$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: N0ZK4Kgq/b3uHFlirP4ZYUI4GWzcNIkBrZkGSDTh5K8= Subject key identifier: 27:4A:3D:EE:40:2F:0F:3F:46:48:52:CF:3F:39:79:4A:54:5E:BF:C9 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1A7F Signing time: Sun 10 Aug 2025 16:18:35 +0000 Manifest this update: Sun 10 Aug 2025 16:18:35 +0000 Manifest next update: Sun 17 Aug 2025 16:18:35 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: MRUo5br+LCarnGRoyKIh1+qUUQFak1w0LhzY94AvPXQ=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6793 (0x1a89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Aug 10 16:18:35 2025 GMT Not After : Aug 17 16:18:35 2025 GMT Subject: CN=6898c65b-3352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:0f:97:8f:ab:04:92:0b:5a:db:60:ca:6a: 00:80:5f:69:6a:24:1a:6b:df:dd:c7:51:9e:48:98: 0e:14:8b:4c:ba:63:94:8b:d3:89:d0:80:d0:a7:0d: 4c:1a:a7:9f:fe:f3:7b:c6:9d:31:7f:02:48:98:1f: 6f:b2:73:2c:e5:5b:2d:e2:ed:ca:3b:0e:f6:d7:7c: ea:f2:95:ba:3c:71:a4:2d:f7:0a:ab:2c:af:b5:e6: 70:f9:ca:07:0b:c9:35:ed:70:01:83:8b:bf:06:bd: e2:1d:c6:fe:6a:96:2e:ec:5b:cc:0f:51:0e:3e:4a: c4:37:57:a3:6d:cc:38:b1:43:b5:4b:66:1f:90:94: b6:4f:e7:71:41:0f:21:18:2f:3d:c7:63:d9:ea:8a: f5:06:f6:cf:f1:a4:98:fa:0a:39:bc:38:b0:38:f4: 58:67:38:17:f2:ee:ec:b2:f1:d0:15:df:0a:f8:51: a8:27:a4:c7:8b:fa:5d:f4:c4:78:a9:50:9b:10:59: e3:b6:6b:3b:9d:1d:13:92:e2:03:f3:bf:5d:c2:91: 69:0f:a8:6b:f4:dc:2e:43:eb:d8:2d:61:72:1e:b2: b2:08:4b:e6:92:b4:d3:2d:eb:4f:e0:55:45:be:77: f2:9d:95:6e:89:7e:47:0f:f5:ab:77:60:c3:eb:2b: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:3D:EE:40:2F:0F:3F:46:48:52:CF:3F:39:79:4A:54:5E:BF:C9 X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:be:32:b2:31:0f:91:c3:61:ba:9a:91:c0:49:67:e2:b6:58: b1:36:e7:34:34:d1:33:92:78:49:d4:a3:8e:73:7e:86:c9:a6: aa:43:8e:30:b1:04:f7:09:11:e7:ae:a4:28:e9:1c:09:76:b3: b5:8d:4e:c5:8e:e4:7b:2b:72:f6:89:ee:ef:ac:d1:7c:79:9d: ee:d1:3e:71:c4:92:c5:32:08:4d:38:ac:4e:de:3c:d0:06:27: bd:1a:96:48:d0:24:4c:23:4c:f5:f9:7a:3d:83:3a:5b:a5:2f: cc:99:89:01:fb:48:ca:00:7e:07:55:e7:b9:37:b4:94:2e:53: 92:c9:4d:9f:45:f5:c9:c1:c9:a3:98:4c:f1:24:67:b0:00:89: 3d:20:7c:13:81:64:6d:f7:f8:5e:f5:9c:2c:52:2b:be:e9:ba: 0a:e2:1c:29:f3:e4:ea:8e:76:02:c1:48:33:eb:93:86:d7:a7: f1:ca:b9:c2:ca:9e:b7:35:2b:e8:05:db:bc:71:68:a9:6a:92: e9:1b:92:a3:56:c7:22:30:12:8b:ce:6a:f2:15:e2:54:c2:bf: 6e:73:a9:68:dd:46:08:36:25:fd:6e:d4:3c:93:1c:3b:c6:73: 03:a0:a8:7f:d0:46:4d:e8:5a:92:0c:b8:5c:83:9e:26:bd:81: b7:1e:19:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwODEwMTYxODM1WhcNMjUwODE3MTYxODM1WjAYMRYwFAYD VQQDEw02ODk4YzY1Yi0zMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArM8Pl4+rBJILWttgymoAgF9paiQaa9/dx1GeSJgOFItMumOUi9OJ0IDQpw1M Gqef/vN7xp0xfwJImB9vsnMs5Vst4u3KOw7213zq8pW6PHGkLfcKqyyvteZw+coH C8k17XABg4u/Br3iHcb+apYu7FvMD1EOPkrEN1ejbcw4sUO1S2YfkJS2T+dxQQ8h GC89x2PZ6or1BvbP8aSY+go5vDiwOPRYZzgX8u7ssvHQFd8K+FGoJ6THi/pd9MR4 qVCbEFnjtms7nR0TkuID879dwpFpD6hr9NwuQ+vYLWFyHrKyCEvmkrTTLetP4FVF vnfynZVuiX5HD/Wrd2DD6yswuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdKPe5A Lw8/RkhSzz85eUpUXr/JMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyvjKyMQ+Rw2G6mpHASWfitlixNuc0NNEzknhJ1KOOc36GyaaqQ44w sQT3CRHnrqQo6RwJdrO1jU7FjuR7K3L2ie7vrNF8eZ3u0T5xxJLFMghNOKxO3jzQ Bie9GpZI0CRMI0z1+Xo9gzpbpS/MmYkB+0jKAH4HVee5N7SULlOSyU2fRfXJwcmj mEzxJGewAIk9IHwTgWRt9/he9ZwsUiu+6boK4hwp8+TqjnYCwUgz65OG16fxyrnC yp63NSvoBdu8cWipapLpG5KjVsciMBKLzmryFeJUwr9uc6lo3UYINiX9btQ8kxw7 xnMDoKh/0EZN6FqSDLhcg54mvYG3Hhmq -----END CERTIFICATE-----Generated at Sun Aug 10 18:23:46 2025 by rpki-client