$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json) Hash identifier: LqDvtj7TIgkxHpi3lZX7mEG08cPyANnHPN9oq4w/2Do= Subject key identifier: 30:EE:11:92:BE:CA:9C:C4:A9:38:AA:5E:84:E7:6E:13:F5:85:35:86 Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Certificate serial: 0761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft Manifest number: 075B Signing time: Sun 10 Aug 2025 21:42:01 +0000 Manifest this update: Sun 10 Aug 2025 21:42:01 +0000 Manifest next update: Sun 17 Aug 2025 21:42:01 +0000 Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: YQXRUI97Io6cWqv78STnus1BgvxwHzbp++dyuGNQqqI=) 2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: 1nDYvzLxRQLfDg2+9LpFsB+uny5wVx/68LnNdYTQqaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Validity Not Before: Aug 10 21:42:01 2025 GMT Not After : Aug 17 21:42:01 2025 GMT Subject: CN=68991229-deb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:7f:53:ff:0e:dc:ed:89:cc:2b:0c:ae:14: 33:47:bc:f4:78:53:fc:33:09:d9:9f:f9:07:9e:5e: e3:a6:96:52:13:04:00:a1:77:23:b8:a5:35:3d:27: c8:1a:ca:ff:e9:d3:e2:1c:7d:b1:a6:5b:ca:ae:b5: f9:36:06:3f:55:12:33:c1:80:c2:9b:cf:e8:a3:1c: 21:12:91:25:f2:de:3f:8a:74:36:f9:f4:d4:89:fd: 66:c2:4d:45:a3:df:e9:a3:46:ab:50:43:4d:4a:c6: 27:b9:e0:50:a5:6d:ba:3c:1c:61:6a:32:ba:24:56: f9:2f:16:0f:bc:5c:47:9a:30:76:96:5a:83:95:c0: 6f:35:77:a5:4a:d9:d2:35:72:ab:0c:e0:b0:2a:35: b9:93:06:97:54:6b:6b:d7:d0:61:f7:13:68:fc:39: 1a:78:08:f3:79:68:00:29:37:09:74:2f:02:14:0f: d6:93:fc:b3:45:e6:78:b4:96:85:d6:d0:be:50:ad: 10:be:f5:cc:33:8e:2e:d8:c7:79:3a:5a:c3:3b:47: 7f:65:56:98:96:48:aa:d3:f5:8d:a0:47:be:30:20: 08:b1:bd:26:ad:31:57:0e:c1:0c:54:f1:60:a8:ec: 57:b2:87:9e:68:2a:90:2a:1a:95:b8:7c:67:0c:e5: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EE:11:92:BE:CA:9C:C4:A9:38:AA:5E:84:E7:6E:13:F5:85:35:86 X509v3 Authority Key Identifier: keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:68:14:c5:9b:6a:24:6d:15:b7:bf:28:6f:70:9c:c5:7d:14: c2:60:22:41:d7:00:76:56:19:11:02:54:68:ef:2c:69:36:ac: 14:e7:31:79:cc:b8:ed:62:62:1d:52:8e:f3:e9:77:65:1d:99: 68:f9:81:68:2a:34:ef:59:60:ad:68:45:8e:26:82:a6:16:76: d3:dd:d7:b2:5c:6b:e5:65:41:47:9d:db:b1:71:3d:ac:6d:db: 6a:a4:86:6b:a7:09:19:44:b5:bd:76:95:b0:57:45:d3:81:56: 04:5c:4b:2f:a5:b5:38:5c:84:4c:57:16:83:8f:ec:e7:69:f4: 05:00:e1:af:a0:15:87:a8:1e:a0:a7:6c:51:27:bd:c4:cc:39: be:b7:f0:46:a6:da:53:bf:c1:45:62:73:04:fa:96:31:d9:d3: 95:f8:46:d9:4c:6a:20:9f:6f:58:15:da:5f:16:8a:fa:4c:c1: 09:c0:a1:e6:75:d3:6e:8d:86:1c:4d:82:b9:cc:9f:1e:59:03: 56:6f:12:8a:43:da:b6:31:70:11:bb:5d:35:72:db:0a:5e:d6: ba:2f:79:17:1d:d7:95:32:d1:82:ef:ad:73:ea:3d:9a:91:34: d7:b0:a3:4f:ec:7f:49:ac:53:cf:56:0e:e8:ea:c9:4d:d1:bd: b0:fe:ff:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx QjQ1NzgxMTUwHhcNMjUwODEwMjE0MjAxWhcNMjUwODE3MjE0MjAxWjAYMRYwFAYD VQQDEw02ODk5MTIyOS1kZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqR/U/8O3O2JzCsMrhQzR7z0eFP8MwnZn/kHnl7jppZSEwQAoXcjuKU1PSfI Gsr/6dPiHH2xplvKrrX5NgY/VRIzwYDCm8/ooxwhEpEl8t4/inQ2+fTUif1mwk1F o9/po0arUENNSsYnueBQpW26PBxhajK6JFb5LxYPvFxHmjB2llqDlcBvNXelStnS NXKrDOCwKjW5kwaXVGtr19Bh9xNo/DkaeAjzeWgAKTcJdC8CFA/Wk/yzReZ4tJaF 1tC+UK0QvvXMM44u2Md5OlrDO0d/ZVaYlkiq0/WNoEe+MCAIsb0mrTFXDsEMVPFg qOxXsoeeaCqQKhqVuHxnDOWy5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDuEZK+ ypzEqTiqXoTnbhP1hTWGMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0 N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHaBTFm2okbRW3vyhvcJzFfRTCYCJB1wB2VhkRAlRo7yxpNqwU5zF5 zLjtYmIdUo7z6XdlHZlo+YFoKjTvWWCtaEWOJoKmFnbT3deyXGvlZUFHnduxcT2s bdtqpIZrpwkZRLW9dpWwV0XTgVYEXEsvpbU4XIRMVxaDj+znafQFAOGvoBWHqB6g p2xRJ73EzDm+t/BGptpTv8FFYnME+pYx2dOV+EbZTGogn29YFdpfFor6TMEJwKHm ddNujYYcTYK5zJ8eWQNWbxKKQ9q2MXARu101ctsKXta6L3kXHdeVMtGC761z6j2a kTTXsKNP7H9JrFPPVg7o6slN0b2w/v8C -----END CERTIFICATE-----Generated at Mon Aug 11 07:32:01 2025 by rpki-client