$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft File: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json) Hash identifier: 85DvS+ZaDQ6NZu7MEYy9C1+GaUSrrFaW3RyHnfenD9Q= Subject key identifier: 37:AA:84:C1:3A:AC:32:55:2A:E9:6E:92:A0:51:39:25:3A:0A:4C:FF Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 Certificate issuer: /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Certificate serial: 0564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft Manifest number: 055F Signing time: Fri 22 Aug 2025 23:32:32 +0000 Manifest this update: Fri 22 Aug 2025 23:32:32 +0000 Manifest next update: Fri 29 Aug 2025 23:32:32 +0000 Files and hashes: 1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: uVqz6mzwmKs4o2Y1wgi6WG5nXV5mq1TBYrOs3lqYLck=) 2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: VL9J48E6mKHF8lb44rgcasmZ+ef6A3tiZtXM0iIEHSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EB0B, serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Validity Not Before: Aug 22 23:32:32 2025 GMT Not After : Aug 29 23:32:32 2025 GMT Subject: CN=68a8fe10-13da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:09:8d:ba:d3:1b:d2:e0:19:0c:29:94:29: 63:82:4e:42:e7:a0:7f:94:9a:25:5b:08:75:52:fa: 85:ca:c1:78:84:32:a8:f2:f9:7f:e5:9f:e9:5f:43: ec:4f:1e:1a:77:3f:96:4c:3b:14:68:06:16:6d:a5: 2e:66:03:96:f6:fb:8f:44:8c:18:26:fb:9c:b1:b8: 7c:f2:fe:36:be:99:fd:c2:f9:c0:30:69:eb:28:11: 63:77:fa:09:24:b0:0b:80:76:4d:2b:af:97:ca:da: f6:e6:9b:73:97:f5:a3:27:db:d8:79:f5:f8:f5:eb: 32:e2:06:5f:71:e2:67:96:91:13:30:78:a2:39:22: bf:41:96:93:4f:d9:c7:61:ba:78:5f:4f:18:0c:83: 96:ce:9b:34:47:09:7b:25:58:09:1c:83:3d:ba:be: db:80:53:d0:c7:8d:d6:f0:a4:4c:9f:4e:e6:b8:de: 6e:09:ef:8c:68:ae:df:2e:41:22:e3:ab:5a:b6:f6: 58:f7:5c:bb:27:d0:89:09:b3:52:44:15:4f:57:39: 4f:08:80:3d:b4:a9:57:84:47:a1:5f:71:53:ca:52: a8:68:c7:37:f7:06:7c:c0:f7:5a:4f:f0:5d:38:58: 24:4c:9c:e0:b3:e1:c9:66:96:fb:d1:49:d6:20:b1: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AA:84:C1:3A:AC:32:55:2A:E9:6E:92:A0:51:39:25:3A:0A:4C:FF X509v3 Authority Key Identifier: keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:80:a8:d5:13:11:a1:ae:22:bc:d6:3f:92:6f:16:27:c4:e0: c3:66:1b:06:8f:d3:37:a5:d4:97:3b:ed:23:9d:6d:27:a2:c7: ae:d3:6c:ee:41:cd:51:8e:21:d8:4f:f4:df:fa:67:32:90:12: e5:dc:ce:4e:55:7e:70:0b:e7:f5:56:a2:0b:30:03:22:82:f8: 1f:c4:ba:07:4a:2b:37:e2:d0:81:f2:7f:db:fb:0b:0c:97:61: eb:fd:23:ee:14:ee:96:28:3b:64:99:d2:c4:f0:c1:49:b7:33: f3:6e:67:aa:b9:74:fd:02:8a:01:b6:c9:38:5d:c2:93:73:1e: 20:c8:a0:5b:e0:87:be:1a:d2:6c:78:de:7f:65:c6:eb:fb:1d: cc:8c:ef:34:ce:60:10:df:b6:30:71:c4:34:96:86:5c:e5:4a: 0c:49:3a:78:71:4f:e8:2f:90:34:82:6b:71:e6:13:11:29:65: b6:6f:26:09:d3:9c:5b:ca:5f:e5:6c:c6:26:20:55:c1:37:ef: ce:39:b3:78:42:d3:22:aa:6f:b3:e6:19:53:77:d1:68:dc:1e: b4:ee:68:57:c0:16:6a:ee:fb:13:8f:9a:55:f7:7f:a2:ac:be: 8f:45:e6:cf:b7:5b:70:38:c2:24:79:f8:18:09:8d:9a:69:50: 0e:ce:4f:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCMEIxMTAvBgNVBAUTKEFFM0ZBNjUzNDk1NTE2NjBERkY0OEM0OTdFODM3OEE2 MzBCOTgzNzYwHhcNMjUwODIyMjMzMjMyWhcNMjUwODI5MjMzMjMyWjAYMRYwFAYD VQQDEw02OGE4ZmUxMC0xM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqoJjbrTG9LgGQwplCljgk5C56B/lJolWwh1UvqFysF4hDKo8vl/5Z/pX0Ps Tx4adz+WTDsUaAYWbaUuZgOW9vuPRIwYJvucsbh88v42vpn9wvnAMGnrKBFjd/oJ JLALgHZNK6+Xytr25ptzl/WjJ9vYefX49esy4gZfceJnlpETMHiiOSK/QZaTT9nH Ybp4X08YDIOWzps0Rwl7JVgJHIM9ur7bgFPQx43W8KRMn07muN5uCe+MaK7fLkEi 46tatvZY91y7J9CJCbNSRBVPVzlPCIA9tKlXhEehX3FTylKoaMc39wZ8wPdaT/Bd OFgkTJzgs+HJZpb70UnWILGwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeqhME6 rDJVKulukqBROSU6Ckz/MB8GA1UdIwQYMBaAFK4/plNJVRZg3/SMSX6DeKYwuYN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUIwQi8zQTRDNDYwNkY5 MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZtRGY5SXhKZm9ONHBqQzVn M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JqLW1VMGxWRm1EZjlJeEpmb040cGpDNWczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUIwQi8zQTRDNDYwNkY5MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZt RGY5SXhKZm9ONHBqQzVnM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAigKjVExGhriK81j+SbxYnxODDZhsGj9M3pdSXO+0jnW0noseu02zu Qc1RjiHYT/Tf+mcykBLl3M5OVX5wC+f1VqILMAMigvgfxLoHSis34tCB8n/b+wsM l2Hr/SPuFO6WKDtkmdLE8MFJtzPzbmequXT9AooBtsk4XcKTcx4gyKBb4Ie+GtJs eN5/Zcbr+x3MjO80zmAQ37YwccQ0loZc5UoMSTp4cU/oL5A0gmtx5hMRKWW2byYJ 05xbyl/lbMYmIFXBN+/OObN4QtMiqm+z5hlTd9Fo3B607mhXwBZq7vsTj5pV93+i rL6PRebPt1twOMIkefgYCY2aaVAOzk+4 -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:48 2025 by rpki-client