$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: 7kmH9KonlAgyIR2kF90iuIQKXXd9Ks95S0cDF5CBFJ0= Subject key identifier: 81:32:2F:91:63:5E:BF:C8:B1:9B:A7:16:B3:D5:5D:E3:4B:D2:03:76 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 019A Signing time: Sat 23 Aug 2025 03:28:31 +0000 Manifest this update: Sat 23 Aug 2025 03:28:30 +0000 Manifest next update: Sat 30 Aug 2025 03:28:30 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: JSKuJwCJ4bPj/x61UyNg8Vk2O8FqYno+wJ7UmGHWKYE=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: TJboroWTjSH5MHMWjJ273LEWmOXtmootlWn74QKDiMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Aug 23 03:28:30 2025 GMT Not After : Aug 30 03:28:30 2025 GMT Subject: CN=68a9355f-89f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:be:46:69:26:28:96:f5:1a:96:41:3a:3e: 9a:70:d9:10:1c:e8:bd:53:23:c3:25:47:d1:90:0c: 3b:6f:4e:75:c7:73:fa:37:c5:db:bd:b8:77:5b:dd: 74:6c:32:e8:ca:55:3e:71:7b:2b:58:89:85:ef:f1: a9:d9:99:ed:c5:ae:70:27:6f:79:58:6f:31:c8:c1: 81:2f:cf:63:52:d7:6d:26:eb:66:8e:e9:41:42:e0: 8a:2b:35:28:f4:29:0e:87:3d:88:2a:7d:76:b8:78: d8:f4:c7:04:18:1b:14:e9:c5:5a:29:e8:3d:0b:e4: 2d:7f:0b:4e:42:99:eb:6f:7d:3b:5e:02:f3:d5:7d: cd:9e:ae:93:5c:6d:4a:8e:d0:14:78:ee:99:30:d6: 6a:29:4f:d1:6a:1a:aa:fc:6b:74:72:47:6f:84:17: b0:0c:c1:55:bf:20:50:74:67:87:04:54:31:94:ca: 19:04:1f:5e:70:c6:82:d1:09:51:8f:13:67:70:c9: 53:5d:6b:d9:0a:2d:8f:c4:2c:b6:10:34:01:ac:b3: f7:ae:97:66:65:7a:ce:f0:9c:5a:79:92:88:f8:9c: 33:e0:ab:bb:04:e3:85:ee:69:c3:32:5c:e6:91:d4: fc:05:22:bd:a5:0e:b8:7b:2d:48:b7:bc:62:c2:21: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:32:2F:91:63:5E:BF:C8:B1:9B:A7:16:B3:D5:5D:E3:4B:D2:03:76 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8f:93:59:a2:61:81:6f:ec:e8:21:f4:a3:43:3b:d7:fb:4f: b8:ac:b2:78:ab:f1:4b:fa:b3:e3:db:37:8a:1c:69:b6:1d:d9: 85:08:62:71:02:36:8c:2a:c0:36:6c:25:9b:e8:09:42:72:20: 5e:4b:2a:72:ee:84:19:ad:07:56:14:da:01:6d:20:8c:d8:46: 9d:5b:fd:01:ab:c2:77:86:e1:68:bf:bc:77:3f:94:fc:37:c9: 8d:8e:9a:7c:2e:90:b6:56:7e:a3:c6:14:0b:c9:90:74:89:6a: 9c:c5:5e:d4:38:55:8e:d5:0e:b9:c6:59:04:a2:78:12:c5:cd: 89:94:5e:f8:2d:6c:3b:6d:08:1f:a7:b5:a4:d2:1a:57:6d:36: d4:3d:06:45:f5:1a:fc:1a:4b:58:3b:76:10:12:2b:d7:ab:e1: ce:67:55:d6:69:60:f0:2e:ff:ab:45:26:fa:9e:51:ca:bb:fa: 34:ee:8b:32:d4:0c:c7:59:5f:ad:dd:6a:b3:3c:62:b9:b5:fb: 89:aa:41:b1:aa:d2:d0:86:9e:30:63:02:38:67:e3:5f:ab:49: aa:6b:a5:39:33:7c:37:62:26:93:ef:dc:ac:f5:3d:bf:fc:bc: 4c:f9:5d:6d:69:8f:64:0c:bd:8f:86:0c:c4:04:48:5b:35:d8: 32:5c:7a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjUwODIzMDMyODMwWhcNMjUwODMwMDMyODMwWjAYMRYwFAYD VQQDEw02OGE5MzU1Zi04OWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIy+RmkmKJb1GpZBOj6acNkQHOi9UyPDJUfRkAw7b051x3P6N8Xbvbh3W910 bDLoylU+cXsrWImF7/Gp2Zntxa5wJ295WG8xyMGBL89jUtdtJutmjulBQuCKKzUo 9CkOhz2IKn12uHjY9McEGBsU6cVaKeg9C+QtfwtOQpnrb307XgLz1X3Nnq6TXG1K jtAUeO6ZMNZqKU/Rahqq/Gt0ckdvhBewDMFVvyBQdGeHBFQxlMoZBB9ecMaC0QlR jxNncMlTXWvZCi2PxCy2EDQBrLP3rpdmZXrO8JxaeZKI+Jwz4Ku7BOOF7mnDMlzm kdT8BSK9pQ64ey1It7xiwiENTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEyL5Fj Xr/IsZunFrPVXeNL0gN2MB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhj5NZomGBb+zoIfSjQzvX+0+4rLJ4q/FL+rPj2zeKHGm2HdmFCGJx AjaMKsA2bCWb6AlCciBeSypy7oQZrQdWFNoBbSCM2EadW/0Bq8J3huFov7x3P5T8 N8mNjpp8LpC2Vn6jxhQLyZB0iWqcxV7UOFWO1Q65xlkEongSxc2JlF74LWw7bQgf p7Wk0hpXbTbUPQZF9Rr8GktYO3YQEivXq+HOZ1XWaWDwLv+rRSb6nlHKu/o07osy 1AzHWV+t3WqzPGK5tfuJqkGxqtLQhp4wYwI4Z+Nfq0mqa6U5M3w3YiaT79ys9T2/ /LxM+V1taY9kDL2PhgzEBEhbNdgyXHrM -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:15 2025 by rpki-client