$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json) Hash identifier: 3fZBgjzrN9W+oJOtLBJCNEC6RMnw6dpPr45tNEx9hMw= Subject key identifier: 03:F4:75:A1:3C:BF:62:E3:11:98:77:6A:C7:81:2C:FA:7C:FF:8F:D0 Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 2520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft Manifest number: 250A Signing time: Fri 22 Aug 2025 15:48:29 +0000 Manifest this update: Fri 22 Aug 2025 15:48:28 +0000 Manifest next update: Fri 29 Aug 2025 15:48:28 +0000 Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: wPe9r3aiGIyctF8YZ3kkufrL6jPlYqrBK4bVAA00HfA=) 2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: N5Vn59/DXOfi3X7rqOdzQLvOw6/oh8X23e/dgbXYsyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9504 (0x2520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: Aug 22 15:48:28 2025 GMT Not After : Aug 29 15:48:28 2025 GMT Subject: CN=68a8914c-db90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:74:4e:a8:04:3f:2c:62:0e:e4:1b:7c:43: 79:22:63:44:89:77:d0:2a:f0:32:3f:6b:a5:28:a0: 76:51:fd:ad:bf:21:0a:c4:22:08:07:88:e8:a3:e0: f0:85:e2:b1:00:b7:c1:2d:01:57:33:ae:5d:17:2b: 68:75:68:9f:4b:f8:69:11:19:bc:b0:df:3f:9e:2f: f7:f9:58:76:2b:63:d3:b2:60:93:c6:45:09:f4:41: 9e:2c:9a:2f:b2:f0:88:85:69:a9:e4:ad:ff:a9:95: 7c:a6:f8:b8:20:5a:b5:16:63:da:73:40:a8:95:92: 76:b0:0b:7c:2f:5e:d9:c0:1b:ba:fc:3a:5a:25:f1: c5:56:43:16:7b:e9:73:54:c2:c3:24:2a:78:fc:6d: 1c:d7:64:fc:94:6f:68:97:c9:fb:4b:84:d9:ad:45: 73:44:66:e2:e9:c6:bd:73:89:4d:22:23:27:2f:32: 49:62:7b:8a:78:13:dd:e5:34:89:bc:7a:6a:84:a0: 72:08:cc:97:36:7b:98:95:8e:b0:b6:8d:89:aa:b9: 48:06:0b:a3:d2:ee:b7:19:6e:e7:f1:72:26:62:7e: f6:21:2d:6f:16:31:28:fe:05:33:a2:89:0d:b6:c9: de:ee:9f:2d:b5:f5:1b:22:97:4b:20:cc:21:95:36: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F4:75:A1:3C:BF:62:E3:11:98:77:6A:C7:81:2C:FA:7C:FF:8F:D0 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:fb:86:3f:98:94:99:fe:db:d8:65:c5:26:26:50:2b:dd:63: 5b:ad:04:95:26:c6:ea:fe:4f:9a:ac:ae:ec:5d:b3:32:24:a2: 60:33:53:db:8b:19:43:58:14:e2:c1:1a:4c:86:60:08:85:73: 18:d2:ba:0e:a7:1b:77:e5:1a:95:0c:34:49:dc:fc:d1:03:8a: 46:44:fb:64:3a:42:58:f3:2f:2c:8b:5a:7f:20:26:c0:de:90: f2:d8:96:56:48:b9:d1:ef:b7:9c:19:61:26:a6:35:2c:30:3c: 04:20:2f:7f:cb:b5:32:be:2c:ec:c6:27:44:da:bc:7a:9e:79: 4e:fe:60:69:bb:35:56:89:8a:42:db:f6:23:de:d4:41:9e:78: 45:26:95:f1:fe:28:c0:b9:ad:ed:55:e6:96:32:07:97:a2:b8: 1f:42:5b:67:53:b0:f8:14:4f:a0:5b:5d:04:84:68:6a:84:e0: 90:4d:22:7d:b3:f6:6b:80:29:db:7c:39:a7:22:3c:70:68:d9: 0c:ec:a9:d3:cb:d3:b6:0d:30:2a:3c:6f:29:a0:83:9f:ad:06: 58:dc:7a:94:21:3c:c3:6e:26:f6:75:7f:d3:88:b8:46:47:96: f3:e5:43:da:b5:64:d9:d1:81:6f:11:00:c3:49:25:05:42:bf: 9e:3f:04:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjUwODIyMTU0ODI4WhcNMjUwODI5MTU0ODI4WjAYMRYwFAYD VQQDEw02OGE4OTE0Yy1kYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunN0TqgEPyxiDuQbfEN5ImNEiXfQKvAyP2ulKKB2Uf2tvyEKxCIIB4joo+Dw heKxALfBLQFXM65dFytodWifS/hpERm8sN8/ni/3+Vh2K2PTsmCTxkUJ9EGeLJov svCIhWmp5K3/qZV8pvi4IFq1FmPac0ColZJ2sAt8L17ZwBu6/DpaJfHFVkMWe+lz VMLDJCp4/G0c12T8lG9ol8n7S4TZrUVzRGbi6ca9c4lNIiMnLzJJYnuKeBPd5TSJ vHpqhKByCMyXNnuYlY6wto2JqrlIBguj0u63GW7n8XImYn72IS1vFjEo/gUzookN tsne7p8ttfUbIpdLIMwhlTZLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP0daE8 v2LjEZh3aseBLPp8/4/QMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V VkhJRHZRVVdqTU5rblZaTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY+4Y/mJSZ/tvYZcUmJlAr3WNbrQSVJsbq/k+arK7sXbMyJKJgM1Pb ixlDWBTiwRpMhmAIhXMY0roOpxt35RqVDDRJ3PzRA4pGRPtkOkJY8y8si1p/ICbA 3pDy2JZWSLnR77ecGWEmpjUsMDwEIC9/y7UyvizsxidE2rx6nnlO/mBpuzVWiYpC 2/Yj3tRBnnhFJpXx/ijAua3tVeaWMgeXorgfQltnU7D4FE+gW10EhGhqhOCQTSJ9 s/ZrgCnbfDmnIjxwaNkM7KnTy9O2DTAqPG8poIOfrQZY3HqUITzDbib2dX/TiLhG R5bz5UPatWTZ0YFvEQDDSSUFQr+ePwSH -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:29 2025 by rpki-client