$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: RVDSPvsHS/El7yDK3x0wJI34YpuCodzaWox/UcI8zeA= Subject key identifier: F8:61:6A:22:24:04:0E:F9:62:CC:5D:62:E5:97:BE:A8:17:5A:D5:9B Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 0247 Signing time: Sun 19 Oct 2025 04:04:13 +0000 Manifest this update: Sun 19 Oct 2025 04:04:12 +0000 Manifest next update: Sun 26 Oct 2025 04:04:12 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: crc0f6CUec/2Vj0YzzlJRNXPXRh8zxTeBFHAySHn+FI=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mhhqfIxRoBjhuINkZ3XIMhFtJRPA+gdmIPhSIee7DFc=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: gcq2OURWYuZ9mt7r/ew2O7bw4Is8Oj5yrAJBkVF7NPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Oct 19 04:04:12 2025 GMT Not After : Oct 26 04:04:12 2025 GMT Subject: CN=68f4633d-f011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:61:51:c0:82:fd:98:90:73:42:28:43:19: 5f:17:01:99:ac:b8:c1:c1:36:5d:b6:a3:ef:52:07: 64:2f:85:cf:05:14:6d:84:82:50:6d:16:7d:b3:eb: 39:e9:c2:f1:02:a0:cf:20:1f:ae:9c:f2:ba:3a:8e: b4:40:cc:3c:12:e5:57:54:8d:31:8b:46:52:9a:9f: 7e:0d:e6:9a:76:c2:a3:44:5b:51:c3:68:8f:8a:a4: bf:28:34:fe:a5:9f:10:66:ca:30:a1:7b:30:1c:0a: f1:59:74:e7:b6:86:d3:b9:59:86:66:c5:66:33:e5: 74:05:8e:a3:05:a6:e9:96:ae:ca:ac:46:79:98:5a: 86:07:63:66:f0:8b:23:50:c9:bc:78:a1:ff:99:dc: fd:06:21:99:f3:50:8b:9c:bf:0a:df:d2:9a:c9:fe: ec:42:0d:b4:be:cc:39:20:4d:03:50:af:02:02:3d: 8f:fc:5a:83:43:09:4f:0e:59:ce:f8:a1:2b:dc:b4: ad:d1:36:65:c2:2a:7b:ea:69:c0:af:b0:39:db:50: 37:f6:9f:59:b5:4f:46:91:0a:d7:4a:ad:f7:b8:02: ee:44:37:27:23:d1:e4:09:f1:12:0f:ca:22:83:84: 22:76:c1:bd:a8:31:c7:64:45:dd:c5:bd:3d:13:25: c3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:61:6A:22:24:04:0E:F9:62:CC:5D:62:E5:97:BE:A8:17:5A:D5:9B X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:08:8e:f3:41:59:98:90:e8:50:3c:79:d8:a4:53:bb:39:4d: 07:0d:81:8a:8b:2a:dc:4d:62:08:0c:10:94:cd:a8:34:73:de: c3:9f:84:9e:30:7c:de:94:df:74:fb:b4:df:0f:aa:9f:2e:61: 5e:28:43:c2:26:7a:eb:8b:53:8c:0b:c3:ee:14:07:0e:3e:d0: fa:40:87:79:55:72:d0:74:f6:5e:7f:69:0c:71:92:ae:aa:37: 38:02:02:67:ae:a7:8c:54:f3:cd:e4:8b:97:63:8d:0c:8b:19: cc:d7:31:85:82:40:0f:ca:0a:ff:8e:67:1c:e3:80:71:39:85: 60:de:db:3b:09:59:74:e3:52:3d:14:45:dd:43:68:2a:92:23: c8:bf:d3:d4:c5:06:9b:de:db:30:7c:bb:2b:d5:e2:e2:0f:48: 7c:84:bc:ca:e3:01:dd:25:4f:a3:b7:d5:66:ff:ff:3c:10:fd: 14:82:cc:50:d0:c4:af:7b:bf:99:9e:48:41:e6:58:87:92:10: 7b:e2:69:0f:c3:51:1a:c6:c0:40:fb:a2:33:f3:de:fa:19:d9: e8:9f:43:c0:90:3f:a1:8e:d4:53:d8:27:73:20:ed:ec:04:89: 5d:84:e0:ae:6d:ca:06:69:05:31:48:94:65:e1:07:57:63:6b: f2:95:88:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjUxMDE5MDQwNDEyWhcNMjUxMDI2MDQwNDEyWjAYMRYwFAYD VQQDEw02OGY0NjMzZC1mMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4BhUcCC/ZiQc0IoQxlfFwGZrLjBwTZdtqPvUgdkL4XPBRRthIJQbRZ9s+s5 6cLxAqDPIB+unPK6Oo60QMw8EuVXVI0xi0ZSmp9+DeaadsKjRFtRw2iPiqS/KDT+ pZ8QZsowoXswHArxWXTntobTuVmGZsVmM+V0BY6jBabplq7KrEZ5mFqGB2Nm8Isj UMm8eKH/mdz9BiGZ81CLnL8K39Kayf7sQg20vsw5IE0DUK8CAj2P/FqDQwlPDlnO +KEr3LSt0TZlwip76mnAr7A521A39p9ZtU9GkQrXSq33uALuRDcnI9HkCfESD8oi g4QidsG9qDHHZEXdxb09EyXDSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhhaiIk BA75YsxdYuWXvqgXWtWbMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsCI7zQVmYkOhQPHnYpFO7OU0HDYGKiyrcTWIIDBCUzag0c97Dn4Se MHzelN90+7TfD6qfLmFeKEPCJnrri1OMC8PuFAcOPtD6QId5VXLQdPZef2kMcZKu qjc4AgJnrqeMVPPN5IuXY40MixnM1zGFgkAPygr/jmcc44BxOYVg3ts7CVl041I9 FEXdQ2gqkiPIv9PUxQab3tswfLsr1eLiD0h8hLzK4wHdJU+jt9Vm//88EP0UgsxQ 0MSve7+ZnkhB5liHkhB74mkPw1EaxsBA+6Iz8976Gdnon0PAkD+hjtRT2CdzIO3s BIldhOCubcoGaQUxSJRl4QdXY2vylYjo -----END CERTIFICATE-----Generated at Mon Oct 20 08:23:19 2025 by rpki-client