$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: Jxe4Y2gAH2dzgXng4Qv269MrXRuYKw3lyqjKFR8JkDk= Subject key identifier: 1A:15:19:F9:17:00:B3:60:2D:04:54:8A:DF:A2:71:1E:C8:B0:93:5E Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C83 Signing time: Fri 08 Aug 2025 18:30:09 +0000 Manifest this update: Fri 08 Aug 2025 18:30:08 +0000 Manifest next update: Fri 15 Aug 2025 18:30:08 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: Cerf7b2hpiJDvkzwEvvBykOeIeHq59ZPc9zK9ABLq+Y=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Aug 8 18:30:08 2025 GMT Not After : Aug 15 18:30:08 2025 GMT Subject: CN=68964230-8cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:52:dd:34:c0:26:5e:7c:18:e8:13:18:d8: 61:66:b4:cd:43:30:1e:09:8f:30:11:07:0a:b4:0d: 08:26:c0:5f:d5:41:ba:62:1a:94:ac:eb:f8:aa:c7: 47:bd:aa:d1:cb:31:d8:b5:e0:5e:b8:98:8f:34:e0: 68:b7:0d:e6:07:ba:9e:d3:af:60:75:48:73:b5:c2: 5c:06:2c:14:5b:05:75:d4:dc:7f:ec:cf:44:29:43: fe:41:e1:b1:58:a8:30:d9:7b:28:bb:2f:ca:42:51: 54:01:e3:c7:20:85:6f:19:cd:75:d9:88:10:d8:99: dd:ba:d1:84:91:55:5f:5a:65:50:1c:5a:07:43:d4: f6:07:ec:64:c6:50:c4:63:fe:37:2e:b1:1d:b8:c2: 34:e6:e1:f2:20:4c:d2:a2:bf:2b:c7:5e:c5:d4:a4: 19:95:14:4e:6e:56:a1:c2:34:e2:68:d7:f4:64:f7: 88:66:02:b0:a9:cd:9d:4e:c2:ca:e0:14:66:03:cb: a5:f9:80:6a:05:06:2b:18:bb:2f:16:39:1d:81:ad: b3:a3:b5:58:7e:55:f9:6d:b1:64:d1:33:4f:3a:66: cc:90:5e:7e:63:59:b3:0d:5f:33:14:d8:ea:9d:03: 6e:66:44:6b:24:0e:d9:c0:1b:7a:21:6e:fc:e6:8e: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:15:19:F9:17:00:B3:60:2D:04:54:8A:DF:A2:71:1E:C8:B0:93:5E X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:cc:72:3b:23:f3:a9:98:e7:70:b2:d3:b9:1f:65:22:60:88: c5:a6:ea:aa:69:00:35:9c:45:9c:52:7a:24:3d:c8:96:bf:62: 90:b7:08:f8:8a:68:61:d2:db:03:a5:30:3d:73:0d:98:24:fc: 01:5e:61:9d:ef:8e:a2:cb:e3:da:69:d8:43:88:1a:bf:a0:bd: aa:06:16:8b:33:ba:3d:55:bb:2c:98:f0:d8:44:8f:65:d5:92: 44:3c:53:02:1e:7b:e8:ab:4e:4e:18:0e:20:45:aa:e3:0a:35: 04:be:c2:bf:08:7b:9a:64:39:3d:24:1e:44:4a:0a:14:69:a0: 25:88:48:5a:ee:2a:68:d5:6d:5c:7b:d6:58:48:32:6f:95:af: b0:fe:a5:2e:7c:ae:c4:0a:08:1d:f7:2c:9d:81:fe:3c:de:e0: dd:7b:1f:35:e2:5b:b2:e1:45:c5:c8:ed:4a:0c:55:00:06:8a: 5e:25:0c:8c:e9:36:a2:53:fb:71:f5:2a:da:2d:66:af:8c:f2: 53:1e:06:f6:ad:4f:9a:e7:3d:14:5e:df:fd:1a:51:50:4a:f7: c6:92:22:9d:83:72:10:be:65:2a:b7:16:42:96:c5:dd:7e:b6: 66:be:32:83:48:d1:99:91:d4:49:a2:62:2a:3a:78:d6:10:42: 9c:de:a3:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwODA4MTgzMDA4WhcNMjUwODE1MTgzMDA4WjAYMRYwFAYD VQQDEw02ODk2NDIzMC04Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5FS3TTAJl58GOgTGNhhZrTNQzAeCY8wEQcKtA0IJsBf1UG6YhqUrOv4qsdH varRyzHYteBeuJiPNOBotw3mB7qe069gdUhztcJcBiwUWwV11Nx/7M9EKUP+QeGx WKgw2Xsouy/KQlFUAePHIIVvGc112YgQ2JndutGEkVVfWmVQHFoHQ9T2B+xkxlDE Y/43LrEduMI05uHyIEzSor8rx17F1KQZlRROblahwjTiaNf0ZPeIZgKwqc2dTsLK 4BRmA8ul+YBqBQYrGLsvFjkdga2zo7VYflX5bbFk0TNPOmbMkF5+Y1mzDV8zFNjq nQNuZkRrJA7ZwBt6IW785o5KrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoVGfkX ALNgLQRUit+icR7IsJNeMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrzHI7I/OpmOdwstO5H2UiYIjFpuqqaQA1nEWcUnokPciWv2KQtwj4 imhh0tsDpTA9cw2YJPwBXmGd746iy+PaadhDiBq/oL2qBhaLM7o9VbssmPDYRI9l 1ZJEPFMCHnvoq05OGA4gRarjCjUEvsK/CHuaZDk9JB5ESgoUaaAliEha7ipo1W1c e9ZYSDJvla+w/qUufK7ECggd9yydgf483uDdex814luy4UXFyO1KDFUABopeJQyM 6TaiU/tx9SraLWavjPJTHgb2rU+a5z0UXt/9GlFQSvfGkiKdg3IQvmUqtxZClsXd frZmvjKDSNGZkdRJomIqOnjWEEKc3qO4 -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:13 2025 by rpki-client