$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft File: jwhmaAoC5LoOvh6PIljuKBzUPv4.mft (raw, json) Hash identifier: O1zvz09qH+zg4JvknaVIMscE59gTiWLZd1Yvr0fakaA= Subject key identifier: 73:F3:9D:A4:64:88:B3:0E:58:C2:16:55:51:EE:33:76:D8:AA:11:76 Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE Certificate issuer: /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft Manifest number: 12 Signing time: Sat 09 Aug 2025 08:33:10 +0000 Manifest this update: Sat 09 Aug 2025 08:33:09 +0000 Manifest next update: Sat 16 Aug 2025 08:33:09 +0000 Files and hashes: 1: jwhmaAoC5LoOvh6PIljuKBzUPv4.crl (hash: GVcqlchr3YZX1t9shGvSfW2m0uQ5egu1Bhh2F51HIp0=) 2: 9D1CBEB65D8111F0A04DD550C4F9AE02.roa (hash: WD6JX9ZeI2PyoWb+KcklrsjlIHW009aV5ZILyIaO+Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE Validity Not Before: Aug 9 08:33:09 2025 GMT Not After : Aug 16 08:33:09 2025 GMT Subject: CN=689707c5-66d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:f8:88:d9:fd:8e:db:3f:38:95:fe:b2:7c: 04:9e:59:71:fd:05:16:92:a6:7e:6a:d0:a6:29:c5: 45:36:11:be:a9:e4:99:6d:4b:a9:b5:7e:2f:f0:d6: f8:ad:cc:db:7b:0a:a6:79:50:ef:af:1f:97:11:a2: c2:3e:3a:b1:fc:85:41:12:55:a0:4a:6f:68:bf:86: 55:91:e4:9b:43:a0:31:da:85:9f:da:54:a9:27:3a: 12:2a:33:f1:b0:a0:78:c8:c2:2a:e9:a1:f4:38:1b: 6b:dc:47:c4:4d:07:cd:3f:ad:ea:3a:40:da:7d:06: e1:83:3a:9d:83:45:3f:19:74:02:a3:32:2d:88:ec: 4a:a0:3a:3d:6f:84:9c:e8:dd:7b:b3:39:e1:88:f7: f4:62:08:b2:fb:d1:a7:a3:83:c5:ae:11:41:f3:30: 56:f5:5b:6b:c4:a5:eb:ea:44:25:f5:3e:03:79:eb: 93:cf:e3:bb:72:9e:ae:86:9a:25:c7:c7:e1:54:92: 5b:bd:78:fc:b7:4e:c6:ae:3f:5c:95:42:42:ec:7e: 2a:70:d4:7f:3a:b7:cf:a7:c1:16:20:86:50:06:7a: 2f:85:eb:3f:1a:51:a2:25:0d:4b:63:66:bb:f4:e3: c6:d7:7c:65:a4:4d:cd:4d:5b:e4:21:4f:77:c3:a8: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F3:9D:A4:64:88:B3:0E:58:C2:16:55:51:EE:33:76:D8:AA:11:76 X509v3 Authority Key Identifier: keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6b:77:fa:a1:04:a4:1d:e4:4a:bf:81:dd:36:24:13:18:fb: 39:f2:f4:83:eb:9f:dc:1b:20:5f:69:b7:b2:7d:ac:4c:6b:f6: af:a9:fc:61:39:2d:68:2b:77:a9:bb:56:11:51:7a:07:46:7b: 47:23:e9:20:01:db:e1:14:9c:47:3f:03:ee:51:ce:bc:83:1f: e0:26:69:e6:7b:69:44:4f:81:de:bd:1a:af:4a:14:4e:98:3a: 39:18:5a:ca:5c:90:95:69:e2:2b:0b:f1:56:84:f1:4b:26:e1: af:b2:b6:dd:ba:76:d1:e7:a6:c8:68:e7:fa:ac:21:23:b8:63: 1b:62:b3:dd:60:b1:05:c2:08:75:62:d8:4e:54:f8:90:02:fb: 84:ac:1b:56:e2:8a:d3:ef:06:54:8f:44:4c:0b:ce:cf:04:d4: 24:2d:8f:bd:b3:22:e0:72:98:e3:20:6e:66:f3:40:7b:8a:09: 4b:b1:96:2a:2a:41:63:9b:45:a8:8e:c6:ae:d5:57:30:c6:3b: d2:55:30:7c:5a:ec:07:69:57:ce:2d:92:22:da:5b:c9:ca:f5: d6:bf:13:0f:36:d7:4d:81:51:b1:ba:85:e9:a0:24:8f:78:6d: 9c:7f:7f:c3:44:68:42:ed:f9:e7:72:0a:78:a8:17:f5:bd:f0: 54:a4:16:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoOEYwODY2NjgwQTAyRTRCQTBFQkUxRThGMjI1OEVFMjgx Q0Q0M0VGRTAeFw0yNTA4MDkwODMzMDlaFw0yNTA4MTYwODMzMDlaMBgxFjAUBgNV BAMTDTY4OTcwN2M1LTY2ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr5/iI2f2O2z84lf6yfASeWXH9BRaSpn5q0KYpxUU2Eb6p5JltS6m1fi/w1vit zNt7CqZ5UO+vH5cRosI+OrH8hUESVaBKb2i/hlWR5JtDoDHahZ/aVKknOhIqM/Gw oHjIwirpofQ4G2vcR8RNB80/reo6QNp9BuGDOp2DRT8ZdAKjMi2I7EqgOj1vhJzo 3XuzOeGI9/RiCLL70aejg8WuEUHzMFb1W2vEpevqRCX1PgN565PP47tynq6GmiXH x+FUklu9ePy3TsauP1yVQkLsfipw1H86t8+nwRYghlAGei+F6z8aUaIlDUtjZrv0 48bXfGWkTc1NW+QhT3fDqEN9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc/OdpGSI sw5YwhZVUe4zdtiqEXYwHwYDVR0jBBgwFoAUjwhmaAoC5LoOvh6PIljuKBzUPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzIyMDY2OTdBNUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL2p3aG1hQW9DNUxvT3ZoNlBJbGp1S0J6VVB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvandobWFBb0M1TG9Pdmg2UElsanVLQnpVUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzIyMDY2OTdBNUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL2p3aG1hQW9DNUxv T3ZoNlBJbGp1S0J6VVB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHprd/qhBKQd5Eq/gd02JBMY+zny9IPrn9wbIF9pt7J9rExr9q+p/GE5 LWgrd6m7VhFRegdGe0cj6SAB2+EUnEc/A+5RzryDH+AmaeZ7aURPgd69Gq9KFE6Y OjkYWspckJVp4isL8VaE8Usm4a+ytt26dtHnpsho5/qsISO4Yxtis91gsQXCCHVi 2E5U+JAC+4SsG1biitPvBlSPREwLzs8E1CQtj72zIuBymOMgbmbzQHuKCUuxlioq QWObRaiOxq7VVzDGO9JVMHxa7AdpV84tkiLaW8nK9da/Ew82102BUbG6hemgJI94 bZx/f8NEaELt+edyCnioF/W98FSkFtU= -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:10 2025 by rpki-client