$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft File: jDgUcj_HVempuhvDNWZKUZu8HO4.mft (raw, json) Hash identifier: 9ePtLIx3S5iRs79xV6kYwjCo5Ogvoh6UJHXq7YR0o2E= Subject key identifier: DE:CA:AA:40:60:BC:E7:2D:7B:2A:4F:6C:D8:E1:FB:20:EA:EC:E7:F6 Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE Certificate issuer: /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft Manifest number: 04BA Signing time: Wed 13 Aug 2025 00:23:11 +0000 Manifest this update: Wed 13 Aug 2025 00:23:11 +0000 Manifest next update: Wed 20 Aug 2025 00:23:11 +0000 Files and hashes: 1: jDgUcj_HVempuhvDNWZKUZu8HO4.crl (hash: /iur3t0zQh4KUHObSiifi2cNfGbGYw9yGpViJCfFkw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C40D, serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Validity Not Before: Aug 13 00:23:11 2025 GMT Not After : Aug 20 00:23:11 2025 GMT Subject: CN=689bdaef-33e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:e7:a3:ae:dc:ee:4b:ef:e9:0b:af:df:a7: 40:81:7e:a5:b6:15:bb:61:5e:19:32:0d:1a:b3:2d: 6f:6d:1f:02:98:91:4b:a9:ad:80:53:70:7e:24:74: b3:12:c6:70:4a:d6:a0:8b:82:59:9a:29:98:15:7f: 57:59:9c:76:f8:f2:ee:de:41:0f:47:19:4f:9d:cf: 65:1e:6d:8c:22:3e:cd:66:99:df:30:05:83:ce:62: 9c:83:01:da:94:1f:22:a1:8d:82:7e:d6:0b:ab:e2: 2c:a6:d7:6a:45:47:53:29:5f:d8:05:df:c2:40:ad: 32:4e:10:32:a0:33:5a:76:70:3b:87:01:20:5c:85: c5:1e:17:8a:04:ad:01:e7:dd:41:34:49:e9:34:d5: a1:58:b7:f6:82:31:b6:1a:f5:b1:cb:11:d4:0b:fc: 29:cd:d1:65:3e:c8:c0:10:bf:73:b8:5d:3f:35:0a: 2c:d1:6c:97:0d:bf:c1:eb:6c:68:04:f2:7d:ac:7f: cb:d1:c6:6a:dc:5f:ed:60:ac:78:bb:59:ad:19:8a: 5c:44:9b:64:92:11:2a:b0:37:fb:63:9c:72:f9:58: 68:87:f5:7e:d2:2d:7f:9a:46:f8:45:f0:f5:da:17: e8:bf:ed:81:52:a6:82:12:f0:2d:e8:e1:fb:47:2a: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:AA:40:60:BC:E7:2D:7B:2A:4F:6C:D8:E1:FB:20:EA:EC:E7:F6 X509v3 Authority Key Identifier: keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:a1:b4:c1:e0:cc:77:f9:e4:e1:6c:00:67:20:db:13:03: 61:93:8b:67:51:24:2b:4b:e5:0a:6e:23:f4:ad:57:0b:00:b2: 48:89:0d:59:67:1f:9e:5c:b8:60:90:66:de:b9:c4:3a:0c:a0: b4:50:77:79:b0:ae:a8:2f:b5:48:e5:a7:0f:22:29:74:f5:af: af:5e:6c:90:16:4c:fc:41:14:c6:ad:d3:fb:40:76:81:db:9f: 23:b3:33:5c:ab:2c:52:97:4e:e0:f5:93:66:7e:8b:4a:7d:4b: 73:8b:96:1a:62:74:d2:0a:e2:ae:94:e8:71:dd:09:68:7b:4f: 63:eb:01:68:3d:9a:7c:d7:08:16:6a:82:83:2b:b2:0e:47:df: 67:24:c4:e0:5a:ca:39:ef:b7:ca:0b:a2:d7:22:f9:b0:5b:7b: b3:df:3d:43:b0:52:b5:1c:4a:da:7a:e1:fb:4b:26:7c:63:db: 6c:49:36:bd:31:fc:8a:9f:99:5c:ea:c5:8d:ee:e3:f8:1d:3d: 2b:61:e6:4b:6b:43:1f:e8:ea:34:1c:c0:a9:0b:0b:e0:49:49: e6:13:93:bb:ea:8f:b4:eb:61:84:02:f2:b9:bc:42:a2:f2:09: 9a:cc:c2:c5:21:89:47:45:80:70:8a:29:2c:f3:a5:c3:56:a3: 1b:1b:02:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MEQxMTAvBgNVBAUTKDhDMzgxNDcyM0ZDNzU1RTlBOUJBMUJDMzM1NjY0QTUx OUJCQzFDRUUwHhcNMjUwODEzMDAyMzExWhcNMjUwODIwMDAyMzExWjAYMRYwFAYD VQQDEw02ODliZGFlZi0zM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1bno67c7kvv6Quv36dAgX6lthW7YV4ZMg0asy1vbR8CmJFLqa2AU3B+JHSz EsZwStagi4JZmimYFX9XWZx2+PLu3kEPRxlPnc9lHm2MIj7NZpnfMAWDzmKcgwHa lB8ioY2CftYLq+IsptdqRUdTKV/YBd/CQK0yThAyoDNadnA7hwEgXIXFHheKBK0B 591BNEnpNNWhWLf2gjG2GvWxyxHUC/wpzdFlPsjAEL9zuF0/NQos0WyXDb/B62xo BPJ9rH/L0cZq3F/tYKx4u1mtGYpcRJtkkhEqsDf7Y5xy+Vhoh/V+0i1/mkb4RfD1 2hfov+2BUqaCEvAt6OH7RyradwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7KqkBg vOcteypPbNjh+yDq7Of2MB8GA1UdIwQYMBaAFIw4FHI/x1XpqbobwzVmSlGbvBzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQwRC81MEY3NzVBNjNC Q0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZlbXB1aHZETldaS1VadThI TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEZ1Vjal9IVmVtcHVodkROV1pLVVp1OEhPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQwRC81MEY3NzVBNjNCQ0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZl bXB1aHZETldaS1VadThITzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD/6G0weDMd/nk4WwAZyDbEwNhk4tnUSQrS+UKbiP0rVcLALJIiQ1Z Zx+eXLhgkGbeucQ6DKC0UHd5sK6oL7VI5acPIil09a+vXmyQFkz8QRTGrdP7QHaB 258jszNcqyxSl07g9ZNmfotKfUtzi5YaYnTSCuKulOhx3Qloe09j6wFoPZp81wgW aoKDK7IOR99nJMTgWso577fKC6LXIvmwW3uz3z1DsFK1HEraeuH7SyZ8Y9tsSTa9 MfyKn5lc6sWN7uP4HT0rYeZLa0Mf6Oo0HMCpCwvgSUnmE5O76o+062GEAvK5vEKi 8gmazMLFIYlHRYBwiiks86XDVqMbGwJO -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:47 2025 by rpki-client