$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: ua/7eLFK1c3KLklgfMiiJrv1xL9kBT3pjITa67atDjA= Subject key identifier: C6:A8:FF:E0:C2:DE:4B:35:4C:DC:A5:0C:D4:F1:7C:CE:1C:A3:4E:E4 Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: 010D Signing time: Sat 23 Aug 2025 05:10:37 +0000 Manifest this update: Sat 23 Aug 2025 05:10:36 +0000 Manifest next update: Sat 30 Aug 2025 05:10:36 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: aR2ZYqRQQkCKlP9TRa3FAWnK/Gds3c6yfXXwTpCTQ14=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: dc2h2jrx/pzY7NawNYOcmGXVTRsJnjaghC5xI/+fBaQ=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: M93I+sdFWlIBfdq9LG68VSm5ThgyN+STMXDJdl1g8Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Aug 23 05:10:36 2025 GMT Not After : Aug 30 05:10:36 2025 GMT Subject: CN=68a94d4c-c019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:09:74:4e:d3:39:77:54:7c:21:2e:73:78: 46:5a:5e:e2:89:4b:38:ab:86:94:84:c0:b8:8e:e1: a7:41:bf:3a:57:d9:78:6c:e9:38:e7:d7:87:ca:4f: c0:a9:0c:f6:59:0c:5b:19:de:5e:06:d1:84:98:ae: f3:02:7b:4c:43:cb:c2:40:eb:de:9a:b3:36:c2:17: 61:aa:0d:11:1d:5f:37:0f:57:59:07:7c:fb:b0:11: dc:47:61:6c:ab:db:8b:41:39:5e:6e:5e:21:8d:cc: 06:3c:41:74:22:bc:49:ec:27:25:8b:ac:d8:e2:52: 2a:bc:32:18:03:2d:e2:05:ff:84:f3:28:92:2d:da: 63:32:b7:66:c9:db:55:10:4c:b2:cf:cf:cc:25:e7: a6:d5:e0:c5:bc:67:93:10:21:9b:e5:75:a5:60:82: b7:93:c2:60:3c:3d:fd:b6:aa:34:1b:7f:2d:46:0a: 37:4a:b7:14:42:e5:cb:eb:f4:df:9a:b2:16:c4:56: ed:f4:80:a2:10:8d:a4:55:37:be:0d:43:ae:13:c1: 29:13:f4:68:06:83:08:25:f5:83:51:a5:44:bd:cb: bf:b2:ad:45:0c:05:62:f9:ef:c6:43:09:50:52:3b: d3:bd:3f:4e:e4:4d:cd:ab:b2:9f:8c:4d:2e:c8:63: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A8:FF:E0:C2:DE:4B:35:4C:DC:A5:0C:D4:F1:7C:CE:1C:A3:4E:E4 X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:28:2b:70:9d:7c:4f:1b:23:6c:82:fe:07:5b:d5:97:e0:cd: 55:26:b1:c4:49:f3:88:12:05:81:9e:25:3c:8d:f8:9f:0a:b5: f9:ec:d0:1a:af:fd:60:01:a8:96:41:8d:81:a5:33:4c:90:34: 20:28:a8:b3:08:13:8d:81:ad:65:3d:7d:ce:cd:18:1a:75:ce: ea:a7:1c:6d:f4:83:62:e1:fb:4a:7a:15:ab:53:53:e0:71:71: 48:d6:50:cf:a0:bb:15:dc:5a:c0:7c:2a:1a:2e:94:b4:22:af: a7:ba:ab:1a:1f:ff:b6:19:cd:1d:9b:3f:6c:f4:02:99:64:3f: 0f:ed:2f:3d:33:71:eb:ff:55:fa:99:67:d4:0a:8f:71:a1:06: bc:f9:80:21:a6:89:69:0c:b7:f9:ff:5c:63:13:2d:f5:f7:23: 8d:19:88:30:27:1e:77:13:11:3b:b3:05:46:8b:22:8f:a9:82: c4:4c:7e:f0:98:c9:d9:42:d2:af:05:d3:04:3a:bc:15:e5:cc: c2:4a:e2:0d:97:5a:6c:1d:d3:0f:1c:0d:b9:7c:91:7b:53:cb: 66:d9:7c:95:b4:52:0e:04:7d:18:8f:78:6c:8b:d7:e0:16:8d: b7:6e:3c:4b:e0:ae:98:63:84:11:f7:da:a8:21:61:e6:02:2c: 8a:db:b7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUwODIzMDUxMDM2WhcNMjUwODMwMDUxMDM2WjAYMRYwFAYD VQQDEw02OGE5NGQ0Yy1jMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrIJdE7TOXdUfCEuc3hGWl7iiUs4q4aUhMC4juGnQb86V9l4bOk459eHyk/A qQz2WQxbGd5eBtGEmK7zAntMQ8vCQOvemrM2whdhqg0RHV83D1dZB3z7sBHcR2Fs q9uLQTlebl4hjcwGPEF0IrxJ7Ccli6zY4lIqvDIYAy3iBf+E8yiSLdpjMrdmydtV EEyyz8/MJeem1eDFvGeTECGb5XWlYIK3k8JgPD39tqo0G38tRgo3SrcUQuXL6/Tf mrIWxFbt9ICiEI2kVTe+DUOuE8EpE/RoBoMIJfWDUaVEvcu/sq1FDAVi+e/GQwlQ UjvTvT9O5E3Nq7KfjE0uyGPaBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMao/+DC 3ks1TNylDNTxfM4co07kMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRKCtwnXxPGyNsgv4HW9WX4M1VJrHESfOIEgWBniU8jfifCrX57NAa r/1gAaiWQY2BpTNMkDQgKKizCBONga1lPX3OzRgadc7qpxxt9INi4ftKehWrU1Pg cXFI1lDPoLsV3FrAfCoaLpS0Iq+nuqsaH/+2Gc0dmz9s9AKZZD8P7S89M3Hr/1X6 mWfUCo9xoQa8+YAhpolpDLf5/1xjEy319yONGYgwJx53ExE7swVGiyKPqYLETH7w mMnZQtKvBdMEOrwV5czCSuINl1psHdMPHA25fJF7U8tm2XyVtFIOBH0Yj3hsi9fg Fo23bjxL4K6YY4QR99qoIWHmAiyK27eM -----END CERTIFICATE-----Generated at Sat Aug 23 16:48:50 2025 by rpki-client