a:0a:41:40:ea:68:b2:60:62:39:9b:27:3e:99:e9:cf: 78:07:21:19:17:ae:b2:d5:ad:7a:c4:47:9d:24:e5:f0:50:e4: eb:71:37:0c:ba:8a:6e:33:17:07:39:2a:11:62:2b:d5:62:43: 0d:ac:1d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjUwODIyMjMxNTUyWhcNMjUwODI5MjMxNTUyWjAYMRYwFAYD VQQDEw02OGE4ZmEyOC1hZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiu2qGKmAWgkOrv1WiCSak/w42R/VdPNGwh3rNHK8VUA8fQwNEhMnDPpdaQK n2kl4qU0ZeVmwK5AaNRochRFIRFbZcF1hzaBqYtqFkWnROINcdgZU3acR8mWXFsS lVEPw0Mjgm5mKorA7gv57vrrsG5N06RlR5Kn/uJh4PfaJSL7a0euvr0/KnVo91WL 6MJ+w0Ab+K3SNlVd74bs/1mpt0qdDBWdsKJ+pz2KOs7RMGOJJ0TLvUjBxsgJP5yw wurc8jYH9InEPbV5grzKenhpB1cfl9uxCObqqn0uwX2qPIu1JtLY+vIbc/8IiREn Z3wXzJ+kPqEVEU+aa8SYGfCQaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0yL2SA aL6V1MWOK4hBriCfBbaRMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOhX7DwWNNTUBfwruGEa63CY/szHt322GwVKmy3VAAr6ozvGaLiteV 8ddtrbXfoCr4ce3EM6Ik17mVikwl/lpk0lzDbQ8XCgUM+tx5ok2anjaHh1n8/LdU Jdodc2Njnuzo2mOe5BfoCXjVuZ5D92n0sSrm+wIDQIP5wxFpBz2z7QazhBuarib8 K/hZlmrIVZy15SR5Pxj8COnqeEMsA+crZjjXYrnjuvQ3xEHjH/nAgFdlMK4UHDR3 p0/Tq7WjUgDr0ed1VxC5qToKQUDqaLJgYjmbJz6Z6c94ByEZF66y1a16xEedJOXw UOTrcTcMuopuMxcHOSoRYivVYkMNrB2T -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:06 2025 by rpki-client