$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json) Hash identifier: y2HM0M/hjTJEWMfvgeMUBvpW8ssuL3bPWY8dkrCPhTA= Subject key identifier: 86:B9:EE:2A:91:CE:BC:CE:11:77:43:B7:4F:00:83:3E:F2:4D:EB:DB Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft Manifest number: 0615 Signing time: Tue 12 Aug 2025 19:04:15 +0000 Manifest this update: Tue 12 Aug 2025 19:04:15 +0000 Manifest next update: Tue 19 Aug 2025 19:04:15 +0000 Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: xQ0dswxsqOMtIMU0ZR17gJ7z2NSK3G5L4Uh5F49sfnI=) 2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: w1O1ZsevC2HzFSEj/1IPY4lUEna5oDbCvbrv+EoKv3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Validity Not Before: Aug 12 19:04:15 2025 GMT Not After : Aug 19 19:04:15 2025 GMT Subject: CN=689b902f-82c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:a0:13:de:59:fe:f6:cd:f6:1f:32:7a:a3: 53:2a:03:b3:51:5b:d7:1c:4e:a2:12:f2:da:06:51: 86:eb:40:bb:5f:23:0e:c6:b4:79:00:30:c1:f1:10: db:be:2e:d9:98:da:ee:df:e8:0b:dd:3c:ea:51:8c: 5c:97:e1:9e:79:2b:b4:34:61:11:75:9b:c3:e5:13: 6d:0e:41:18:c8:e1:59:1e:39:26:5f:8b:d0:e9:83: 9a:d4:a4:f5:42:1e:19:16:f9:3f:67:45:a4:79:4f: e9:03:4e:a2:a7:05:b4:f3:5c:6b:6d:16:66:95:52: 57:88:1a:11:c8:b7:7d:8b:96:9c:5b:e3:61:b4:fa: dc:3b:f1:3c:42:39:60:ca:4c:9e:c8:9b:a9:4c:be: 41:f3:99:90:fd:70:74:f4:00:43:a5:8a:bb:fd:dc: b2:10:69:8e:95:ff:24:81:ba:ca:bb:15:e0:58:64: 6b:50:fd:e5:dc:b3:b8:77:ae:93:e8:41:2a:26:8a: fa:5b:51:25:2a:8f:f3:1f:78:c4:94:61:cd:19:db: fa:88:a9:71:d6:62:38:2b:3a:bf:d9:4f:f4:c9:6b: 55:e1:79:8f:a1:0e:71:80:c9:f3:49:96:ac:71:76: 44:fc:4c:f9:fe:c0:c8:0e:a6:be:a1:45:0f:aa:ec: b7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B9:EE:2A:91:CE:BC:CE:11:77:43:B7:4F:00:83:3E:F2:4D:EB:DB X509v3 Authority Key Identifier: keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:08:77:f8:12:49:51:3c:83:a1:af:52:af:1c:dc:6c:b3:a2: e0:12:7e:6a:a0:ed:6e:45:09:a8:b6:90:31:a8:a7:e0:b3:8d: 65:33:5b:74:61:d6:30:9b:12:f8:d1:60:f6:7f:bc:4a:55:fa: b3:1a:4e:cb:08:e8:f2:1d:51:6b:f1:73:29:40:6c:cd:04:9e: f4:55:80:2c:00:b3:08:99:b5:31:bc:88:30:b4:58:2f:9b:c7: b9:81:24:95:bc:a0:07:86:74:02:53:b7:d6:69:ad:08:80:4f: 96:f0:28:96:42:56:bd:bd:9a:3d:c1:ba:00:17:dc:8e:dd:ab: 7b:15:41:55:2f:fe:ed:b6:66:ce:27:8d:84:74:9a:78:1d:be: 8b:e4:19:b7:84:41:17:f0:bc:e6:56:23:82:d0:f4:34:66:a8: f9:a2:cc:c0:3a:95:09:3e:36:b7:1b:65:f6:ae:43:48:81:93: f7:f1:ee:fa:63:38:ac:7c:c4:7e:15:d8:44:12:b5:38:9d:c3: 9a:88:e6:6e:31:0b:fb:90:89:98:3e:e4:88:3e:6c:56:05:c5: ce:25:2e:de:e5:3c:d5:59:61:83:48:00:b5:40:4a:28:d2:d1: 1e:8c:c0:63:a9:a5:d9:8e:2c:df:0d:8f:d2:01:c7:1a:65:31: 64:b4:23:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE QThFNkQyNTYwHhcNMjUwODEyMTkwNDE1WhcNMjUwODE5MTkwNDE1WjAYMRYwFAYD VQQDEw02ODliOTAyZi04MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17GgE95Z/vbN9h8yeqNTKgOzUVvXHE6iEvLaBlGG60C7XyMOxrR5ADDB8RDb vi7ZmNru3+gL3TzqUYxcl+GeeSu0NGERdZvD5RNtDkEYyOFZHjkmX4vQ6YOa1KT1 Qh4ZFvk/Z0WkeU/pA06ipwW081xrbRZmlVJXiBoRyLd9i5acW+NhtPrcO/E8Qjlg ykyeyJupTL5B85mQ/XB09ABDpYq7/dyyEGmOlf8kgbrKuxXgWGRrUP3l3LO4d66T 6EEqJor6W1ElKo/zH3jElGHNGdv6iKlx1mI4Kzq/2U/0yWtV4XmPoQ5xgMnzSZas cXZE/Ez5/sDIDqa+oUUPquy3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIa57iqR zrzOEXdDt08Agz7yTevbMB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS84MzU1OUM3Q0IyMTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83 QTNGWDZ6bjViYnZham0wbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkCHf4EklRPIOhr1KvHNxss6LgEn5qoO1uRQmotpAxqKfgs41lM1t0 YdYwmxL40WD2f7xKVfqzGk7LCOjyHVFr8XMpQGzNBJ70VYAsALMImbUxvIgwtFgv m8e5gSSVvKAHhnQCU7fWaa0IgE+W8CiWQla9vZo9wboAF9yO3at7FUFVL/7ttmbO J42EdJp4Hb6L5Bm3hEEX8LzmViOC0PQ0Zqj5oszAOpUJPja3G2X2rkNIgZP38e76 YzisfMR+FdhEErU4ncOaiOZuMQv7kImYPuSIPmxWBcXOJS7e5TzVWWGDSAC1QEoo 0tEejMBjqaXZjizfDY/SAccaZTFktCOd -----END CERTIFICATE-----Generated at Wed Aug 13 08:47:19 2025 by rpki-client