$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: k/qFzlEHTvi/KneqM8+lqE5o/UZPbPBWMxJ7sTglUcY= Subject key identifier: A7:07:27:83:4D:6D:98:E3:9C:DD:A3:B0:F6:1F:2D:B3:56:5F:79:65 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: C3 Signing time: Sat 23 Aug 2025 05:57:24 +0000 Manifest this update: Sat 23 Aug 2025 05:57:23 +0000 Manifest next update: Sat 30 Aug 2025 05:57:23 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: 63hOxoBFJCpXS4WQPjaXFc3uwUEe4yH20dCqwCsxdb4=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Aug 23 05:57:23 2025 GMT Not After : Aug 30 05:57:23 2025 GMT Subject: CN=68a95843-6f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:5e:9c:55:60:f4:de:a6:82:04:ea:c3:54: c6:7b:ce:22:13:ab:ff:97:02:bd:f1:7d:9c:d3:60: 7f:81:b4:57:96:6d:5f:12:d4:82:9a:bb:33:0d:5f: b4:8b:ee:07:5a:f7:44:2b:8b:5c:d9:5e:28:a9:67: a4:e3:e8:65:47:c0:10:3d:61:b7:50:63:2e:ca:e5: 5f:fe:79:56:db:f3:a9:07:14:b5:d5:bb:40:d8:55: f9:f8:dd:98:ca:32:1f:c7:31:e8:cc:57:b3:ec:c9: eb:cc:b5:f8:72:94:a1:35:e1:7c:5f:a1:22:5d:ef: 42:8f:3d:40:db:ca:1d:39:e2:4e:70:fa:24:1a:c9: c4:18:61:82:f8:be:ab:ea:91:3a:82:3f:d8:93:2d: 05:4e:3b:f6:20:9c:d4:d6:08:26:29:16:f2:72:bc: a8:33:2e:ad:4b:4c:13:dd:91:53:c0:ec:2f:dd:fe: a6:7b:96:48:f6:f8:c6:b1:7f:ea:ca:3e:0e:74:63: b0:bb:9d:7e:79:ce:1e:c1:1a:95:dc:2f:5d:c0:c1: fa:0c:5b:41:05:7f:0e:2f:7e:46:6d:6b:b1:6a:d5: 17:c4:b7:04:a0:dd:27:30:b3:57:ae:af:57:3d:b6: 59:a5:8d:0c:5e:27:4b:8f:88:d3:93:0a:84:3a:97: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:27:83:4D:6D:98:E3:9C:DD:A3:B0:F6:1F:2D:B3:56:5F:79:65 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4b:fd:87:6e:48:99:c0:b5:b5:d7:8a:05:54:0c:1a:44:7c: 7a:b8:f0:59:2f:3c:d2:3e:f9:40:db:e7:9b:a1:7f:8e:73:77: e6:e5:32:a6:fa:7e:38:86:11:07:bb:0c:b9:fb:73:09:e8:b2: c8:53:65:ef:4b:36:9b:36:b9:c0:b2:45:ce:c5:1a:da:d6:d4: 6f:91:66:04:f6:41:67:d0:39:1e:0f:b1:dd:5c:b3:ea:10:9f: dc:8b:6e:8c:e1:ee:6a:58:48:14:d0:e6:a9:90:fa:f9:f3:43: da:cd:b8:6e:07:2e:b8:6f:69:fb:4c:5d:7d:59:2a:f0:45:ff: 3f:cf:9b:37:55:c3:9c:c1:08:7d:55:ad:af:fe:d4:4a:a9:cb: e0:b8:77:d4:43:24:62:29:19:5d:af:7f:89:df:25:2a:90:b1: a4:e7:6e:d8:4e:b0:fc:c4:3c:be:85:50:32:9b:e0:5f:95:8f: eb:34:ac:92:27:53:7a:4e:e3:d1:a7:ec:49:37:b8:be:ea:04: de:ff:a6:73:68:86:e6:9f:b4:c6:1c:3d:12:34:5c:0f:37:cd: fa:3d:a3:7f:85:9f:e2:ed:25:80:b4:5d:b1:e2:68:20:d9:d0: 83:23:1f:6f:c0:6a:c8:67:ea:e0:13:0b:5b:53:62:75:3c:69: e0:f1:37:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUwODIzMDU1NzIzWhcNMjUwODMwMDU1NzIzWjAYMRYwFAYD VQQDEw02OGE5NTg0My02ZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxVenFVg9N6mggTqw1TGe84iE6v/lwK98X2c02B/gbRXlm1fEtSCmrszDV+0 i+4HWvdEK4tc2V4oqWek4+hlR8AQPWG3UGMuyuVf/nlW2/OpBxS11btA2FX5+N2Y yjIfxzHozFez7MnrzLX4cpShNeF8X6EiXe9Cjz1A28odOeJOcPokGsnEGGGC+L6r 6pE6gj/Yky0FTjv2IJzU1ggmKRbycryoMy6tS0wT3ZFTwOwv3f6me5ZI9vjGsX/q yj4OdGOwu51+ec4ewRqV3C9dwMH6DFtBBX8OL35GbWuxatUXxLcEoN0nMLNXrq9X PbZZpY0MXidLj4jTkwqEOpf9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcHJ4NN bZjjnN2jsPYfLbNWX3llMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIS/2HbkiZwLW114oFVAwaRHx6uPBZLzzSPvlA2+eboX+Oc3fm5TKm +n44hhEHuwy5+3MJ6LLIU2XvSzabNrnAskXOxRra1tRvkWYE9kFn0DkeD7HdXLPq EJ/ci26M4e5qWEgU0OapkPr580PazbhuBy64b2n7TF19WSrwRf8/z5s3VcOcwQh9 Va2v/tRKqcvguHfUQyRiKRldr3+J3yUqkLGk527YTrD8xDy+hVAym+BflY/rNKyS J1N6TuPRp+xJN7i+6gTe/6ZzaIbmn7TGHD0SNFwPN836PaN/hZ/i7SWAtF2x4mgg 2dCDIx9vwGrIZ+rgEwtbU2J1PGng8Tdc -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:33 2025 by rpki-client