$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json) Hash identifier: HrnhUJ2NOF590sTES6GHiag8AIeqNR2PooKAGMglMb8= Subject key identifier: 91:58:F5:06:BE:00:40:61:36:90:56:35:AB:8D:BD:95:91:32:6D:59 Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 1226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft Manifest number: 121D Signing time: Fri 22 Aug 2025 17:16:24 +0000 Manifest this update: Fri 22 Aug 2025 17:16:24 +0000 Manifest next update: Fri 29 Aug 2025 17:16:24 +0000 Files and hashes: 1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: jLxe0V9FnBj1KfJYPlAG15rV+UMO0nlltkc3/xi+7us=) 2: A295F860E71011E8899C3917C4F9AE02.roa (hash: u3ZjS5PQ+cLOr7B4bn5ZklBTiFJgjz1r0/eLvbqbKzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4646 (0x1226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Aug 22 17:16:24 2025 GMT Not After : Aug 29 17:16:24 2025 GMT Subject: CN=68a8a5e8-f9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:35:3c:10:17:a3:71:c3:75:23:67:40:20: 7a:5f:02:df:69:b4:b2:3d:af:da:1f:cd:dc:a0:47: 95:e9:6d:ad:78:5b:ca:ed:4b:c6:68:e3:20:00:6c: 72:62:a9:9c:19:3c:13:5c:5d:c5:2b:89:16:64:20: 78:b5:b2:a6:9e:93:0c:93:0f:b3:e1:71:b8:58:e0: 1c:6c:46:81:f6:fa:2f:ea:b8:fe:49:96:77:ba:4b: d8:8a:2a:ab:42:c3:6c:e3:c6:ca:81:4c:0a:17:82: f6:2b:d2:0d:a7:fb:cf:2f:e5:b2:c9:4e:32:6f:63: e5:6f:e3:e8:6c:77:31:7a:61:99:96:59:36:7c:ab: e6:1f:4b:e8:6a:ad:90:ea:45:60:77:f8:dc:24:a4: 9d:a1:80:2b:8a:30:83:74:31:a5:05:66:d5:b9:c4: d9:c6:ce:c8:b7:86:83:94:e3:51:2b:c9:a1:8d:69: 6f:db:df:56:64:9f:3a:0d:06:da:79:69:67:a1:51: 5b:e0:f1:73:2b:86:f8:b8:d6:57:b9:a8:48:3a:46: bd:ee:31:bc:86:5b:56:8c:68:1e:07:7a:db:33:b5: b3:2a:c9:db:04:46:7d:e1:4c:4a:d0:3d:29:35:c2: 92:0b:e8:56:e3:8d:d3:25:f1:f7:ed:93:c9:d7:4b: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:F5:06:BE:00:40:61:36:90:56:35:AB:8D:BD:95:91:32:6D:59 X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1c:bb:d1:82:0a:2c:4e:c2:77:76:37:94:ec:4c:f6:31:1e: 7a:e1:51:ac:48:9f:3a:01:63:2c:36:54:95:b9:9a:48:31:e5: d3:55:2e:06:03:1e:39:7d:22:07:19:0d:b2:3d:e1:57:85:01: e6:22:f2:2d:a5:11:1d:d3:19:cb:70:00:4c:89:00:fa:f9:e1: d1:88:59:22:af:6e:da:bb:29:33:46:85:7d:6c:b4:ba:6e:dd: 3d:7b:15:f1:ba:80:b8:71:bd:64:01:77:51:ba:c2:d4:5c:51: ee:12:69:f1:c1:95:0c:fe:e0:d9:bd:82:9b:50:63:15:a5:2a: c8:89:a3:85:a2:36:2d:b6:7e:e8:15:f2:84:2a:16:f5:61:1b: e3:58:fd:58:50:0f:06:81:39:84:34:a0:6e:95:fd:45:ba:99: 5b:0d:63:8b:9b:e6:1e:57:f3:43:11:ad:72:b9:33:cd:db:93: 05:0f:97:99:77:fe:33:ac:63:89:1d:63:c5:cb:f4:2f:35:0f: 2b:c5:f0:50:56:29:dd:56:ca:20:bb:4e:26:f1:58:56:8b:73: ba:fa:27:ad:7c:b4:a3:70:bd:6b:a3:2e:57:28:33:32:78:bb: 84:44:40:8a:e6:01:bc:53:bc:10:43:7b:4f:d6:db:d9:f7:1f: ec:f0:91:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjUwODIyMTcxNjI0WhcNMjUwODI5MTcxNjI0WjAYMRYwFAYD VQQDEw02OGE4YTVlOC1mOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5U1PBAXo3HDdSNnQCB6XwLfabSyPa/aH83coEeV6W2teFvK7UvGaOMgAGxy YqmcGTwTXF3FK4kWZCB4tbKmnpMMkw+z4XG4WOAcbEaB9vov6rj+SZZ3ukvYiiqr QsNs48bKgUwKF4L2K9INp/vPL+WyyU4yb2Plb+PobHcxemGZllk2fKvmH0voaq2Q 6kVgd/jcJKSdoYArijCDdDGlBWbVucTZxs7It4aDlONRK8mhjWlv299WZJ86DQba eWlnoVFb4PFzK4b4uNZXuahIOka97jG8hltWjGgeB3rbM7WzKsnbBEZ94UxK0D0p NcKSC+hW443TJfH37ZPJ10slewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFY9Qa+ AEBhNpBWNauNvZWRMm1ZMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf Wi14ZlNsUTZJRHBUNDg1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+HLvRggosTsJ3djeU7Ez2MR564VGsSJ86AWMsNlSVuZpIMeXTVS4G Ax45fSIHGQ2yPeFXhQHmIvItpREd0xnLcABMiQD6+eHRiFkir27auykzRoV9bLS6 bt09exXxuoC4cb1kAXdRusLUXFHuEmnxwZUM/uDZvYKbUGMVpSrIiaOFojYttn7o FfKEKhb1YRvjWP1YUA8GgTmENKBulf1FuplbDWOLm+YeV/NDEa1yuTPN25MFD5eZ d/4zrGOJHWPFy/QvNQ8rxfBQVindVsogu04m8VhWi3O6+ietfLSjcL1roy5XKDMy eLuERECK5gG8U7wQQ3tP1tvZ9x/s8JHM -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:25 2025 by rpki-client