$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: WiJF8PIA6pH/nAcMoiLZupdGLsfiLj6f3UuZ0ztVSeA= Subject key identifier: 65:C0:0F:6D:77:D5:BD:77:9C:95:B2:DD:B8:CA:D4:DB:CD:42:19:C0 Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: B4 Signing time: Sat 23 Aug 2025 06:19:58 +0000 Manifest this update: Sat 23 Aug 2025 06:19:58 +0000 Manifest next update: Sat 30 Aug 2025 06:19:58 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: +t/GF4h84viodgTTBZqr3+b0ghyerS+yGk549GvuJoI=) 2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: sqy/WdKkX/I9+eeWKmyiO40gweC8VofbqWaj5A5W8ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Aug 23 06:19:58 2025 GMT Not After : Aug 30 06:19:58 2025 GMT Subject: CN=68a95d8e-8fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:3a:39:49:24:33:d9:f7:d4:b5:b7:98:37: bf:e6:98:76:bc:53:82:f7:3c:a0:76:f2:89:3b:ab: 53:13:38:a8:d6:1f:14:2e:8e:7d:af:53:8f:21:dd: 20:ba:4b:d7:bd:8f:e7:73:5e:25:eb:7b:17:93:e9: 37:ca:7f:15:01:f7:d7:ec:88:ee:42:21:9a:52:9c: 5d:13:24:91:58:45:72:52:1e:5a:ab:79:16:73:78: 10:80:74:a9:85:a9:a3:4c:ad:26:9b:f3:bb:09:41: f4:75:b6:72:a9:ae:34:ae:08:e0:9f:4f:14:3a:04: c8:06:b0:37:15:32:53:b5:fd:06:9e:7d:3b:b6:a7: d3:dd:c5:bc:a4:82:ae:be:af:12:a4:88:76:26:57: c2:31:9e:17:6f:91:75:b8:cb:ce:73:fb:01:c3:f3: d2:8c:a9:73:2c:8f:b5:1d:3e:a2:85:f0:bb:a6:11: 41:2d:73:dd:6d:cd:a8:92:0a:25:84:f0:fa:3d:19: 16:66:72:41:d8:df:bf:da:0c:16:94:1d:bb:3e:15: 43:b7:50:b0:88:a6:e2:9e:4b:93:2a:1d:4d:ff:f1: 0c:f4:44:e9:26:0d:a7:1a:43:cc:0a:5b:98:ec:91: 27:8d:51:71:39:f1:ef:89:49:0c:de:4d:40:dd:b1: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C0:0F:6D:77:D5:BD:77:9C:95:B2:DD:B8:CA:D4:DB:CD:42:19:C0 X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7a:77:a5:0e:c4:a1:61:03:24:9a:f4:93:11:bc:04:e5:75: 92:30:36:31:73:29:f4:69:a7:d5:ce:ed:89:e9:40:bd:cd:72: 11:97:d7:5b:b7:01:2b:11:69:97:05:23:77:55:1d:87:35:45: 83:b8:91:7e:be:e3:07:b1:ee:8b:f5:41:e6:ac:8d:cb:aa:eb: 15:8e:55:1e:18:42:28:8c:14:a8:09:8f:48:eb:95:27:58:c2: f9:92:ec:fc:d6:37:1a:44:28:a8:b1:86:f6:3c:12:f1:81:08: 54:40:05:50:3f:72:b1:54:ea:6b:e2:ef:60:1b:1f:b1:6e:24: e4:01:73:21:19:77:0c:5e:34:09:aa:35:f9:7d:77:5d:b7:98: 60:69:44:c1:ec:ca:c1:ed:25:c6:c2:d6:3d:5a:97:a5:20:f3: c2:80:c6:00:d5:a8:a1:ea:14:c9:c5:6f:33:21:0a:44:f1:f6: e2:2a:13:cd:a7:8d:a9:c5:b4:65:34:0e:7d:98:9d:c0:a1:35: c2:b0:5b:7b:27:1b:4d:1b:b6:50:ae:e0:ee:46:df:da:e5:54: 19:c8:73:41:6a:1a:ba:63:16:f9:d9:29:94:dc:68:a6:90:02: 4b:66:1d:ab:a1:a5:88:ed:b8:f7:2f:b4:1e:40:89:82:ee:7f: db:63:f3:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjUwODIzMDYxOTU4WhcNMjUwODMwMDYxOTU4WjAYMRYwFAYD VQQDEw02OGE5NWQ4ZS04ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO86OUkkM9n31LW3mDe/5ph2vFOC9zygdvKJO6tTEzio1h8ULo59r1OPId0g ukvXvY/nc14l63sXk+k3yn8VAffX7IjuQiGaUpxdEySRWEVyUh5aq3kWc3gQgHSp hamjTK0mm/O7CUH0dbZyqa40rgjgn08UOgTIBrA3FTJTtf0Gnn07tqfT3cW8pIKu vq8SpIh2JlfCMZ4Xb5F1uMvOc/sBw/PSjKlzLI+1HT6ihfC7phFBLXPdbc2okgol hPD6PRkWZnJB2N+/2gwWlB27PhVDt1CwiKbinkuTKh1N//EM9ETpJg2nGkPMCluY 7JEnjVFxOfHviUkM3k1A3bGp+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXAD213 1b13nJWy3bjK1NvNQhnAMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4enelDsShYQMkmvSTEbwE5XWSMDYxcyn0aafVzu2J6UC9zXIRl9db twErEWmXBSN3VR2HNUWDuJF+vuMHse6L9UHmrI3LqusVjlUeGEIojBSoCY9I65Un WML5kuz81jcaRCiosYb2PBLxgQhUQAVQP3KxVOpr4u9gGx+xbiTkAXMhGXcMXjQJ qjX5fXddt5hgaUTB7MrB7SXGwtY9WpelIPPCgMYA1aih6hTJxW8zIQpE8fbiKhPN p42pxbRlNA59mJ3AoTXCsFt7JxtNG7ZQruDuRt/a5VQZyHNBahq6Yxb52SmU3Gim kAJLZh2roaWI7bj3L7QeQImC7n/bY/M6 -----END CERTIFICATE-----Generated at Sat Aug 23 18:51:52 2025 by rpki-client