$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: QT6HUXXOWZ2NHXt6j2pR8TnQ/8rIyVn6JO420b4jOtw= Subject key identifier: 69:31:8F:D4:7F:31:B5:13:29:7C:05:14:32:7C:E3:6A:E8:20:3F:F3 Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: F5 Signing time: Sat 23 Aug 2025 05:32:16 +0000 Manifest this update: Sat 23 Aug 2025 05:32:16 +0000 Manifest next update: Sat 30 Aug 2025 05:32:16 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: NuMhujLgsExypr7cBpIcUIoGNgsEvoVsWH3kEa/cjkM=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: Aug 23 05:32:16 2025 GMT Not After : Aug 30 05:32:16 2025 GMT Subject: CN=68a95260-aa60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:17:aa:8c:79:f2:80:37:6c:59:76:25:ce: 39:36:4c:f4:30:bd:42:38:5d:87:5d:6f:ae:7a:b6: 15:03:73:77:1b:7b:8a:ed:60:d9:17:25:34:99:5d: b8:9b:a4:d0:03:ed:28:a7:c4:49:96:1e:8b:5c:40: 0d:87:18:7d:28:70:78:16:7d:78:e5:fb:cf:62:70: 98:0c:6f:70:43:5f:1f:0b:91:75:56:da:12:9e:ed: f3:ce:e5:c8:e6:8c:f5:8a:fd:9c:d7:9f:f3:f5:dc: e6:3c:5e:f8:ff:a6:9d:b5:82:03:3a:ef:05:fa:dd: 52:91:dc:d4:f7:d6:77:c7:44:b3:5f:c0:2e:ab:ed: 4b:72:16:26:e7:cc:15:6f:df:f3:cc:15:a4:05:54: ae:2c:24:56:24:cc:97:45:b0:ce:d0:5e:e0:8b:7d: dc:a3:af:33:3e:e9:e9:f8:51:49:a3:c4:03:52:87: d9:3c:0c:6c:e1:97:16:46:f8:18:9c:76:bc:a3:48: 60:cf:16:cd:55:74:a5:5a:83:e4:9b:b7:6e:47:26: 7b:ba:f3:c9:9b:3f:86:25:37:bd:c0:85:ba:f5:2d: 7d:9a:c5:37:79:55:b0:ce:13:d6:b8:84:19:5d:ec: bd:bd:ef:30:53:a6:bb:05:e4:1b:ba:85:04:5f:e7: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:8F:D4:7F:31:B5:13:29:7C:05:14:32:7C:E3:6A:E8:20:3F:F3 X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:bc:90:02:10:10:7a:43:66:7d:34:af:aa:97:8a:4d:88:05: 74:ab:6d:0e:16:64:d9:e9:72:32:85:42:63:48:ef:15:51:45: a9:38:0c:b9:55:2d:42:c1:5d:ce:10:06:79:f9:67:0a:ae:7c: 2b:6e:95:8a:1d:fa:01:ef:ac:58:47:80:87:a6:e4:4b:35:e0: 7f:14:b8:25:98:7a:ac:f4:4d:48:ae:97:fb:b2:b4:da:bd:c1: ce:73:c5:fa:f1:ad:d1:2d:99:3a:82:f5:4a:f6:b3:be:b4:07: 7e:00:49:70:ab:6d:ea:fb:38:19:57:5b:ec:85:30:8e:10:15: 50:b7:6b:df:1d:68:a3:a3:62:11:49:ba:1e:5b:be:0d:57:c2: 41:25:71:aa:aa:93:60:9a:f6:6f:14:e0:6b:43:02:86:a0:87: c2:37:a7:a3:17:d0:8f:59:6e:f6:cc:1f:27:d5:71:8a:53:fc: d8:b4:16:7c:4e:11:53:c0:72:c2:a8:05:1f:ce:e0:71:a3:af: 9c:9d:96:c6:97:a5:4a:7e:c1:fc:4a:26:07:58:a5:ad:3c:0e: 59:c4:af:2a:a3:c5:03:71:01:6e:5d:b6:5e:c7:3e:f8:b6:a9: 7c:3f:96:49:2e:d7:a6:e9:c8:df:b7:26:52:14:fe:45:12:e2: 4e:74:57:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUwODIzMDUzMjE2WhcNMjUwODMwMDUzMjE2WjAYMRYwFAYD VQQDEw02OGE5NTI2MC1hYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmIXqox58oA3bFl2Jc45Nkz0ML1COF2HXW+uerYVA3N3G3uK7WDZFyU0mV24 m6TQA+0op8RJlh6LXEANhxh9KHB4Fn145fvPYnCYDG9wQ18fC5F1VtoSnu3zzuXI 5oz1iv2c15/z9dzmPF74/6adtYIDOu8F+t1SkdzU99Z3x0SzX8Auq+1LchYm58wV b9/zzBWkBVSuLCRWJMyXRbDO0F7gi33co68zPunp+FFJo8QDUofZPAxs4ZcWRvgY nHa8o0hgzxbNVXSlWoPkm7duRyZ7uvPJmz+GJTe9wIW69S19msU3eVWwzhPWuIQZ Xey9ve8wU6a7BeQbuoUEX+ef0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkxj9R/ MbUTKXwFFDJ842roID/zMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWvJACEBB6Q2Z9NK+ql4pNiAV0q20OFmTZ6XIyhUJjSO8VUUWpOAy5 VS1CwV3OEAZ5+WcKrnwrbpWKHfoB76xYR4CHpuRLNeB/FLglmHqs9E1Irpf7srTa vcHOc8X68a3RLZk6gvVK9rO+tAd+AElwq23q+zgZV1vshTCOEBVQt2vfHWijo2IR SboeW74NV8JBJXGqqpNgmvZvFOBrQwKGoIfCN6ejF9CPWW72zB8n1XGKU/zYtBZ8 ThFTwHLCqAUfzuBxo6+cnZbGl6VKfsH8SiYHWKWtPA5ZxK8qo8UDcQFuXbZexz74 tql8P5ZJLtem6cjftyZSFP5FEuJOdFcK -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:50 2025 by rpki-client