$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: fgpROP2rEqswHa4EXzfoShJKdaPS0QlakiqB2gJ/6p4= Subject key identifier: 03:E1:98:6E:15:A3:2D:AE:6D:D4:8A:2C:12:0C:2A:6F:F8:FC:C0:0A Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 67 Signing time: Sat 23 Aug 2025 07:13:33 +0000 Manifest this update: Sat 23 Aug 2025 07:13:32 +0000 Manifest next update: Sat 30 Aug 2025 07:13:32 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: dpSI6Vfoa9uu02w6mPz3ZMmzUaTP3QG8+kZZJGAaYxI=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Aug 23 07:13:32 2025 GMT Not After : Aug 30 07:13:32 2025 GMT Subject: CN=68a96a1d-b1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4a:66:52:d3:e9:39:85:ad:e9:87:91:69:1b: 97:74:16:8d:40:52:f6:90:53:77:1d:51:6a:a0:04: 91:be:e2:68:c3:e7:4f:cd:b3:eb:f2:c2:1e:53:a4: 4b:66:ca:5d:84:ed:a8:c3:25:ed:64:eb:c2:29:0c: de:8a:a2:6a:45:ce:72:6a:69:a2:e0:e9:50:c2:53: ac:95:51:e3:bb:43:37:09:ae:9b:a2:3d:8a:01:c6: 49:00:0e:79:2b:d7:57:70:c3:db:9b:ed:55:9c:b8: 06:e7:47:78:55:83:c6:fb:54:54:d7:73:f9:85:14: d9:12:bd:3c:8c:3c:e6:95:94:f3:9d:d9:e2:fd:29: 3d:0b:73:2c:6b:56:d2:a1:75:70:8c:f1:c5:c1:40: da:af:15:4e:6b:5a:a2:4b:94:77:42:8d:0d:5a:8e: 58:ca:8e:44:e0:ed:66:2d:ca:ad:55:41:2e:b8:a3: a4:8d:90:4a:39:cf:3c:e0:b6:dc:88:4c:76:71:fb: 58:b2:3f:00:73:ea:1c:41:fe:72:7f:5f:bd:a6:55: 32:ac:cc:a7:fa:e9:eb:54:e4:d2:1c:c5:b2:71:bb: 10:f8:66:e3:fe:1a:1a:40:08:e5:22:3a:05:16:99: 17:64:2d:7e:02:d0:af:7d:33:5d:13:04:97:1a:00: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E1:98:6E:15:A3:2D:AE:6D:D4:8A:2C:12:0C:2A:6F:F8:FC:C0:0A X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e3:48:f5:8e:14:3c:2c:00:fe:81:b6:81:a2:eb:a4:ba:82: 56:86:5a:a5:5c:01:fe:6e:a3:13:03:c3:fa:7b:12:9a:1e:8b: af:da:18:2d:ab:63:c2:86:f2:df:c3:72:86:6d:ae:5d:0a:d7: d2:90:02:98:ae:db:80:61:35:12:54:b2:83:0b:d4:58:af:66: d5:49:5b:26:d0:5c:ed:74:0c:f0:f3:ec:1e:d3:b0:5a:0e:45: b0:a3:25:45:1f:b1:2f:50:71:14:ea:9a:59:d5:29:29:6f:79: 99:26:73:02:93:fe:af:98:b4:73:2f:18:8e:1b:14:e9:57:90: cc:f4:28:22:17:60:3a:64:5e:29:81:7d:2c:95:b9:e0:ad:30: 98:ad:73:b7:7f:51:42:d3:98:33:c8:42:53:4c:10:7f:c0:54: 90:62:41:ce:12:3c:6d:80:40:30:15:59:f4:cd:86:ff:3d:a0: 28:72:6e:5e:32:43:00:34:73:5f:f2:eb:f6:28:71:7d:06:6b: 4c:0d:b1:33:9b:c0:df:18:bf:39:fc:15:d1:1a:5a:a3:58:f3: 87:df:73:f9:e4:db:d3:a8:39:05:36:c3:d5:0f:08:3d:3c:31: 47:bd:fa:d0:91:ea:bf:45:68:ba:f4:f9:90:75:ca:21:47:6c: 5e:5d:17:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTA4MjMwNzEzMzJaFw0yNTA4MzAwNzEzMzJaMBgxFjAUBgNV BAMTDTY4YTk2YTFkLWIxYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnSmZS0+k5ha3ph5FpG5d0Fo1AUvaQU3cdUWqgBJG+4mjD50/Ns+vywh5TpEtm yl2E7ajDJe1k68IpDN6KompFznJqaaLg6VDCU6yVUeO7QzcJrpuiPYoBxkkADnkr 11dww9ub7VWcuAbnR3hVg8b7VFTXc/mFFNkSvTyMPOaVlPOd2eL9KT0LcyxrVtKh dXCM8cXBQNqvFU5rWqJLlHdCjQ1ajljKjkTg7WYtyq1VQS64o6SNkEo5zzzgttyI THZx+1iyPwBz6hxB/nJ/X72mVTKszKf66etU5NIcxbJxuxD4ZuP+GhpACOUiOgUW mRdkLX4C0K99M10TBJcaAMbTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA+GYbhWj La5t1IosEgwqb/j8wAowHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHDjSPWOFDwsAP6BtoGi66S6glaGWqVcAf5uoxMDw/p7Epoei6/aGC2r Y8KG8t/DcoZtrl0K19KQApiu24BhNRJUsoML1FivZtVJWybQXO10DPDz7B7TsFoO RbCjJUUfsS9QcRTqmlnVKSlveZkmcwKT/q+YtHMvGI4bFOlXkMz0KCIXYDpkXimB fSyVueCtMJitc7d/UULTmDPIQlNMEH/AVJBiQc4SPG2AQDAVWfTNhv89oChybl4y QwA0c1/y6/YocX0Ga0wNsTObwN8Yvzn8FdEaWqNY84ffc/nk29OoOQU2w9UPCD08 MUe9+tCR6r9FaLr0+ZB1yiFHbF5dF0c= -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:46 2025 by rpki-client