$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json) Hash identifier: lOPAkVUEznEPywOkVx5g+yN9qLr2VFAAHv/ybPCpV70= Subject key identifier: D0:F0:2A:94:A1:C9:10:02:77:B1:0D:10:8E:EF:2D:C5:40:0D:34:61 Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Certificate serial: 0571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft Manifest number: 056C Signing time: Fri 22 Aug 2025 23:29:43 +0000 Manifest this update: Fri 22 Aug 2025 23:29:42 +0000 Manifest next update: Fri 29 Aug 2025 23:29:42 +0000 Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: AvjkuJlnIzShvE/scMfrbqn+J1Kh4f2FrkdQ8HUUvOE=) 2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Validity Not Before: Aug 22 23:29:42 2025 GMT Not After : Aug 29 23:29:42 2025 GMT Subject: CN=68a8fd67-8fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:12:f7:62:a7:01:eb:c3:16:fa:57:28:ba: ec:a9:b7:ba:b4:0f:5e:a2:ac:f4:30:cf:06:65:9f: be:95:66:3c:7f:39:e2:6a:02:40:f6:15:09:7f:9e: 4e:aa:c2:61:09:8c:bc:bb:30:d3:ce:69:75:2a:d3: c3:c7:bd:8f:88:8d:df:e0:d5:6d:dd:54:d8:43:4e: 60:50:99:b5:3f:52:b0:12:77:20:fd:a9:08:47:35: 9e:62:50:a5:0b:54:76:b4:d4:6d:3a:da:93:75:6b: b0:81:74:10:d2:65:a3:20:e0:c1:b0:45:d0:06:62: 25:25:1d:5b:cc:0e:c0:9d:4e:6f:0d:c0:8b:82:8e: 58:35:ad:a5:6a:7a:25:33:2a:c5:9e:9d:a9:d7:d0: 11:e0:74:cb:0b:3f:a5:4e:0b:77:55:f4:25:85:1e: 6a:82:40:b5:18:70:02:ed:20:4f:84:a7:cd:06:b9: 2c:20:05:e7:be:b7:1c:c5:e5:80:32:47:14:fa:78: 3b:90:c3:ca:69:84:e0:13:c1:d7:4b:7c:e6:48:be: ca:1b:4e:1a:7f:3b:e0:c1:15:41:ad:39:6a:f3:f8: 1c:dd:c9:80:49:e3:6b:f4:bc:43:5e:36:e8:79:8e: 14:08:ae:36:24:fd:f6:5d:15:01:18:72:bc:36:71: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F0:2A:94:A1:C9:10:02:77:B1:0D:10:8E:EF:2D:C5:40:0D:34:61 X509v3 Authority Key Identifier: keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:be:9f:ff:e8:d5:72:06:83:d3:d0:65:3d:ea:cc:21:9c:5c: 96:86:8a:97:fd:14:63:32:9f:35:8a:4a:75:e0:a0:8c:97:b7: 72:9b:f1:84:9b:91:48:e5:f9:6a:3f:d2:e0:87:4e:75:83:c8: fc:3c:33:00:38:15:7e:ad:fa:d2:a3:16:b1:fb:c0:53:75:b8: 98:90:20:0d:19:c2:4f:83:1d:19:6a:6f:76:d9:42:78:45:ac: 8b:e0:99:64:29:e9:f2:58:67:4a:16:72:1f:0d:26:25:1c:a0: a8:8b:17:ab:ef:43:cf:b6:11:cd:36:75:2f:5b:73:0a:d8:36: 44:20:1a:ca:4d:54:d7:dc:8c:8b:8b:0c:64:e1:b3:c0:cb:e5: df:0a:3b:ba:34:a0:98:1e:dc:42:fc:fe:a7:72:08:3c:ad:ef: ba:e6:03:6b:61:b8:ec:1d:19:e7:62:e7:53:2c:77:55:3f:e7: 96:e6:47:3b:33:8e:af:64:5a:b0:8c:70:79:b9:fc:e6:38:26: 01:83:03:3b:77:69:a6:6d:34:71:6e:43:2f:0e:62:ce:7e:db: 23:86:4d:21:61:7f:79:d9:2d:d5:9e:0a:5e:c3:92:19:88:de: 66:42:fd:00:b5:ed:88:4c:93:29:19:81:98:c8:98:fe:9f:9c: 1b:b4:19:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC MDY4MzQ0NjAwHhcNMjUwODIyMjMyOTQyWhcNMjUwODI5MjMyOTQyWjAYMRYwFAYD VQQDEw02OGE4ZmQ2Ny04ZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSQS92KnAevDFvpXKLrsqbe6tA9eoqz0MM8GZZ++lWY8fzniagJA9hUJf55O qsJhCYy8uzDTzml1KtPDx72PiI3f4NVt3VTYQ05gUJm1P1KwEncg/akIRzWeYlCl C1R2tNRtOtqTdWuwgXQQ0mWjIODBsEXQBmIlJR1bzA7AnU5vDcCLgo5YNa2lanol MyrFnp2p19AR4HTLCz+lTgt3VfQlhR5qgkC1GHAC7SBPhKfNBrksIAXnvrccxeWA MkcU+ng7kMPKaYTgE8HXS3zmSL7KG04afzvgwRVBrTlq8/gc3cmASeNr9LxDXjbo eY4UCK42JP32XRUBGHK8NnFWAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDwKpSh yRACd7ENEI7vLcVADTRhMB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5 Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlvp//6NVyBoPT0GU96swhnFyWhoqX/RRjMp81ikp14KCMl7dym/GE m5FI5flqP9Lgh051g8j8PDMAOBV+rfrSoxax+8BTdbiYkCANGcJPgx0Zam922UJ4 RayL4JlkKenyWGdKFnIfDSYlHKCoixer70PPthHNNnUvW3MK2DZEIBrKTVTX3IyL iwxk4bPAy+XfCju6NKCYHtxC/P6ncgg8re+65gNrYbjsHRnnYudTLHdVP+eW5kc7 M46vZFqwjHB5ufzmOCYBgwM7d2mmbTRxbkMvDmLOftsjhk0hYX952S3Vngpew5IZ iN5mQv0Ate2ITJMpGYGYyJj+n5wbtBkD -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:41 2025 by rpki-client