$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: Nq5tpOmZDOPk9O+XI8sRPXPeyzC6tRpWI+6dIeUJP4o= Subject key identifier: FF:F3:6C:FE:8D:22:63:08:42:77:A9:6C:68:03:8E:8B:4E:35:F9:08 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A3F Signing time: Mon 04 Aug 2025 20:01:45 +0000 Manifest this update: Mon 04 Aug 2025 20:01:44 +0000 Manifest next update: Mon 11 Aug 2025 20:01:44 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: oT5dXYIoKN1Uy+L1arr6pU1F99D2N6ryy1PjhobdZSk=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: NYdc2f4yDizOBPmg8EBE/rQVPUKcax5Hh13GoWVtgRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Aug 4 20:01:44 2025 GMT Not After : Aug 11 20:01:44 2025 GMT Subject: CN=689111a8-f04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:f1:9b:a5:71:c7:e7:02:17:2d:d0:93:b5: 9f:15:25:3b:a8:07:ca:3a:4c:77:cc:56:c4:50:37: 9b:eb:18:0e:58:1e:2c:a5:f5:22:c5:0b:b1:8c:f4: ea:15:90:d3:7f:e3:f4:77:fd:34:c9:84:fc:97:53: 9b:b0:c5:a3:c8:6a:5a:41:be:68:b3:e3:96:d4:2e: a1:ed:5f:58:0b:8c:6f:c2:92:de:32:16:c1:8b:be: aa:42:28:7f:b9:de:b7:ac:34:97:23:8a:5b:5a:71: fa:8c:7a:9a:ab:03:75:17:17:1e:62:bc:b8:15:7b: b0:7e:37:5d:89:07:68:f5:a2:62:1e:9b:de:d7:95: 42:9e:f8:a7:67:35:94:83:56:66:cd:9a:9a:ea:a3: 35:b2:8d:c1:d5:db:28:cc:7b:a4:3d:18:49:13:9d: ea:74:c3:b9:54:c1:14:14:5c:d9:77:60:29:63:0e: b2:c6:83:63:c2:56:8c:5c:ea:96:37:08:ca:88:ed: d4:df:51:ae:20:05:2e:76:3d:47:4f:b1:fe:23:73: 18:72:c8:a2:b3:7e:62:c5:df:65:c0:67:50:41:0b: 9e:eb:be:37:0a:84:09:6c:60:51:15:be:2d:8e:7b: c2:71:95:37:c3:84:11:95:71:af:ae:bd:02:a2:f0: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F3:6C:FE:8D:22:63:08:42:77:A9:6C:68:03:8E:8B:4E:35:F9:08 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:40:f1:b7:35:67:55:fe:50:f2:81:5d:b5:1f:fa:c0:5d:74: ff:a7:61:e8:61:5d:06:ed:c2:f0:d3:65:e9:07:82:5b:b2:55: b0:fb:77:a3:21:93:46:bb:72:22:3e:eb:c2:ac:18:0d:a5:84: 8a:b8:34:59:66:54:86:0a:c2:a9:d5:ba:26:b0:36:ea:c0:4d: 8c:c2:8f:46:14:e3:7d:a1:b1:1c:f1:dd:2c:39:d1:13:1e:3b: ac:bf:98:30:a5:92:da:d2:4b:b1:e4:55:fd:c2:08:57:50:9e: f4:0a:58:32:4b:71:03:14:70:c4:56:81:22:7f:05:5b:0d:c0: 3a:be:10:64:ad:25:e8:18:ba:e1:06:e6:e9:ec:fd:9c:d2:8c: 89:f2:2f:fd:ca:85:ef:6a:f9:aa:9a:86:b0:38:54:47:c3:62: 6d:fa:78:12:d8:89:56:86:56:44:38:13:6c:14:4f:e8:46:11: 47:cc:80:39:69:19:b9:11:f3:13:21:5e:40:4c:fd:d7:12:24: 48:d0:bf:9f:1a:8d:37:57:17:3d:48:93:0b:4b:5f:1b:4f:21: d6:39:47:88:fa:54:05:85:5b:24:dd:fe:0c:20:76:75:da:ce: 56:fe:2b:e3:c3:7f:24:07:4d:dd:c1:bf:d0:2c:4a:a9:50:d7: c3:db:10:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUwODA0MjAwMTQ0WhcNMjUwODExMjAwMTQ0WjAYMRYwFAYD VQQDEw02ODkxMTFhOC1mMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uDxm6Vxx+cCFy3Qk7WfFSU7qAfKOkx3zFbEUDeb6xgOWB4spfUixQuxjPTq FZDTf+P0d/00yYT8l1ObsMWjyGpaQb5os+OW1C6h7V9YC4xvwpLeMhbBi76qQih/ ud63rDSXI4pbWnH6jHqaqwN1FxceYry4FXuwfjddiQdo9aJiHpve15VCnvinZzWU g1ZmzZqa6qM1so3B1dsozHukPRhJE53qdMO5VMEUFFzZd2ApYw6yxoNjwlaMXOqW NwjKiO3U31GuIAUudj1HT7H+I3MYcsiis35ixd9lwGdQQQue6743CoQJbGBRFb4t jnvCcZU3w4QRlXGvrr0CovCLPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/zbP6N ImMIQnepbGgDjotONfkIMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaQPG3NWdV/lDygV21H/rAXXT/p2HoYV0G7cLw02XpB4JbslWw+3ej IZNGu3IiPuvCrBgNpYSKuDRZZlSGCsKp1bomsDbqwE2Mwo9GFON9obEc8d0sOdET Hjusv5gwpZLa0kux5FX9wghXUJ70ClgyS3EDFHDEVoEifwVbDcA6vhBkrSXoGLrh Bubp7P2c0oyJ8i/9yoXvavmqmoawOFRHw2Jt+ngS2IlWhlZEOBNsFE/oRhFHzIA5 aRm5EfMTIV5ATP3XEiRI0L+fGo03Vxc9SJMLS18bTyHWOUeI+lQFhVsk3f4MIHZ1 2s5W/ivjw38kB03dwb/QLEqpUNfD2xA8 -----END CERTIFICATE-----Generated at Wed Aug 6 10:56:51 2025 by rpki-client