$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: chB3D4fXeUteuPUk/8784c1cCTbaLPeOJxr5Xay9oOY= Subject key identifier: AB:A6:3B:6E:33:A1:99:7F:96:97:77:83:04:48:7D:B3:25:87:CF:28 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 07C0 Signing time: Fri 08 Aug 2025 21:33:12 +0000 Manifest this update: Fri 08 Aug 2025 21:33:11 +0000 Manifest next update: Fri 15 Aug 2025 21:33:11 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: AphE90hz2DlMsistuiE2/kBNFkr0yta3Z+izQJsqsj4=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Aug 8 21:33:11 2025 GMT Not After : Aug 15 21:33:11 2025 GMT Subject: CN=68966d17-7d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d8:e0:81:d4:21:a5:d3:fe:4a:28:6a:6f:ec: 25:57:09:9f:4a:a6:95:dd:c4:6c:00:3c:74:d2:a1: 2d:e3:3d:20:08:66:92:e7:5f:68:3a:9a:06:7d:3e: 47:af:9e:9a:a8:30:c2:cc:64:e1:b8:00:1f:ea:44: 2e:0f:c8:a1:99:47:c9:cb:34:b6:5f:b2:58:c8:eb: 0c:98:1a:3b:c0:f4:64:f2:e8:18:b4:21:3d:fa:8e: b3:71:db:6a:13:6e:2c:98:ce:15:84:ca:4c:f0:dc: 3b:f4:44:d0:0b:51:3a:c2:11:47:52:73:42:ae:d6: ec:9c:bf:df:b6:bc:73:d6:6c:18:bd:96:21:eb:7b: 92:1d:40:fd:0c:8c:2d:89:57:4b:60:07:75:e0:e4: e7:79:ce:8a:c2:66:4f:f3:b6:0c:08:1c:ea:95:f3: a8:2c:50:7b:7c:c1:e6:bb:3b:42:49:bf:68:95:32: b6:24:e7:51:33:22:b6:de:4d:70:bb:d1:86:86:5a: ff:34:72:14:e1:4e:9d:e7:52:24:b5:64:37:77:7c: 4b:9c:84:0f:2d:da:53:cf:b1:b7:ba:ac:83:2e:fc: da:ae:00:8e:27:5c:34:82:95:14:bf:5f:0a:65:dd: ee:b8:d0:bd:7a:5a:7a:a4:47:8c:a4:9a:c6:61:42: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A6:3B:6E:33:A1:99:7F:96:97:77:83:04:48:7D:B3:25:87:CF:28 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:45:20:e6:e0:a4:17:cd:35:01:ae:bd:87:67:62:7f:89:3d: 5a:d4:42:7b:56:63:9d:a4:89:09:37:ad:9a:6c:58:9e:df:74: 29:c3:cd:db:af:34:d1:ef:1c:00:4d:f4:4a:60:b6:79:f7:2c: 1c:02:9f:a2:b1:0e:5f:05:26:b4:bb:83:e2:8e:e8:64:80:58: 88:eb:e1:9f:2f:fd:d3:2d:a8:31:91:82:7b:2b:ee:4a:2c:0b: 58:30:53:8a:45:f6:4c:30:19:50:b8:e4:a8:40:ed:cd:db:61: d7:18:22:10:7b:73:77:f8:16:e2:7b:86:ac:02:7c:d1:93:d4: 3a:b7:e9:d9:e8:6a:75:31:c3:c9:15:74:46:e8:cd:12:df:f4: a0:a0:56:35:4a:45:34:18:51:06:5f:5b:69:f8:b3:67:9c:cf: fb:94:72:ae:3d:ba:69:b4:36:b6:a5:2c:23:01:2e:78:97:0f: 9f:74:52:8f:1f:28:2c:fb:dc:96:41:1a:e7:53:96:c6:c6:bf: ac:a7:98:9c:2e:ad:2e:dd:3f:7a:ba:79:36:94:ff:c5:0e:93: c7:a6:1a:a8:df:2b:8a:54:7d:1e:17:51:2e:08:60:0c:95:7d: 93:eb:eb:82:35:b9:18:e3:ee:f2:c8:b3:51:2b:b2:1a:b5:e2: f5:76:20:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUwODA4MjEzMzExWhcNMjUwODE1MjEzMzExWjAYMRYwFAYD VQQDEw02ODk2NmQxNy03ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39jggdQhpdP+Sihqb+wlVwmfSqaV3cRsADx00qEt4z0gCGaS519oOpoGfT5H r56aqDDCzGThuAAf6kQuD8ihmUfJyzS2X7JYyOsMmBo7wPRk8ugYtCE9+o6zcdtq E24smM4VhMpM8Nw79ETQC1E6whFHUnNCrtbsnL/ftrxz1mwYvZYh63uSHUD9DIwt iVdLYAd14OTnec6KwmZP87YMCBzqlfOoLFB7fMHmuztCSb9olTK2JOdRMyK23k1w u9GGhlr/NHIU4U6d51IktWQ3d3xLnIQPLdpTz7G3uqyDLvzargCOJ1w0gpUUv18K Zd3uuNC9elp6pEeMpJrGYUL5wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKumO24z oZl/lpd3gwRIfbMlh88oMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQRSDm4KQXzTUBrr2HZ2J/iT1a1EJ7VmOdpIkJN62abFie33Qpw83b rzTR7xwATfRKYLZ59ywcAp+isQ5fBSa0u4PijuhkgFiI6+GfL/3TLagxkYJ7K+5K LAtYMFOKRfZMMBlQuOSoQO3N22HXGCIQe3N3+Bbie4asAnzRk9Q6t+nZ6Gp1McPJ FXRG6M0S3/SgoFY1SkU0GFEGX1tp+LNnnM/7lHKuPbpptDa2pSwjAS54lw+fdFKP Hygs+9yWQRrnU5bGxr+sp5icLq0u3T96unk2lP/FDpPHphqo3yuKVH0eF1EuCGAM lX2T6+uCNbkY4+7yyLNRK7IateL1diB2 -----END CERTIFICATE-----Generated at Sun Aug 10 18:46:59 2025 by rpki-client