$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: UCwmmSQh29Wo9RMtQeKNJQlteXr8dcQamUdBqS1Z4Pw= Subject key identifier: 49:AD:51:E6:B4:78:63:CB:FB:3F:52:B5:0A:8B:58:54:DF:F5:0F:D2 Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 0634 Signing time: Sun 10 Aug 2025 22:49:50 +0000 Manifest this update: Sun 10 Aug 2025 22:49:49 +0000 Manifest next update: Sun 17 Aug 2025 22:49:49 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: wpHCXN2XRFGNKJ4pR9oxiAHw+VgyR1W9KQNhQajiLnY=) 2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=) 3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: WwU6SoQDG+8gwXxtD5WuoKkjOwOvaEm4Y976SHnYcTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Aug 10 22:49:49 2025 GMT Not After : Aug 17 22:49:49 2025 GMT Subject: CN=6899220d-f290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:c9:f2:6d:4f:f7:07:a2:22:e3:da:98:75: cf:b7:60:ce:ca:06:58:17:0c:9c:8e:27:0f:e4:b0: 0d:26:23:3c:f6:ce:5a:15:07:be:e2:ee:66:5f:f2: 1a:b5:da:8e:1a:d5:b2:a3:3a:26:c4:73:5d:d9:ef: a2:1e:94:47:9d:60:85:eb:fb:2b:63:6c:68:04:48: a7:06:78:d3:71:b1:97:57:60:c7:97:e5:ee:db:3d: b9:4c:e6:3e:e5:a4:6c:4a:2c:5c:4d:49:e1:3b:51: 43:a8:95:8f:74:70:1e:5f:ec:3b:c9:a4:0d:b0:53: a4:a1:be:d0:93:0d:13:7b:b8:c4:fd:d6:58:00:4f: 63:e9:69:23:37:82:e2:8c:f5:68:e7:af:64:e2:31: 83:f1:31:e7:f0:ae:6d:d8:59:b0:19:df:53:94:3a: 40:ef:ea:88:5d:57:d7:07:e5:5f:86:ad:37:a9:2a: 4a:a6:c3:60:36:33:3f:6d:a2:7e:24:02:2e:ea:b1: eb:47:2d:bd:7d:60:8c:71:1d:41:96:86:dd:05:a7: 98:b3:92:a5:23:7c:e1:53:fe:af:a7:db:46:c3:8a: 87:0c:8a:62:27:66:b8:35:af:61:99:ce:8d:5e:50: 4b:27:fe:5c:dc:97:bc:60:0d:f9:3a:9a:be:24:2d: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AD:51:E6:B4:78:63:CB:FB:3F:52:B5:0A:8B:58:54:DF:F5:0F:D2 X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ae:ab:e3:ad:c2:0f:4a:11:85:2c:cf:7c:6e:8d:a6:38:b0: bd:89:8c:05:08:94:73:5d:6b:62:8e:c1:38:29:3d:76:85:aa: 34:72:40:ae:9c:4d:88:ab:f3:50:6f:53:e3:93:f5:69:19:49: 6e:53:05:46:98:0f:66:e8:81:02:e2:ca:56:58:b7:6e:f0:7b: ac:6d:c4:a5:89:11:5e:18:76:c7:8b:b3:9b:3f:45:39:4d:23: b8:fb:cf:9f:5a:0f:86:81:ac:d4:ca:ea:ab:b6:dc:d5:1c:a3: a6:06:12:ae:af:00:55:fd:f0:e3:28:39:2e:34:e0:46:06:5d: 1c:ec:12:6f:af:1e:0b:bf:da:b1:e0:f7:46:b0:4d:2d:8b:12: 7d:cb:5e:cb:a1:9a:37:e8:1d:60:78:81:64:ec:12:a7:81:2c: 96:0b:7d:98:f3:6d:86:82:a2:6d:e6:14:c5:fa:60:f0:76:aa: dd:0a:17:ce:30:30:ac:01:31:d9:86:04:fe:69:9b:8a:b8:da: e6:cf:36:5a:1d:75:cc:55:e0:4e:61:c3:e1:ab:e4:ff:b6:b2: aa:21:04:c6:99:f2:49:d5:aa:12:b4:94:fb:33:6a:2a:87:1d: a6:45:43:8f:a3:c2:3c:6b:a1:3d:00:fa:66:b9:4f:67:7c:f7: 5d:27:95:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjUwODEwMjI0OTQ5WhcNMjUwODE3MjI0OTQ5WjAYMRYwFAYD VQQDEw02ODk5MjIwZC1mMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbLJ8m1P9weiIuPamHXPt2DOygZYFwycjicP5LANJiM89s5aFQe+4u5mX/Ia tdqOGtWyozomxHNd2e+iHpRHnWCF6/srY2xoBEinBnjTcbGXV2DHl+Xu2z25TOY+ 5aRsSixcTUnhO1FDqJWPdHAeX+w7yaQNsFOkob7Qkw0Te7jE/dZYAE9j6WkjN4Li jPVo569k4jGD8THn8K5t2FmwGd9TlDpA7+qIXVfXB+Vfhq03qSpKpsNgNjM/baJ+ JAIu6rHrRy29fWCMcR1BlobdBaeYs5KlI3zhU/6vp9tGw4qHDIpiJ2a4Na9hmc6N XlBLJ/5c3Je8YA35Opq+JC1d0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmtUea0 eGPL+z9StQqLWFTf9Q/SMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSrqvjrcIPShGFLM98bo2mOLC9iYwFCJRzXWtijsE4KT12hao0ckCu nE2Iq/NQb1Pjk/VpGUluUwVGmA9m6IEC4spWWLdu8HusbcSliRFeGHbHi7ObP0U5 TSO4+8+fWg+GgazUyuqrttzVHKOmBhKurwBV/fDjKDkuNOBGBl0c7BJvrx4Lv9qx 4PdGsE0tixJ9y17LoZo36B1geIFk7BKngSyWC32Y822GgqJt5hTF+mDwdqrdChfO MDCsATHZhgT+aZuKuNrmzzZaHXXMVeBOYcPhq+T/trKqIQTGmfJJ1aoStJT7M2oq hx2mRUOPo8I8a6E9APpmuU9nfPddJ5WE -----END CERTIFICATE-----Generated at Mon Aug 11 14:49:53 2025 by rpki-client