$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: xDKGtYJB9lTq5a9K1NrzFlweB9oZl8ui5bDG5VnhxBI= Subject key identifier: 29:48:68:61:E2:F1:C2:63:99:2D:94:34:75:92:BB:8B:69:E6:FF:5B Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: ED Signing time: Mon 11 Aug 2025 05:31:24 +0000 Manifest this update: Mon 11 Aug 2025 05:31:24 +0000 Manifest next update: Mon 18 Aug 2025 05:31:24 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: kJFftpmvQfou1vlQ1uoXLXE4uxmCefr1wxTSIF24nvk=) 2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=) 3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Validity Not Before: Aug 11 05:31:24 2025 GMT Not After : Aug 18 05:31:24 2025 GMT Subject: CN=6899802c-397a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:b4:34:67:2e:db:16:a6:a6:0b:d7:e0:27: 6f:28:e7:fc:d0:00:ce:d4:a8:b6:39:dc:64:db:29: 28:65:6b:c7:7c:5a:67:23:55:d7:c2:36:db:36:3f: 13:91:76:f7:b3:4c:e3:1d:2a:59:3d:77:e5:db:b4: 1b:2b:1b:13:fd:2d:87:0e:11:f0:8c:15:33:d8:0f: f5:1c:84:48:b9:31:2a:37:6e:86:f4:bd:24:47:0c: 5d:d4:67:1e:fd:d4:66:62:e0:00:2f:62:b5:ab:c8: f6:67:0d:e9:99:d9:8d:10:3a:07:85:0e:20:b9:54: cd:b4:fb:e5:fa:ea:0f:bd:28:34:76:d4:72:81:8c: 67:9f:55:7a:7c:80:fc:02:b8:7e:f6:06:72:49:01: 75:a7:b1:4a:e1:20:ec:08:11:d6:b3:aa:fe:f8:74: 30:ea:dd:27:07:18:5b:78:c6:e1:2a:96:a0:43:0f: b1:d9:aa:65:28:13:e0:76:f0:36:d9:92:08:71:74: b7:7c:ef:d8:86:1e:2a:42:83:50:c8:b9:d8:12:86: dd:bc:5e:74:fe:4d:01:4e:61:5c:09:16:60:a7:6f: a4:03:95:cd:b9:89:51:f7:7f:76:83:b1:58:b4:48: d5:19:07:68:cf:08:74:ff:fd:c4:07:9f:35:ad:5b: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:48:68:61:E2:F1:C2:63:99:2D:94:34:75:92:BB:8B:69:E6:FF:5B X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:32:4b:21:95:59:b5:68:75:7e:bd:75:0c:4d:65:88:58:fb: 4d:4a:8a:5c:08:2f:99:fe:be:55:57:8d:42:94:e9:49:2b:03: cd:98:ce:a5:8c:fd:25:e3:a7:8e:04:7d:ae:0c:e9:ab:3c:d5: 7d:9c:29:a2:8b:97:43:0c:a8:12:98:41:35:45:dd:80:1e:4c: 9f:52:eb:0f:2d:f4:1b:aa:18:4c:df:17:cf:31:7f:cf:c4:30: 7d:86:06:86:91:03:df:83:6e:68:8b:ad:ee:7a:d4:1f:c6:ab: fa:c8:f9:07:e0:e0:93:06:98:53:23:61:bb:95:5b:f8:3c:01: 3d:c3:90:bc:dd:62:5c:85:78:15:90:bc:ed:5c:06:93:3a:60: 09:4f:9f:39:4c:c9:0c:9b:82:34:7f:cf:ab:1f:81:05:e3:7a: 13:74:b0:3c:a2:52:ce:da:c9:c0:ef:55:9a:eb:d8:09:30:04: 99:17:31:77:05:85:26:d6:09:e3:2c:4e:d9:af:7b:84:31:7f: ff:4c:a1:53:e4:1e:1d:70:c7:31:21:1c:a5:53:dc:99:28:7d: cd:30:17:9c:64:26:af:db:5d:34:e5:e5:54:b2:c8:80:34:28: de:fe:59:a4:4f:9a:4c:6f:a3:79:ee:32:71:14:26:a5:5c:2f: 3b:44:83:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQUIxMTAvBgNVBAUTKDI2NTcwM0Q4NTkzM0Y0NUQ5QjA0REFCNzcyMzc1ODRG QzkyRDlENDQwHhcNMjUwODExMDUzMTI0WhcNMjUwODE4MDUzMTI0WjAYMRYwFAYD VQQDEw02ODk5ODAyYy0zOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGW0NGcu2xampgvX4CdvKOf80ADO1Ki2Odxk2ykoZWvHfFpnI1XXwjbbNj8T kXb3s0zjHSpZPXfl27QbKxsT/S2HDhHwjBUz2A/1HIRIuTEqN26G9L0kRwxd1Gce /dRmYuAAL2K1q8j2Zw3pmdmNEDoHhQ4guVTNtPvl+uoPvSg0dtRygYxnn1V6fID8 Arh+9gZySQF1p7FK4SDsCBHWs6r++HQw6t0nBxhbeMbhKpagQw+x2aplKBPgdvA2 2ZIIcXS3fO/Yhh4qQoNQyLnYEobdvF50/k0BTmFcCRZgp2+kA5XNuYlR9392g7FY tEjVGQdozwh0//3EB581rVvNPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClIaGHi 8cJjmS2UNHWSu4tp5v9bMB8GA1UdIwQYMBaAFCZXA9hZM/RdmwTat3I3WE/JLZ1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBBQi83NDQ1MjZGNjBG QTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlGMmJCTnEzY2pkWVQ4a3Ru VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlG MmJCTnEzY2pkWVQ4a3RuVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeMkshlVm1aHV+vXUMTWWIWPtNSopcCC+Z/r5VV41ClOlJKwPNmM6l jP0l46eOBH2uDOmrPNV9nCmii5dDDKgSmEE1Rd2AHkyfUusPLfQbqhhM3xfPMX/P xDB9hgaGkQPfg25oi63uetQfxqv6yPkH4OCTBphTI2G7lVv4PAE9w5C83WJchXgV kLztXAaTOmAJT585TMkMm4I0f8+rH4EF43oTdLA8olLO2snA71Wa69gJMASZFzF3 BYUm1gnjLE7Zr3uEMX//TKFT5B4dcMcxIRylU9yZKH3NMBecZCav21005eVUssiA NCje/lmkT5pMb6N57jJxFCalXC87RINV -----END CERTIFICATE-----Generated at Tue Aug 12 14:46:06 2025 by rpki-client