$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: SNlYgIe0yZD/ldBA1vncQ2ssyD4nD29NbAUjd4jk0Ro= Subject key identifier: 70:1B:9A:0A:09:16:CA:AB:98:CB:35:67:E3:53:8A:C5:91:03:21:BB Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: BB Signing time: Thu 07 Aug 2025 06:28:00 +0000 Manifest this update: Thu 07 Aug 2025 06:28:00 +0000 Manifest next update: Thu 14 Aug 2025 06:28:00 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: pAS82c1dObLg95XEnB+qhSvEjJxI8hakXkaVg5SpDyY=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Aug 7 06:28:00 2025 GMT Not After : Aug 14 06:28:00 2025 GMT Subject: CN=68944770-2988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:de:99:39:24:00:a3:e4:fb:7d:75:7f:a2: 93:ea:5c:20:55:e2:e8:34:45:91:8e:7f:52:f6:c8: 25:2b:59:45:34:71:61:fb:2a:d1:44:63:74:dd:b9: 36:5c:24:10:3c:b4:de:78:a3:fb:b9:6e:70:31:b7: ea:c2:f3:ba:58:1d:ba:33:2c:bf:d4:67:c4:89:1b: 87:f2:5f:09:b1:4f:fb:0f:69:01:40:61:f4:78:17: 00:75:38:0a:b4:42:01:78:0b:55:d5:4d:dd:24:b0: fe:9f:49:43:57:56:8a:03:dc:05:01:e9:9e:5e:c7: b7:fa:41:67:2d:b4:2c:b5:c4:52:04:75:4f:d7:db: 65:61:70:0b:d0:e4:ca:27:00:63:18:be:dc:93:ba: 31:0d:26:a5:c1:f0:ad:41:f4:1b:cb:b8:f7:34:1d: 61:e7:a9:ea:fc:ce:1e:86:90:6c:33:50:a3:ea:70: 24:9d:f4:e0:9f:40:15:a3:07:cf:c4:fe:b5:86:06: f9:c8:9a:e5:3d:02:3e:c1:f3:96:7d:85:95:da:e1: 35:b1:4e:8c:0f:3c:ec:cb:f8:3f:ce:c9:de:66:dc: 38:05:ef:c5:6a:28:6f:e1:25:d9:50:4b:04:99:bb: cb:0c:06:d8:ea:a0:9e:32:ec:c0:23:de:b8:be:9e: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1B:9A:0A:09:16:CA:AB:98:CB:35:67:E3:53:8A:C5:91:03:21:BB X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:74:7b:2c:9e:35:8b:f7:06:8b:62:88:fc:84:7c:e3:46:a9: 42:5c:c4:a5:52:df:f9:a5:d2:d0:d4:c6:7e:43:b8:a9:f6:66: fa:0e:57:7f:61:48:f8:12:a8:90:30:84:15:41:cf:48:00:ca: dd:a8:0b:bc:1e:43:be:55:4a:ec:a4:44:d7:b8:03:d3:16:08: be:25:21:f8:50:99:72:78:25:78:a1:a5:af:73:e5:26:fd:16: 78:b3:2f:49:f6:52:a0:af:c1:5e:9d:9f:d3:da:5b:02:92:73: 43:ba:e2:93:fe:b7:b2:60:50:2b:46:f6:74:e3:23:e7:bf:35: 13:25:0f:2a:3a:be:0a:86:b6:be:48:3c:96:a3:fe:8a:a8:ac: e4:a9:c0:6e:03:a7:fb:da:61:c7:d6:2f:bf:01:02:26:4a:83: a3:f4:98:0a:7f:6d:e3:6f:0f:3d:2c:79:91:ca:a0:9e:56:2a: aa:a9:6e:b2:6e:c4:3f:bb:00:d2:49:85:5b:c7:37:04:dc:c8: f2:54:07:98:f2:b1:3e:6f:4b:2e:ac:1e:5d:60:af:cd:d4:1e: e2:a1:12:d1:41:83:e6:a6:98:16:c2:43:0d:5f:70:a6:1c:19: cd:67:eb:fd:3e:ba:50:4f:3a:13:7c:8f:2c:15:51:9e:2f:48: 77:92:38:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUwODA3MDYyODAwWhcNMjUwODE0MDYyODAwWjAYMRYwFAYD VQQDEw02ODk0NDc3MC0yOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mremTkkAKPk+311f6KT6lwgVeLoNEWRjn9S9sglK1lFNHFh+yrRRGN03bk2 XCQQPLTeeKP7uW5wMbfqwvO6WB26Myy/1GfEiRuH8l8JsU/7D2kBQGH0eBcAdTgK tEIBeAtV1U3dJLD+n0lDV1aKA9wFAemeXse3+kFnLbQstcRSBHVP19tlYXAL0OTK JwBjGL7ck7oxDSalwfCtQfQby7j3NB1h56nq/M4ehpBsM1Cj6nAknfTgn0AVowfP xP61hgb5yJrlPQI+wfOWfYWV2uE1sU6MDzzsy/g/zsneZtw4Be/Faihv4SXZUEsE mbvLDAbY6qCeMuzAI964vp5TXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAbmgoJ FsqrmMs1Z+NTisWRAyG7MB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0dHssnjWL9waLYoj8hHzjRqlCXMSlUt/5pdLQ1MZ+Q7ip9mb6Dld/ YUj4EqiQMIQVQc9IAMrdqAu8HkO+VUrspETXuAPTFgi+JSH4UJlyeCV4oaWvc+Um /RZ4sy9J9lKgr8FenZ/T2lsCknNDuuKT/reyYFArRvZ04yPnvzUTJQ8qOr4Khra+ SDyWo/6KqKzkqcBuA6f72mHH1i+/AQImSoOj9JgKf23jbw89LHmRyqCeViqqqW6y bsQ/uwDSSYVbxzcE3MjyVAeY8rE+b0surB5dYK/N1B7ioRLRQYPmppgWwkMNX3Cm HBnNZ+v9PrpQTzoTfI8sFVGeL0h3kjgz -----END CERTIFICATE-----Generated at Fri Aug 8 19:40:41 2025 by rpki-client