$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json) Hash identifier: QdH3Mi9wjgFaTgNYmwKS4AXnDroqUqwXD9sRGHVvNpY= Subject key identifier: 3F:E3:02:7E:2D:87:18:EE:C6:72:EE:F4:FA:C2:10:E7:3C:B1:97:33 Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 Certificate issuer: /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft Manifest number: 012F Signing time: Sat 23 Aug 2025 04:45:31 +0000 Manifest this update: Sat 23 Aug 2025 04:45:31 +0000 Manifest next update: Sat 30 Aug 2025 04:45:31 +0000 Files and hashes: 1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: ukTtX1hP7zZQODLldrMFVPFmsuB0YY56mM2Y67Vpn3k=) 2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: Dufn2bl2x79yMqHJgaUJAzhvDE7hxEwAGg5UyaJazhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Validity Not Before: Aug 23 04:45:31 2025 GMT Not After : Aug 30 04:45:31 2025 GMT Subject: CN=68a9476b-9f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:ec:08:56:6e:3a:e3:3e:9c:58:88:8a:85: bd:fa:fa:fe:bc:df:1a:cd:cc:80:85:04:09:3f:c7: 26:9e:fd:0d:83:89:54:d2:2d:72:89:ce:17:fb:a7: 23:63:70:8e:44:c4:49:55:59:a6:c7:92:e6:b7:80: 40:99:54:07:d0:19:88:a6:4f:ca:6a:4e:41:80:1e: 05:53:c9:0f:de:06:d5:bb:da:31:4e:be:d4:c4:c7: 42:6f:f2:a4:f8:33:b7:23:40:e7:1b:58:97:cf:b5: 51:4a:f2:30:00:c0:ed:c0:89:f9:d6:c0:3b:9d:2b: 25:4f:09:d8:09:22:70:ad:cc:e6:85:3e:00:f1:48: c0:c2:ba:8b:43:d0:c0:37:b5:8d:16:7d:77:42:25: 12:26:e0:eb:7a:a5:ce:56:2a:aa:3b:6c:27:18:1a: 92:d6:2a:89:ad:1f:e2:96:9c:6b:f3:73:7e:f3:ea: fd:b6:b8:05:c2:95:78:6b:cd:3c:cf:98:59:02:09: 83:5a:18:9c:7b:79:8f:a5:4d:3d:27:4a:06:8b:6d: 69:69:c7:9c:58:83:aa:1f:3b:28:37:c5:df:d6:61: c6:98:03:ec:2d:23:ef:26:f9:7e:f8:3b:3a:f7:95: 21:70:ab:a7:dc:0b:a0:22:b8:fc:e6:56:d7:8a:e9: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:02:7E:2D:87:18:EE:C6:72:EE:F4:FA:C2:10:E7:3C:B1:97:33 X509v3 Authority Key Identifier: keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7b:af:8b:21:f6:a0:2b:a3:ba:47:ec:69:ed:bf:c5:cc:47: 8c:2a:22:95:36:fa:c2:8f:4f:91:01:23:76:7d:d1:b3:46:df: dc:45:88:59:ca:9d:8a:6f:9a:a1:39:43:ab:b4:fe:4d:d0:a4: 4a:49:5e:b6:54:68:3d:0e:c0:e1:18:6c:ad:4c:e0:95:d6:16: 9c:d1:22:25:0d:a1:52:54:2f:26:71:b6:8f:df:e1:a7:0e:ce: 95:db:db:85:d0:70:c5:d7:f8:0d:16:44:b7:53:99:32:99:6c: 0d:87:8e:6a:63:64:77:87:c2:c6:b2:c1:fd:f1:8d:e9:94:0f: fa:ad:ed:2d:de:01:5b:a8:c7:15:a9:ba:aa:4a:8a:5b:31:ba: 94:25:48:e2:4c:8d:36:06:27:41:1b:29:32:7f:e5:d1:83:0e: 2c:d8:6d:11:ab:59:87:73:bb:1a:c5:d3:38:66:c5:99:a1:1b: e5:46:7f:18:c5:75:43:1e:20:c5:f0:74:e0:0e:86:88:2e:06: 43:57:31:b0:78:81:99:db:00:50:8e:1b:c4:68:c0:47:e4:bb: 3a:86:65:8a:f3:b4:13:bc:ea:ee:21:b2:6c:6f:26:02:3a:28: 8f:79:3a:e1:a3:4f:b4:bf:22:77:a8:7e:18:61:a6:2c:99:de: a4:9e:a2:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDhENEJGNzlBNDE5RUVDMEZBNTMzRTVGQ0E1MEZGMzcy QTMzQ0IzOTAwHhcNMjUwODIzMDQ0NTMxWhcNMjUwODMwMDQ0NTMxWjAYMRYwFAYD VQQDEw02OGE5NDc2Yi05ZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ELsCFZuOuM+nFiIioW9+vr+vN8azcyAhQQJP8cmnv0Ng4lU0i1yic4X+6cj Y3CORMRJVVmmx5Lmt4BAmVQH0BmIpk/Kak5BgB4FU8kP3gbVu9oxTr7UxMdCb/Kk +DO3I0DnG1iXz7VRSvIwAMDtwIn51sA7nSslTwnYCSJwrczmhT4A8UjAwrqLQ9DA N7WNFn13QiUSJuDreqXOViqqO2wnGBqS1iqJrR/ilpxr83N+8+r9trgFwpV4a808 z5hZAgmDWhice3mPpU09J0oGi21pacecWIOqHzsoN8Xf1mHGmAPsLSPvJvl++Ds6 95UhcKun3AugIrj85lbXiuktJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/jAn4t hxjuxnLu9PrCEOc8sZczMB8GA1UdIwQYMBaAFI1L95pBnuwPpTPl/KUP83KjPLOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9DMzIwQzIyNkI1 RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdBLWxNLVg4cFFfemNxTThz NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVdjNta0dlN0EtbE0tWDhwUV96Y3FNOHM1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9DMzIwQzIyNkI1RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdB LWxNLVg4cFFfemNxTThzNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGe6+LIfagK6O6R+xp7b/FzEeMKiKVNvrCj0+RASN2fdGzRt/cRYhZ yp2Kb5qhOUOrtP5N0KRKSV62VGg9DsDhGGytTOCV1hac0SIlDaFSVC8mcbaP3+Gn Ds6V29uF0HDF1/gNFkS3U5kymWwNh45qY2R3h8LGssH98Y3plA/6re0t3gFbqMcV qbqqSopbMbqUJUjiTI02BidBGykyf+XRgw4s2G0Rq1mHc7saxdM4ZsWZoRvlRn8Y xXVDHiDF8HTgDoaILgZDVzGweIGZ2wBQjhvEaMBH5Ls6hmWK87QTvOruIbJsbyYC OiiPeTrho0+0vyJ3qH4YYaYsmd6knqKU -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:46 2025 by rpki-client