$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft File: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json) Hash identifier: YTzET8CHWOIq/Rmguwgik0Gkm34TXrpF20fIwWmBX1Y= Subject key identifier: 98:BF:06:BF:3B:2C:C5:4B:01:D6:2C:FE:DE:A6:E9:C9:84:28:E5:A1 Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft Manifest number: 04DD Signing time: Sat 23 Aug 2025 00:02:09 +0000 Manifest this update: Sat 23 Aug 2025 00:02:08 +0000 Manifest next update: Sat 30 Aug 2025 00:02:08 +0000 Files and hashes: 1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: jKNVUAimuyhbDdLiU/huqdZMcXrokChUX4eTecoeiOY=) 2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Validity Not Before: Aug 23 00:02:08 2025 GMT Not After : Aug 30 00:02:08 2025 GMT Subject: CN=68a90500-0c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:4e:94:d8:1a:61:e1:27:81:a2:0e:1a:94: 27:c3:65:30:e9:cf:c9:51:70:3c:8c:05:f2:0c:87: 51:60:3f:17:af:29:c4:51:15:d1:94:02:f9:a0:f1: 06:d3:5f:49:f1:af:fb:a2:4d:9c:ba:c3:75:c5:17: 8a:57:9d:2e:91:bb:de:87:37:65:84:04:1b:98:fb: b3:29:8c:4e:ae:89:21:15:6b:e4:f5:99:18:66:62: 41:3a:68:79:83:1c:c7:d1:3c:ab:db:d7:59:87:74: e3:6c:10:c2:df:4c:66:9a:99:5c:de:da:95:6d:4b: b1:4d:9c:db:cc:8b:6d:ad:ca:6f:27:57:7e:6c:54: f5:67:7f:76:c9:68:99:78:a6:91:1e:ab:64:f2:7c: cb:54:88:6c:3f:27:26:c7:d0:23:33:a3:4b:28:ed: 6e:78:f3:90:e3:bd:f4:7c:92:a7:7f:ee:17:8e:b5: 0c:86:5c:6f:e1:49:76:b5:3d:ef:2e:2c:86:f5:dd: 72:50:3e:09:c1:07:f0:d9:61:46:a5:8d:a4:88:8b: 4f:b9:ff:3b:91:6b:20:18:58:85:77:8b:ed:99:e0: c8:1a:d3:e8:e8:41:b5:18:eb:46:47:dd:e1:0c:da: ac:06:f6:73:2f:d0:55:fa:fe:62:0f:1e:85:a7:cd: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:06:BF:3B:2C:C5:4B:01:D6:2C:FE:DE:A6:E9:C9:84:28:E5:A1 X509v3 Authority Key Identifier: keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a4:2a:c7:80:7f:27:98:ad:a7:9f:97:7d:34:0b:9c:d1:ca: 42:04:0f:2e:f5:55:cc:01:56:7b:12:92:99:c5:45:ec:30:8b: be:e5:b5:1f:54:d3:b8:e5:bf:89:d5:32:b6:be:45:df:1b:48: 31:e5:3e:60:31:84:d0:43:98:5c:ce:63:e0:b8:08:57:b1:65: 92:54:f4:f8:96:72:3e:d9:ef:d1:57:3e:ef:78:6c:5c:3b:f0: 1c:94:f5:6e:eb:3c:be:07:8a:20:4d:ae:ef:44:27:e9:f7:46: e2:40:3d:86:83:dc:1f:25:00:ae:da:2b:42:20:2f:9f:94:5c: ea:03:01:07:69:71:f1:14:8f:2b:a9:8b:9e:a4:2c:47:36:f3: 60:bc:25:3f:a0:05:bd:8c:09:f3:d2:34:e1:b1:4d:11:7c:76: 18:39:b4:10:cd:5e:af:8a:01:61:9c:50:f3:4c:93:fa:1c:fd: b2:f6:bd:e1:0b:24:94:67:05:f5:f1:35:97:b0:c4:6a:fd:21: bf:31:f8:85:14:74:48:31:09:f2:98:63:80:80:22:e3:a3:d5: 6d:39:cc:f3:ba:df:e3:6c:d8:62:3a:7d:cb:91:aa:ec:08:19: 40:38:71:48:a3:a7:2f:38:d1:27:3f:11:e6:33:51:39:c2:25: 81:71:b2:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5NUQxMTAvBgNVBAUTKDI3MkY5RkRGMzAxNDU0RUI2QzgxRjMwMTZDMjA1QUY0 NDNDQUJENUMwHhcNMjUwODIzMDAwMjA4WhcNMjUwODMwMDAwMjA4WjAYMRYwFAYD VQQDEw02OGE5MDUwMC0wYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PpOlNgaYeEngaIOGpQnw2Uw6c/JUXA8jAXyDIdRYD8XrynEURXRlAL5oPEG 019J8a/7ok2cusN1xReKV50ukbvehzdlhAQbmPuzKYxOrokhFWvk9ZkYZmJBOmh5 gxzH0Tyr29dZh3TjbBDC30xmmplc3tqVbUuxTZzbzIttrcpvJ1d+bFT1Z392yWiZ eKaRHqtk8nzLVIhsPycmx9AjM6NLKO1uePOQ4730fJKnf+4XjrUMhlxv4Ul2tT3v LiyG9d1yUD4JwQfw2WFGpY2kiItPuf87kWsgGFiFd4vtmeDIGtPo6EG1GOtGR93h DNqsBvZzL9BV+v5iDx6Fp81BKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJi/Br87 LMVLAdYs/t6m6cmEKOWhMB8GA1UdIwQYMBaAFCcvn98wFFTrbIHzAWwgWvRDyr1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDk1RC84REUyRTRCQTMy NjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZPdHNnZk1CYkNCYTlFUEt2 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5LWYzekFVVk90c2dmTUJiQ0JhOUVQS3ZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDk1RC84REUyRTRCQTMyNjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZP dHNnZk1CYkNCYTlFUEt2VncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxpCrHgH8nmK2nn5d9NAuc0cpCBA8u9VXMAVZ7EpKZxUXsMIu+5bUf VNO45b+J1TK2vkXfG0gx5T5gMYTQQ5hczmPguAhXsWWSVPT4lnI+2e/RVz7veGxc O/AclPVu6zy+B4ogTa7vRCfp90biQD2Gg9wfJQCu2itCIC+flFzqAwEHaXHxFI8r qYuepCxHNvNgvCU/oAW9jAnz0jThsU0RfHYYObQQzV6vigFhnFDzTJP6HP2y9r3h CySUZwX18TWXsMRq/SG/MfiFFHRIMQnymGOAgCLjo9VtOczzut/jbNhiOn3Lkars CBlAOHFIo6cvONEnPxHmM1E5wiWBcbLv -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:47 2025 by rpki-client