$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: EXzBysDiFcmDb0ijlmKrbTMKYKliWhMJTQ44AdzHAX0= Subject key identifier: A5:48:00:2C:5E:E4:A8:F9:ED:43:BA:68:36:AE:14:4F:32:33:5D:FE Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1A85 Signing time: Fri 22 Aug 2025 16:25:33 +0000 Manifest this update: Fri 22 Aug 2025 16:25:32 +0000 Manifest next update: Fri 29 Aug 2025 16:25:32 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: 3BwhiJQvARr4wCIJxA78EgZ4DOJgTSDkktSw1QAZ9Qw=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6799 (0x1a8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Aug 22 16:25:32 2025 GMT Not After : Aug 29 16:25:32 2025 GMT Subject: CN=68a899fc-a795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:b2:36:6a:30:d5:05:c3:ff:53:7d:f5:b4: c7:dc:1f:9a:17:15:23:ba:e8:66:e0:93:17:3c:fd: 7c:78:34:53:21:30:34:7a:a9:44:7b:2a:e3:01:43: f3:bd:d2:93:9f:68:e2:4b:08:e0:d9:b0:35:68:8e: 56:f7:36:57:24:35:ad:34:e7:49:f6:90:2f:a1:6e: 6b:ce:a0:e7:be:54:cb:04:80:7e:44:22:6e:01:05: aa:ac:c1:86:7d:f5:59:dc:6f:c4:d1:f3:51:36:2d: 6a:38:7d:49:c4:b4:ca:d7:b2:e1:f5:cc:d4:5d:33: 20:87:48:88:d4:e4:d1:f3:88:e5:14:17:dd:8b:f2: 1e:8e:3c:ff:28:52:ee:50:b2:e8:ea:21:82:92:65: 5a:22:ce:c3:70:31:cd:64:1a:f8:16:14:6f:9a:a1: 19:a4:93:84:5a:33:e5:cb:f7:18:d0:f7:29:c3:0c: 1f:85:31:6c:0d:fb:2b:64:67:a9:0d:c0:b2:3a:bc: 32:6c:8b:0e:f2:e8:02:c4:8a:de:52:16:44:97:68: 84:94:8b:9e:96:39:18:63:d8:ee:23:fe:5f:c4:18: ae:de:82:72:83:23:6f:42:8d:cd:d7:27:e3:04:23: 8b:20:6e:7c:63:9e:ef:df:53:e0:19:a2:d7:06:71: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:48:00:2C:5E:E4:A8:F9:ED:43:BA:68:36:AE:14:4F:32:33:5D:FE X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0a:42:29:b4:be:70:2d:89:a0:cf:77:d9:c2:99:98:cb:ff: fd:fe:83:6b:60:d6:15:a2:a9:4f:d1:9a:1f:85:1d:bc:4b:2b: 10:a8:72:2e:63:d5:19:f8:d0:39:ec:f4:b1:04:5b:fc:5c:98: 84:74:b5:d9:d3:d9:34:6c:89:66:2d:5d:4a:74:b5:06:63:f8: 92:b6:c7:99:fa:af:3b:31:8e:82:33:f9:83:f5:c0:bd:ad:27: a7:76:f0:da:f5:68:14:8b:04:4b:47:f8:63:08:b9:b0:fb:7e: 21:6f:80:08:e9:36:26:48:e4:a9:cb:b0:42:f3:27:08:92:67: 96:9c:1c:87:1c:0a:0d:02:6b:ca:18:02:2b:03:a9:ac:66:be: 7c:b4:4b:55:80:1d:cf:71:a5:0d:04:26:04:17:6e:28:f5:da: d8:31:22:1c:fd:fd:8d:cd:10:63:06:99:1b:d7:20:2b:f3:28: 2e:08:7c:15:46:88:11:b5:a8:d1:78:67:6a:c3:0a:93:71:b2: d7:b4:c1:0b:df:8a:30:2b:d0:48:ba:6f:3a:9c:f1:45:d4:79: cb:b2:d0:77:33:28:6a:f4:6b:25:90:c2:ff:b5:68:8d:ab:67: 56:c8:c0:50:7f:b7:1f:e0:9e:92:1c:97:3d:6f:32:6a:da:54: 75:a3:63:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwODIyMTYyNTMyWhcNMjUwODI5MTYyNTMyWjAYMRYwFAYD VQQDEw02OGE4OTlmYy1hNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiGyNmow1QXD/1N99bTH3B+aFxUjuuhm4JMXPP18eDRTITA0eqlEeyrjAUPz vdKTn2jiSwjg2bA1aI5W9zZXJDWtNOdJ9pAvoW5rzqDnvlTLBIB+RCJuAQWqrMGG ffVZ3G/E0fNRNi1qOH1JxLTK17Lh9czUXTMgh0iI1OTR84jlFBfdi/Iejjz/KFLu ULLo6iGCkmVaIs7DcDHNZBr4FhRvmqEZpJOEWjPly/cY0PcpwwwfhTFsDfsrZGep DcCyOrwybIsO8ugCxIreUhZEl2iElIueljkYY9juI/5fxBiu3oJygyNvQo3N1yfj BCOLIG58Y57v31PgGaLXBnFjzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVIACxe 5Kj57UO6aDauFE8yM13+MB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiCkIptL5wLYmgz3fZwpmYy//9/oNrYNYVoqlP0ZofhR28SysQqHIu Y9UZ+NA57PSxBFv8XJiEdLXZ09k0bIlmLV1KdLUGY/iStseZ+q87MY6CM/mD9cC9 rSendvDa9WgUiwRLR/hjCLmw+34hb4AI6TYmSOSpy7BC8ycIkmeWnByHHAoNAmvK GAIrA6msZr58tEtVgB3PcaUNBCYEF24o9drYMSIc/f2NzRBjBpkb1yAr8yguCHwV RogRtajReGdqwwqTcbLXtMEL34owK9BIum86nPFF1HnLstB3Myhq9GslkML/tWiN q2dWyMBQf7cf4J6SHJc9bzJq2lR1o2No -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:14 2025 by rpki-client