$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: saMky03thJ2Dkfb2d/gTzwP/s6CaP67NS9bS7VH8Z+0= Subject key identifier: 10:D5:AE:39:6E:B4:2B:3B:48:64:BF:2B:EF:01:BA:A0:75:A7:06:FE Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 34 Signing time: Sat 23 Aug 2025 07:50:27 +0000 Manifest this update: Sat 23 Aug 2025 07:50:27 +0000 Manifest next update: Sat 30 Aug 2025 07:50:27 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: dQGF6Uq3a1vHjwvxGy3QtPHTHfJrP+Ofqdb7Z3h18YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Aug 23 07:50:27 2025 GMT Not After : Aug 30 07:50:27 2025 GMT Subject: CN=68a972c3-d02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:aa:07:40:ae:b0:ec:e6:61:15:14:15:7b: 98:c0:23:dc:f8:fe:11:12:3c:71:a8:67:af:61:65: f3:92:51:d4:f8:82:93:79:36:44:6c:e3:88:dd:b7: 39:65:a4:e9:b5:88:dd:a1:2d:f6:79:9a:d8:90:5d: f2:bd:f2:93:cd:1b:48:ec:87:61:22:95:16:57:4d: 89:4a:df:a4:44:4e:90:b3:dc:3f:2a:e1:2d:f0:7f: bb:59:5d:88:54:39:0d:24:19:59:4a:5e:25:62:e9: fe:d8:fa:77:3d:59:35:f9:8a:1c:19:c2:1e:0a:0b: 04:19:4f:66:18:63:12:39:4c:4c:3a:5c:78:3f:f5: b5:7a:d4:dd:6b:2c:a5:c3:ec:62:0d:da:69:d4:54: d7:50:a1:43:d9:b5:59:7c:a4:ea:1f:ab:60:32:a0: b4:a5:c6:9d:50:db:09:57:d5:54:05:13:90:8b:22: b6:f6:de:24:df:30:31:17:c6:f8:b1:57:1d:33:c0: 06:2b:3f:e0:fc:7f:60:16:cd:ec:50:a5:c7:c8:47: c9:91:c2:c6:c4:78:41:d2:9b:63:c8:4f:86:cb:c4: 19:c3:b7:b2:03:74:0f:66:29:f9:66:2b:62:59:0c: eb:3c:39:ba:0c:2f:b1:15:42:8d:0c:a5:dc:64:8d: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:AE:39:6E:B4:2B:3B:48:64:BF:2B:EF:01:BA:A0:75:A7:06:FE X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:48:44:2f:90:c3:e9:1c:9a:2a:ed:da:d8:4b:86:c3:b8: bc:2a:d2:4b:a9:2c:35:fb:5c:ea:19:51:b6:85:88:84:60:8f: f8:95:1c:4e:33:b8:09:8f:36:b3:65:e5:3d:81:26:c3:d1:a3: 3f:10:d8:a7:97:13:79:91:79:e1:16:0f:0e:13:26:0e:c3:75: 1d:e5:ae:7f:9f:f1:a3:69:35:8d:e3:54:07:b1:f2:83:2b:e9: bd:5f:0d:b1:99:ca:20:10:73:bf:40:58:2f:1d:2d:cb:d8:c2: 13:61:d6:6a:22:4b:c5:fa:4e:42:f4:df:4e:5a:c1:eb:4b:11: 64:e6:59:e2:36:67:19:38:36:9f:ef:6c:a7:2a:08:63:18:df: 41:5d:cc:8d:39:4e:ec:97:f8:66:9b:e3:b1:46:4f:24:28:15: e1:5b:a4:5e:6f:9c:1e:6c:e9:ba:b7:dd:27:ef:68:1c:07:2f: ba:46:df:95:89:bc:65:7e:db:55:a5:74:28:6f:c4:a8:2c:6b: ea:c5:58:a6:b0:a3:76:a3:0f:20:c5:e9:65:3a:43:c0:f9:c5: 41:30:70:4c:84:9e:9a:bc:2a:25:02:9f:b5:ef:0b:ca:65:26: 96:70:02:7b:88:9f:10:43:d5:64:74:d3:5f:79:5a:a0:a0:74: ce:75:ac:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTA4MjMwNzUwMjdaFw0yNTA4MzAwNzUwMjdaMBgxFjAUBgNV BAMTDTY4YTk3MmMzLWQwMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV3qoHQK6w7OZhFRQVe5jAI9z4/hESPHGoZ69hZfOSUdT4gpN5NkRs44jdtzll pOm1iN2hLfZ5mtiQXfK98pPNG0jsh2EilRZXTYlK36RETpCz3D8q4S3wf7tZXYhU OQ0kGVlKXiVi6f7Y+nc9WTX5ihwZwh4KCwQZT2YYYxI5TEw6XHg/9bV61N1rLKXD 7GIN2mnUVNdQoUPZtVl8pOofq2AyoLSlxp1Q2wlX1VQFE5CLIrb23iTfMDEXxvix Vx0zwAYrP+D8f2AWzexQpcfIR8mRwsbEeEHSm2PIT4bLxBnDt7IDdA9mKflmK2JZ DOs8OboML7EVQo0MpdxkjYSVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUENWuOW60 KztIZL8r7wG6oHWnBv4wHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEuSEQvkMPpHJoq7drYS4bDuLwq0kupLDX7XOoZUbaFiIRgj/iVHE4z uAmPNrNl5T2BJsPRoz8Q2KeXE3mReeEWDw4TJg7DdR3lrn+f8aNpNY3jVAex8oMr 6b1fDbGZyiAQc79AWC8dLcvYwhNh1moiS8X6TkL0305awetLEWTmWeI2Zxk4Np/v bKcqCGMY30FdzI05TuyX+Gab47FGTyQoFeFbpF5vnB5s6bq33SfvaBwHL7pG35WJ vGV+21WldChvxKgsa+rFWKawo3ajDyDF6WU6Q8D5xUEwcEyEnpq8KiUCn7XvC8pl JpZwAnuInxBD1WR00195WqCgdM51rHw= -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:08 2025 by rpki-client