$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json) Hash identifier: WbSY5Rt4CVywJXEbMNThtIiR/92EekvQApewOXRJlSY= Subject key identifier: F3:F9:D6:60:E2:1C:2C:6C:F7:FF:19:B4:A8:2E:44:8C:C1:F5:50:4F Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Certificate serial: 20EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft Manifest number: 20E7 Signing time: Fri 22 Aug 2025 15:59:56 +0000 Manifest this update: Fri 22 Aug 2025 15:59:55 +0000 Manifest next update: Fri 29 Aug 2025 15:59:55 +0000 Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: rqsm6WWa/E4dxMWyihB1hKgUkS5/sE7S6l3CloUCZpg=) 2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: KDA9/GHhy0rjdE5GkXBH2Mt48KB9YjSR7eGXIC67yec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8430 (0x20ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Validity Not Before: Aug 22 15:59:55 2025 GMT Not After : Aug 29 15:59:55 2025 GMT Subject: CN=68a893fb-3f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:cd:2d:b5:cb:f0:4a:78:13:e6:71:cc:a2: 82:da:1f:b9:0d:d3:a0:e0:2f:69:26:65:00:bc:1e: f1:9e:52:a6:01:0d:78:ff:fc:b5:d6:48:56:c9:e5: 43:dd:3f:d7:87:7f:7f:6a:b0:9a:b5:8f:2c:cb:f8: 8c:f1:02:97:be:11:c4:e4:51:38:4e:16:84:f9:81: 04:fe:a3:af:bf:dc:d1:93:8b:b1:37:0a:a5:92:47: 3a:73:b7:fa:09:0a:f9:ba:a0:76:fd:c9:94:e9:f2: da:9e:8f:f3:61:2a:81:f9:94:3a:12:5c:19:28:f1: ac:27:82:71:ae:ba:94:e3:1c:c5:d4:30:52:a7:9b: 61:59:41:ca:22:e5:f6:75:e2:8e:a4:a3:7a:c9:81: f5:6f:5c:41:d5:65:70:30:29:13:d2:44:75:47:82: fa:8a:63:cb:6f:99:0c:f6:15:21:1d:3f:7d:ef:60: d1:69:61:16:12:7e:93:9e:22:98:55:63:03:a1:bf: 4f:3c:63:37:0f:24:9f:09:ce:4a:37:e3:ed:8e:62: e6:45:09:09:6a:0e:3f:0d:5d:6c:7c:2a:8c:84:ef: a1:56:c1:01:20:f5:a2:f4:88:c7:42:af:df:27:49: c0:ee:2a:90:cd:94:73:87:83:d0:31:d4:60:05:43: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F9:D6:60:E2:1C:2C:6C:F7:FF:19:B4:A8:2E:44:8C:C1:F5:50:4F X509v3 Authority Key Identifier: keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:95:41:05:a6:60:51:79:90:df:96:6e:41:ca:f1:e9:dc:12: 45:23:91:a3:89:3e:db:14:dc:13:1d:2e:93:a6:6a:f9:7e:fd: 1b:2e:43:ce:60:c8:99:95:67:3f:d2:b1:25:2e:0e:dd:85:e2: da:24:7b:49:3c:58:31:d8:d4:8b:eb:cb:00:e7:2c:46:f8:85: 12:ec:42:3a:0f:7d:c5:dc:2f:ea:26:28:c6:ab:31:52:14:f2: c0:6b:33:f8:43:a4:4c:ed:e4:f4:6f:79:8e:1d:fc:8c:5f:64: c6:d6:71:45:8e:dd:70:82:82:57:da:98:2f:77:4a:d5:08:99: e4:74:b4:9e:47:98:c1:d2:62:7a:d0:36:24:d0:0f:be:f6:2a: 39:c4:29:69:6e:88:de:29:38:cd:55:df:29:b5:a2:bb:b7:68: 03:c4:8d:2b:a7:d4:7d:5d:ca:7f:71:0b:77:f9:95:99:a7:82: cc:f6:00:f8:2c:4d:22:2e:52:ae:ea:e2:c7:31:5f:f2:53:61: 06:74:69:8d:12:c5:ed:e5:7b:e4:0a:f9:2b:b2:47:4e:e0:9e: 64:de:dc:ac:65:83:87:e5:c4:5a:45:e2:56:4c:05:cd:87:bb: ac:70:9b:4f:8a:2e:c9:f8:e8:bc:26:e4:ca:ea:b0:bb:a7:4c: d4:a8:b3:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVFMUUxNENBQjg1 Njk4N0IwNUQwHhcNMjUwODIyMTU1OTU1WhcNMjUwODI5MTU1OTU1WjAYMRYwFAYD VQQDEw02OGE4OTNmYi0zZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKTNLbXL8Ep4E+ZxzKKC2h+5DdOg4C9pJmUAvB7xnlKmAQ14//y11khWyeVD 3T/Xh39/arCatY8sy/iM8QKXvhHE5FE4ThaE+YEE/qOvv9zRk4uxNwqlkkc6c7f6 CQr5uqB2/cmU6fLano/zYSqB+ZQ6ElwZKPGsJ4JxrrqU4xzF1DBSp5thWUHKIuX2 deKOpKN6yYH1b1xB1WVwMCkT0kR1R4L6imPLb5kM9hUhHT9972DRaWEWEn6TniKY VWMDob9PPGM3DySfCc5KN+PtjmLmRQkJag4/DV1sfCqMhO+hVsEBIPWi9IjHQq/f J0nA7iqQzZRzh4PQMdRgBUNmHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPP51mDi HCxs9/8ZtKguRIzB9VBPMB8GA1UdIwQYMBaAFI03iUsJQez9TWsF4eFMq4Vph7Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODkwRC8yMUI3QTgwRUZG RkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQMU5hd1hoNFV5cmhXbUhz RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pUZUpTd2xCN1AxTmF3WGg0VXlyaFdtSHNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODkwRC8yMUI3QTgwRUZGRkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQ MU5hd1hoNFV5cmhXbUhzRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSlUEFpmBReZDflm5ByvHp3BJFI5GjiT7bFNwTHS6Tpmr5fv0bLkPO YMiZlWc/0rElLg7dheLaJHtJPFgx2NSL68sA5yxG+IUS7EI6D33F3C/qJijGqzFS FPLAazP4Q6RM7eT0b3mOHfyMX2TG1nFFjt1wgoJX2pgvd0rVCJnkdLSeR5jB0mJ6 0DYk0A++9io5xClpbojeKTjNVd8ptaK7t2gDxI0rp9R9Xcp/cQt3+ZWZp4LM9gD4 LE0iLlKu6uLHMV/yU2EGdGmNEsXt5XvkCvkrskdO4J5k3tysZYOH5cRaReJWTAXN h7uscJtPii7J+Oi8JuTK6rC7p0zUqLOR -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:55 2025 by rpki-client