$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: hSf+8+t1j1pH7nAcIxAUGCzrLUPj/2rRYCL2fNuDxxY= Subject key identifier: BE:A2:8D:5F:BF:D9:B4:A8:CE:41:0E:74:57:57:32:9F:5C:E1:F9:EE Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0D65 Signing time: Sun 10 Aug 2025 17:59:11 +0000 Manifest this update: Sun 10 Aug 2025 17:59:11 +0000 Manifest next update: Sun 17 Aug 2025 17:59:11 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: +VBugvpJAnI3tsIbh5XL9XRXKIIUydbJz19+GretKus=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: Aug 10 17:59:11 2025 GMT Not After : Aug 17 17:59:11 2025 GMT Subject: CN=6898ddef-3901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:74:b6:d1:5b:51:05:5d:dd:86:b5:c2:db: 1e:48:ff:87:26:0e:d5:9a:86:2d:64:71:a3:22:fe: 6a:c2:42:80:99:1e:d6:cb:e1:32:2b:a5:49:12:b9: e7:01:5e:e6:b5:fe:68:0a:ec:b1:ac:70:41:7f:93: f8:66:4c:42:3a:be:c4:83:ed:98:8c:1c:89:6b:56: 1e:15:b8:4e:d6:fc:0b:37:65:34:10:b9:b9:57:bf: d2:fe:f4:23:1a:26:6e:22:7c:0b:52:89:a2:91:a5: 56:1e:1c:2a:ac:fa:ba:9e:24:19:56:2b:c5:e1:07: ee:60:0e:0f:ea:4c:91:5c:a3:dd:1e:b5:38:42:7f: c7:c4:c1:1b:55:57:5e:66:22:cb:42:81:7c:75:37: 5c:bb:16:cc:a8:97:39:90:8d:81:4b:f2:2a:c1:87: 9b:4d:c3:5e:fb:13:bf:ca:77:22:30:ae:a0:10:76: 3a:48:4a:9f:94:da:a7:78:f3:e1:fe:04:4a:62:d1: bb:de:94:2a:93:bb:96:56:fb:f0:cc:af:25:a0:46: a9:27:39:9f:c4:dd:a4:57:02:e4:b4:fc:65:be:82: 81:f0:da:13:02:ce:1c:15:8b:a2:14:ee:61:ee:1b: 87:f8:8f:4b:90:31:1a:b8:97:f4:a5:f6:06:62:2c: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:8D:5F:BF:D9:B4:A8:CE:41:0E:74:57:57:32:9F:5C:E1:F9:EE X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:df:52:f8:4c:47:c4:f7:44:4f:47:da:9c:12:80:be:98:7c: d8:29:f6:7d:46:e8:3e:16:dd:18:c1:29:a2:d9:d8:bc:2c:8e: 19:76:37:6b:8e:e5:1b:f1:86:ff:23:09:c2:a5:e3:a7:4a:ae: 23:40:2d:70:7d:92:db:e0:3c:fe:5d:af:5f:97:eb:87:f4:4c: 2b:9f:5e:b6:6f:20:32:83:aa:3b:19:0a:48:29:10:66:4c:eb: db:bc:c5:34:5c:7f:49:55:ad:fd:40:79:e6:c1:6b:08:d6:03: 1e:40:d9:84:21:80:e7:5d:23:4f:70:01:a9:67:92:6d:a7:49: bd:c9:49:ec:d6:a5:70:8d:76:c5:cf:ab:8d:4a:e0:42:2d:7d: 91:ec:88:d2:9f:ff:3b:6b:4a:7d:37:fd:e7:cb:ac:4e:25:46: 99:44:7e:a4:e1:51:f0:99:60:96:40:60:34:d2:1e:ba:c3:e2: f8:7a:19:48:4f:70:b1:8f:f6:50:56:95:b4:c9:20:6b:62:90: d3:27:a3:cf:72:04:5c:3f:0a:83:aa:8b:64:54:7f:03:50:b7: d7:39:03:95:77:ed:b0:d2:47:8d:a2:c6:1f:64:20:16:61:76: c4:79:58:ed:9f:b0:e0:96:de:95:e9:c1:d9:03:84:6b:44:a5: ab:a8:a2:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUwODEwMTc1OTExWhcNMjUwODE3MTc1OTExWjAYMRYwFAYD VQQDEw02ODk4ZGRlZi0zOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwJ0ttFbUQVd3Ya1wtseSP+HJg7VmoYtZHGjIv5qwkKAmR7Wy+EyK6VJErnn AV7mtf5oCuyxrHBBf5P4ZkxCOr7Eg+2YjByJa1YeFbhO1vwLN2U0ELm5V7/S/vQj GiZuInwLUomikaVWHhwqrPq6niQZVivF4QfuYA4P6kyRXKPdHrU4Qn/HxMEbVVde ZiLLQoF8dTdcuxbMqJc5kI2BS/IqwYebTcNe+xO/ynciMK6gEHY6SEqflNqnePPh /gRKYtG73pQqk7uWVvvwzK8loEapJzmfxN2kVwLktPxlvoKB8NoTAs4cFYuiFO5h 7huH+I9LkDEauJf0pfYGYiwVIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6ijV+/ 2bSozkEOdFdXMp9c4fnuMB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ31L4TEfE90RPR9qcEoC+mHzYKfZ9Rug+Ft0YwSmi2di8LI4Zdjdr juUb8Yb/IwnCpeOnSq4jQC1wfZLb4Dz+Xa9fl+uH9Ewrn162byAyg6o7GQpIKRBm TOvbvMU0XH9JVa39QHnmwWsI1gMeQNmEIYDnXSNPcAGpZ5Jtp0m9yUns1qVwjXbF z6uNSuBCLX2R7IjSn/87a0p9N/3ny6xOJUaZRH6k4VHwmWCWQGA00h66w+L4ehlI T3Cxj/ZQVpW0ySBrYpDTJ6PPcgRcPwqDqotkVH8DULfXOQOVd+2w0keNosYfZCAW YXbEeVjtn7Dglt6V6cHZA4RrRKWrqKJJ -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:32 2025 by rpki-client