$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json) Hash identifier: H8I0brxgEPvHqqnNypnL2rAuoX1h0JG6u6+3YwOwl2o= Subject key identifier: 04:A6:E4:24:43:62:BD:E0:5A:4B:0B:06:5F:7E:DB:FA:D7:E1:36:C0 Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft Manifest number: 06B8 Signing time: Fri 22 Aug 2025 22:21:05 +0000 Manifest this update: Fri 22 Aug 2025 22:21:05 +0000 Manifest next update: Fri 29 Aug 2025 22:21:05 +0000 Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: ws0ApCWcCWogMQvvjdqer9YsRQ5rTRkOMEj54WD9VwI=) 2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: +e3HUlovKDRpOXqB7/PZlzff1isIhCZMYZe5Pc4VAfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Validity Not Before: Aug 22 22:21:05 2025 GMT Not After : Aug 29 22:21:05 2025 GMT Subject: CN=68a8ed51-4f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e2:bd:ab:7c:29:40:31:42:01:8e:ea:47:da: 72:f8:21:e6:fd:f8:a9:b8:05:8c:b9:0d:5a:8f:62: e4:45:e1:16:d6:ef:f7:06:ae:fd:ce:6e:8a:d9:cd: 95:30:79:a8:7c:a2:e5:16:1f:8c:83:35:f4:e6:f3: 44:73:bf:8c:ff:0d:2d:b3:2d:d2:37:50:1c:79:73: 05:6f:d4:71:4b:9f:0c:8b:f6:ae:86:e1:bc:72:d7: b7:fe:9c:79:3b:ee:21:f3:6f:09:51:e9:b6:06:29: 11:08:bd:ab:1a:61:83:73:1e:36:40:65:b0:51:ab: df:7f:82:7d:47:ee:6b:d7:7b:41:a5:14:ff:68:c4: 5d:75:1e:33:85:ba:31:14:9f:a5:e2:ff:fa:5d:37: 91:82:cc:8f:4e:f1:08:63:d5:bf:ac:54:db:88:db: 8a:71:94:7c:b8:5f:b6:76:4e:e0:41:7c:85:c0:e5: 9d:c3:ea:d8:23:84:b7:5a:09:a4:c7:9f:56:f7:1e: 6a:bc:3a:42:e4:1a:c1:76:f3:d5:ff:b2:5c:ac:ae: c2:bb:1e:e7:1b:16:ef:c9:91:18:ac:6a:1f:19:58: e2:0a:34:d5:c7:ca:8b:93:fd:bd:61:eb:89:e4:54: 10:73:2c:8d:ae:25:86:a4:d7:82:95:d8:ba:61:2c: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:E4:24:43:62:BD:E0:5A:4B:0B:06:5F:7E:DB:FA:D7:E1:36:C0 X509v3 Authority Key Identifier: keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cb:55:18:37:f0:22:dc:fe:f2:15:2c:97:5e:4d:69:85:f0: 70:fc:4d:2a:ce:22:9a:7b:e4:01:3a:3d:fe:59:76:7d:ec:2c: 50:97:8c:e7:ee:f6:01:80:05:54:de:25:6d:73:f9:46:fd:d4: 38:17:f7:45:cf:46:7c:23:42:11:00:9f:e1:75:f3:8b:35:9d: 0e:9b:e6:24:52:95:44:bf:95:af:dd:02:d5:b9:0f:df:ae:ad: 66:5c:54:11:5e:1d:27:b9:cd:8c:83:5c:76:7f:34:b0:1f:fe: 1e:d0:4f:21:25:3a:36:27:e0:bd:47:3a:e7:41:99:d2:80:4c: 22:8d:61:8d:df:34:61:bb:05:aa:5d:36:92:f2:02:41:67:69: ff:51:29:65:e2:f8:bc:56:27:eb:47:62:cb:f2:91:c7:14:99: 3a:3b:d6:f0:62:1c:6d:d7:dd:5f:6f:80:a1:3e:aa:60:6e:27: c6:a6:17:a4:23:0d:f2:a2:6e:2b:2c:1f:20:e6:a9:0b:0c:9f: c5:4f:72:3a:8e:36:b6:18:a1:c9:bb:2e:61:cf:1d:cc:61:88: 5e:63:90:8f:cb:57:31:21:18:a9:31:ce:92:aa:71:7f:26:a9: d0:31:2f:54:f7:9f:29:86:3a:ae:75:5f:35:ee:87:fc:a9:1b: 33:f1:78:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMjcxMTAvBgNVBAUTKDI2NTlDRUQxNTI3RDJDQUJEOEIyQzUzMDc1RUNDRDk0 RUQ3MUZFOTgwHhcNMjUwODIyMjIyMTA1WhcNMjUwODI5MjIyMTA1WjAYMRYwFAYD VQQDEw02OGE4ZWQ1MS00ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+K9q3wpQDFCAY7qR9py+CHm/fipuAWMuQ1aj2LkReEW1u/3Bq79zm6K2c2V MHmofKLlFh+MgzX05vNEc7+M/w0tsy3SN1AceXMFb9RxS58Mi/auhuG8cte3/px5 O+4h828JUem2BikRCL2rGmGDcx42QGWwUavff4J9R+5r13tBpRT/aMRddR4zhbox FJ+l4v/6XTeRgsyPTvEIY9W/rFTbiNuKcZR8uF+2dk7gQXyFwOWdw+rYI4S3Wgmk x59W9x5qvDpC5BrBdvPV/7JcrK7Cux7nGxbvyZEYrGofGVjiCjTVx8qLk/29YeuJ 5FQQcyyNriWGpNeCldi6YSwIQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASm5CRD Yr3gWksLBl9+2/rX4TbAMB8GA1UdIwQYMBaAFCZZztFSfSyr2LLFMHXszZTtcf6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIyNy80RkNGNTY4RTdC MDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxLdllzc1V3ZGV6TmxPMXhf cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psbk8wVko5TEt2WXNzVXdkZXpObE8xeF9wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIyNy80RkNGNTY4RTdCMDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxL dllzc1V3ZGV6TmxPMXhfcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4y1UYN/Ai3P7yFSyXXk1phfBw/E0qziKae+QBOj3+WXZ97CxQl4zn 7vYBgAVU3iVtc/lG/dQ4F/dFz0Z8I0IRAJ/hdfOLNZ0Om+YkUpVEv5Wv3QLVuQ/f rq1mXFQRXh0nuc2Mg1x2fzSwH/4e0E8hJTo2J+C9RzrnQZnSgEwijWGN3zRhuwWq XTaS8gJBZ2n/USll4vi8VifrR2LL8pHHFJk6O9bwYhxt191fb4ChPqpgbifGphek Iw3yom4rLB8g5qkLDJ/FT3I6jja2GKHJuy5hzx3MYYheY5CPy1cxIRipMc6SqnF/ JqnQMS9U958phjqudV817of8qRsz8Xgz -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:27 2025 by rpki-client