$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: ooeha8szqcm/WeItFupyElqh3nL+CnlhVevpcJSguRc= Subject key identifier: 3A:3B:1F:3F:07:4B:96:EE:09:82:80:8A:C8:17:C9:69:F1:87:F9:6C Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 048C Signing time: Sat 23 Aug 2025 00:15:30 +0000 Manifest this update: Sat 23 Aug 2025 00:15:29 +0000 Manifest next update: Sat 30 Aug 2025 00:15:29 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: hjBBuboJfEWR0TpAWlr2l3Ui7WwUph0pnqKCZHNNQqA=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Aug 23 00:15:29 2025 GMT Not After : Aug 30 00:15:29 2025 GMT Subject: CN=68a90822-90af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:39:47:84:97:bc:ad:dc:19:90:bf:16:92: 6e:21:38:5c:5d:b5:a8:ed:9f:14:5e:08:09:b1:92: f7:26:f3:09:75:c6:18:70:7e:3f:37:21:14:3d:83: 32:7d:74:82:6e:92:7d:1c:66:8f:71:17:ec:53:b1: 8e:f0:52:2a:93:3c:30:e4:11:b5:70:7d:98:46:29: 19:c5:6b:8e:5c:f3:3e:0f:5a:4f:47:78:6d:25:ae: 26:8e:81:0a:7a:0f:aa:a7:66:06:26:77:92:e5:49: 07:3b:9a:2f:80:4f:2b:04:28:43:16:10:eb:39:6c: 4c:28:ee:58:53:eb:8b:d7:80:1e:19:54:86:71:f0: 3c:0e:da:b3:43:0b:73:5a:9b:23:e4:aa:e7:26:04: 05:22:92:8e:46:09:2a:69:03:70:7f:ed:07:d2:37: ba:7c:41:e2:40:75:da:d8:2e:72:2a:47:27:47:06: 9a:8d:e2:5a:51:e1:67:72:05:22:88:f6:47:ea:bc: 64:48:99:cb:95:24:cb:ff:7f:30:fc:c4:08:38:1f: 61:ee:c9:18:ef:b9:76:65:0c:56:aa:f5:ab:ee:38: 26:b3:8f:ec:1f:1d:64:1d:30:ef:9f:af:84:19:fc: 14:e2:65:70:21:83:ff:7e:01:8b:a7:9e:71:a9:5f: 5d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:1F:3F:07:4B:96:EE:09:82:80:8A:C8:17:C9:69:F1:87:F9:6C X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7a:70:b3:b1:31:a7:a7:ad:db:6e:5e:6e:58:15:ab:7d:43: b8:91:bb:67:2f:06:64:de:3f:6f:bd:b1:74:1c:69:6c:5f:b4: b7:e4:f5:13:08:64:5a:d0:8a:10:ee:f7:bd:f1:61:4f:63:66: 10:ef:b7:26:b6:d2:72:77:19:b9:8e:fd:3d:75:6a:a1:65:78: a7:41:ef:54:11:de:db:f9:1e:7b:5c:29:6e:42:16:c7:7a:b8: c4:f7:9e:4d:1c:7b:ce:bd:48:b5:7f:c5:c3:5d:76:d6:f1:04: 22:47:fd:6c:dd:e2:f8:15:69:ac:a7:67:59:f5:fb:7a:22:69: 61:15:b2:e2:c4:ca:6a:84:e9:88:26:34:b4:70:0f:7a:33:4c: d8:12:df:14:97:c2:b3:6f:20:b7:a1:46:e1:3f:b1:29:b0:f6: fb:bc:01:51:f8:ea:fa:ab:f1:16:79:ad:53:29:ed:1d:fb:89: 22:8a:1d:20:b7:9f:06:11:50:29:85:8c:2d:43:43:5d:1c:f2: 84:43:bd:70:59:32:aa:2b:e4:84:92:f4:dc:a8:01:c8:47:6d: cc:63:1f:10:85:6f:5e:a3:e4:25:b2:ee:fd:47:5b:c1:93:ad: 5d:b3:f4:11:9d:29:d0:41:bf:c6:32:04:1c:fc:10:13:ae:a6: 29:3e:08:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjUwODIzMDAxNTI5WhcNMjUwODMwMDAxNTI5WjAYMRYwFAYD VQQDEw02OGE5MDgyMi05MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNI5R4SXvK3cGZC/FpJuIThcXbWo7Z8UXggJsZL3JvMJdcYYcH4/NyEUPYMy fXSCbpJ9HGaPcRfsU7GO8FIqkzww5BG1cH2YRikZxWuOXPM+D1pPR3htJa4mjoEK eg+qp2YGJneS5UkHO5ovgE8rBChDFhDrOWxMKO5YU+uL14AeGVSGcfA8DtqzQwtz Wpsj5KrnJgQFIpKORgkqaQNwf+0H0je6fEHiQHXa2C5yKkcnRwaajeJaUeFncgUi iPZH6rxkSJnLlSTL/38w/MQIOB9h7skY77l2ZQxWqvWr7jgms4/sHx1kHTDvn6+E GfwU4mVwIYP/fgGLp55xqV9dqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo7Hz8H S5buCYKAisgXyWnxh/lsMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+enCzsTGnp63bbl5uWBWrfUO4kbtnLwZk3j9vvbF0HGlsX7S35PUT CGRa0IoQ7ve98WFPY2YQ77cmttJydxm5jv09dWqhZXinQe9UEd7b+R57XCluQhbH erjE955NHHvOvUi1f8XDXXbW8QQiR/1s3eL4FWmsp2dZ9ft6ImlhFbLixMpqhOmI JjS0cA96M0zYEt8Ul8KzbyC3oUbhP7EpsPb7vAFR+Or6q/EWea1TKe0d+4kiih0g t58GEVAphYwtQ0NdHPKEQ71wWTKqK+SEkvTcqAHIR23MYx8QhW9eo+Qlsu79R1vB k61ds/QRnSnQQb/GMgQc/BATrqYpPgiW -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:26 2025 by rpki-client