$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: WMw3I13brJ9TzAH6L9gIytgwbD6FwnpR04QeWAh4x04= Subject key identifier: 3B:AC:60:D4:0D:3A:46:A9:E1:CC:24:23:46:46:BC:82:D7:A3:42:D2 Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0ACE Signing time: Sun 10 Aug 2025 19:29:32 +0000 Manifest this update: Sun 10 Aug 2025 19:29:31 +0000 Manifest next update: Sun 17 Aug 2025 19:29:31 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: nE4IMMiHZHM+MsOMR/GuJCby/TQovwJ1iDU0tItOg68=) 2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=) 3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=) 4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: Aug 10 19:29:31 2025 GMT Not After : Aug 17 19:29:31 2025 GMT Subject: CN=6898f31b-83f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:b5:2a:8d:6d:06:3b:84:1c:6b:6f:89:ee: 77:75:fd:3a:ce:ba:29:0c:58:78:72:fe:a2:f7:35: dc:59:1b:37:80:ee:64:7a:b6:ab:72:7b:b3:02:04: 5a:55:aa:42:4d:86:d4:72:95:0c:a3:8b:ec:db:91: db:2e:83:12:75:bb:84:ab:ba:3e:71:fa:fe:cd:e5: ab:4f:e8:fa:2c:61:dc:b9:f9:10:86:87:05:23:5d: c0:31:fe:e4:30:08:f3:54:a3:24:64:ec:fc:16:99: 9a:9e:00:e0:f1:18:22:0c:9b:ad:da:70:4f:be:25: c1:b2:65:19:33:f5:b3:ba:39:b4:46:fb:2d:e0:6a: 85:d3:fe:e3:04:c7:86:d4:1b:29:60:f4:42:43:61: fc:ff:b0:6f:e7:e1:88:ed:e9:90:76:ad:41:4f:50: 02:43:5d:76:7c:64:91:be:f4:14:e1:62:c7:41:41: 1a:7d:02:6b:fc:14:ef:2e:b5:e2:42:d0:5d:b8:ea: 5a:38:6f:21:f8:6c:cd:88:40:b5:ab:41:23:86:67: 99:98:6b:83:cd:8f:cc:c6:bc:d0:0a:e4:6a:e7:ed: c7:c0:4c:f7:1a:21:e6:39:e4:fa:15:34:42:4f:38: 05:66:d8:a4:3a:c4:eb:15:60:7b:a4:ef:9e:50:6c: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AC:60:D4:0D:3A:46:A9:E1:CC:24:23:46:46:BC:82:D7:A3:42:D2 X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:53:f4:b5:67:c8:49:d9:b0:45:e7:6e:40:2a:55:d5:9b:c0: 83:57:8a:b2:7d:95:c3:0a:cd:85:80:a5:46:7f:4e:09:9d:c4: bc:ef:7f:34:59:8f:2e:62:c1:99:f5:1d:ae:b7:29:ce:f3:7d: 72:fb:34:71:fa:7b:c8:32:c6:68:c9:67:0b:06:0e:ef:7f:6e: 3d:9a:84:f6:30:c1:13:b2:b0:64:9d:13:8c:a5:92:8e:b1:13: 53:9d:7b:9b:86:ce:3d:15:31:d0:55:b2:05:d4:b6:bc:48:72: e6:a8:59:9f:b3:f8:77:7a:53:26:46:8b:45:e6:e7:1a:6a:c0: 0c:29:b9:7d:3e:42:03:7d:c9:e9:fe:73:0e:fe:7e:5b:c6:cc: bd:34:44:3e:34:4e:fe:f2:7b:49:c1:db:e1:72:91:e2:34:8c: 77:a1:8b:82:af:fe:68:b4:63:47:1c:b2:0a:77:ba:87:c1:d0: 89:6d:9c:bc:ff:96:5d:4d:01:98:dc:5d:0f:11:22:4d:5a:c7: 84:c7:01:90:43:c9:f5:50:04:2a:cc:2a:10:0e:68:5e:25:3d: e0:91:4e:6b:0d:49:f3:3d:31:91:c5:62:b4:2a:3b:62:ba:b2: 33:1b:1d:2f:80:50:19:a0:ed:dd:7c:14:b3:cc:6a:de:f2:fc: 6c:df:5b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjUwODEwMTkyOTMxWhcNMjUwODE3MTkyOTMxWjAYMRYwFAYD VQQDEw02ODk4ZjMxYi04M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv21Ko1tBjuEHGtvie53df06zropDFh4cv6i9zXcWRs3gO5kerarcnuzAgRa VapCTYbUcpUMo4vs25HbLoMSdbuEq7o+cfr+zeWrT+j6LGHcufkQhocFI13AMf7k MAjzVKMkZOz8FpmangDg8RgiDJut2nBPviXBsmUZM/Wzujm0Rvst4GqF0/7jBMeG 1BspYPRCQ2H8/7Bv5+GI7emQdq1BT1ACQ112fGSRvvQU4WLHQUEafQJr/BTvLrXi QtBduOpaOG8h+GzNiEC1q0EjhmeZmGuDzY/MxrzQCuRq5+3HwEz3GiHmOeT6FTRC TzgFZtikOsTrFWB7pO+eUGxGKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDusYNQN Okap4cwkI0ZGvILXo0LSMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3U/S1Z8hJ2bBF525AKlXVm8CDV4qyfZXDCs2FgKVGf04JncS87380 WY8uYsGZ9R2utynO831y+zRx+nvIMsZoyWcLBg7vf249moT2MMETsrBknROMpZKO sRNTnXubhs49FTHQVbIF1La8SHLmqFmfs/h3elMmRotF5ucaasAMKbl9PkIDfcnp /nMO/n5bxsy9NEQ+NE7+8ntJwdvhcpHiNIx3oYuCr/5otGNHHLIKd7qHwdCJbZy8 /5ZdTQGY3F0PESJNWseExwGQQ8n1UAQqzCoQDmheJT3gkU5rDUnzPTGRxWK0Kjti urIzGx0vgFAZoO3dfBSzzGre8vxs31tY -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:26 2025 by rpki-client