$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft File: JqEcV_UL86H3onhKHUlNXomDYc0.mft (raw, json) Hash identifier: u2ts7xeUt/rTnTgfQZmKBp6HGZZEjhtJmZFGll/XDxg= Subject key identifier: CC:BA:44:C3:10:86:7E:FE:51:E6:A6:E8:6D:1C:CF:2E:78:FD:29:27 Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD Certificate issuer: /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft Manifest number: 17 Signing time: Sat 09 Aug 2025 08:28:58 +0000 Manifest this update: Sat 09 Aug 2025 08:28:58 +0000 Manifest next update: Sat 16 Aug 2025 08:28:58 +0000 Files and hashes: 1: JqEcV_UL86H3onhKHUlNXomDYc0.crl (hash: nvSwMcZlxzqdWORdklXYikDhB91kOdrCdOkHtBUsAjc=) 2: 0CEE97B4563411F09FBF271BC4F9AE02.roa (hash: +5nsa0L3pEvZ7rt0LONhGmy6TtSxJKovU9i/lVSRT84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Validity Not Before: Aug 9 08:28:58 2025 GMT Not After : Aug 16 08:28:58 2025 GMT Subject: CN=689706ca-9b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:ea:9d:05:b1:bf:86:bc:3f:00:0f:e3:7b: b9:2b:52:e9:c9:88:04:5d:6d:7d:b8:79:3f:49:38: bd:4b:34:e4:e2:49:12:c3:2f:e0:69:e8:0b:55:5b: f6:e9:80:cb:1c:0e:36:9a:48:6f:47:bb:9a:b9:8f: f1:8c:43:23:95:3f:3f:52:76:96:b7:37:4e:7b:c3: a4:5f:a9:75:f6:22:7f:a7:3c:30:83:7d:bb:de:2c: 16:0b:e6:70:6c:b1:1f:bd:3c:96:34:36:78:3f:3b: 6b:55:6d:6f:9c:6a:fa:02:af:40:db:e3:10:05:a9: b4:98:64:33:87:c1:b1:27:de:a5:54:7d:ce:44:02: 9e:e2:f8:f5:22:fe:d0:91:71:9b:06:3c:5e:35:58: 9a:91:50:02:32:c7:4a:1c:07:21:07:31:c0:b2:67: ac:e1:0d:f9:d7:05:d7:96:c5:f2:51:c0:2e:55:20: a3:cb:af:3e:8e:e0:a0:bd:5c:b7:6c:26:db:2f:b9: 7d:73:0a:d1:6b:a4:1e:bf:8d:51:a5:dd:04:b2:f8: 68:55:8c:ff:15:b0:13:1c:5a:f8:b9:ca:bd:a2:cf: 21:fe:25:20:97:31:42:40:a8:50:c5:4b:35:ac:f0: 10:9b:29:60:e4:1f:69:39:67:71:5e:28:25:f0:f3: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:44:C3:10:86:7E:FE:51:E6:A6:E8:6D:1C:CF:2E:78:FD:29:27 X509v3 Authority Key Identifier: keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:cd:eb:42:1f:ce:99:d9:2b:3b:cc:be:b2:95:0b:af:31: 69:40:5f:31:1b:32:e4:81:43:ad:ae:41:38:c7:b6:48:e6:1e: 3d:0e:9d:74:b4:b0:88:8b:c4:c0:f7:8c:7c:6d:58:15:f8:05: ea:3c:d5:ad:d6:c3:a9:40:70:da:9c:f9:9e:8e:d6:56:90:3f: 42:bd:23:71:4a:13:a7:6c:06:43:8d:4a:d4:3e:bb:da:36:71: 9e:41:ee:13:b9:70:6a:58:88:20:3b:96:37:d3:59:fd:67:6d: 3a:10:1c:bc:77:90:49:be:a5:f2:9f:97:6c:b9:54:11:ff:04: fb:e4:d5:8c:44:e4:74:0a:56:f6:d4:e9:e1:ec:53:2e:f0:30: 10:64:11:5d:ec:a6:54:ed:cf:80:62:f2:c2:a1:84:68:5b:b4: 12:f3:61:ba:99:2b:cd:c7:90:b0:08:d6:1f:52:ec:77:06:5a: f4:a0:6f:b6:12:d9:3d:2a:ec:72:d9:e7:1b:4d:9b:e1:14:33: 84:71:82:01:ab:50:56:c1:fb:b0:f5:98:fb:8c:26:51:9e:d5: 7b:29:33:90:05:80:b5:82:4e:86:fa:42:ec:46:fd:9d:c7:16: 9d:83:cb:96:49:1c:ef:e0:88:b9:00:98:10:48:e7:50:37:83: c0:10:f2:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoMjZBMTFDNTdGNTBCRjNBMUY3QTI3ODRBMUQ0OTRENUU4 OTgzNjFDRDAeFw0yNTA4MDkwODI4NThaFw0yNTA4MTYwODI4NThaMBgxFjAUBgNV BAMTDTY4OTcwNmNhLTliNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEjeqdBbG/hrw/AA/je7krUunJiARdbX24eT9JOL1LNOTiSRLDL+Bp6AtVW/bp gMscDjaaSG9Hu5q5j/GMQyOVPz9Sdpa3N057w6RfqXX2In+nPDCDfbveLBYL5nBs sR+9PJY0Nng/O2tVbW+cavoCr0Db4xAFqbSYZDOHwbEn3qVUfc5EAp7i+PUi/tCR cZsGPF41WJqRUAIyx0ocByEHMcCyZ6zhDfnXBdeWxfJRwC5VIKPLrz6O4KC9XLds JtsvuX1zCtFrpB6/jVGl3QSy+GhVjP8VsBMcWvi5yr2izyH+JSCXMUJAqFDFSzWs 8BCbKWDkH2k5Z3FeKCXw8003AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzLpEwxCG fv5R5qbobRzPLnj9KScwHwYDVR0jBBgwFoAUJqEcV/UL86H3onhKHUlNXomDYc0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0VCMEY3NThFNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZIM29uaEtIVWxOWG9tRFlj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnFFY1ZfVUw4Nkgzb25oS0hVbE5Yb21EWWMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0VCMEY3NThFNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZI M29uaEtIVWxOWG9tRFljMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALnqzetCH86Z2Ss7zL6ylQuvMWlAXzEbMuSBQ62uQTjHtkjmHj0OnXS0 sIiLxMD3jHxtWBX4Beo81a3Ww6lAcNqc+Z6O1laQP0K9I3FKE6dsBkONStQ+u9o2 cZ5B7hO5cGpYiCA7ljfTWf1nbToQHLx3kEm+pfKfl2y5VBH/BPvk1YxE5HQKVvbU 6eHsUy7wMBBkEV3splTtz4Bi8sKhhGhbtBLzYbqZK83HkLAI1h9S7HcGWvSgb7YS 2T0q7HLZ5xtNm+EUM4RxggGrUFbB+7D1mPuMJlGe1XspM5AFgLWCTob6QuxG/Z3H Fp2Dy5ZJHO/giLkAmBBI51A3g8AQ8tY= -----END CERTIFICATE-----Generated at Sun Aug 10 13:55:25 2025 by rpki-client