$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft File: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json) Hash identifier: dv+5e6g5rRAYtNF1AfmvtJC9eRfQTc1fAUJXkjyRiHE= Subject key identifier: 06:94:08:AD:72:ED:E2:D3:2C:1D:8A:66:A8:C8:62:84:2C:15:BE:C0 Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft Manifest number: 04D6 Signing time: Sat 09 Aug 2025 00:19:43 +0000 Manifest this update: Sat 09 Aug 2025 00:19:42 +0000 Manifest next update: Sat 16 Aug 2025 00:19:42 +0000 Files and hashes: 1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: zcYlJ54jPmUUKCqZdUbYdPXYnaqB0mFOvqHBy+D0t4A=) 2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Validity Not Before: Aug 9 00:19:42 2025 GMT Not After : Aug 16 00:19:42 2025 GMT Subject: CN=6896941f-332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:a6:67:b0:8e:4a:ff:ff:6a:53:16:dd:79: ea:23:9a:3d:75:60:ec:b8:26:b6:3f:8e:55:d9:81: 53:9e:64:53:73:7e:64:8b:b1:46:06:85:1a:02:98: 05:20:e0:ca:a7:b5:ab:ac:e7:4d:77:47:57:85:21: a6:a4:73:d2:60:dd:f8:0a:c9:70:a1:47:31:e0:be: 30:22:75:4f:a3:a2:42:ea:5a:49:72:dd:49:d6:9b: e6:f7:2f:43:09:d0:53:fb:3d:fb:71:f2:e5:24:46: 73:9d:99:48:68:28:7e:87:34:ec:ce:db:0e:e6:ee: 9e:38:cf:31:00:2b:ba:e9:82:7a:3d:5a:09:64:1b: f1:30:61:43:5b:c4:ed:4b:b9:04:85:2a:1f:83:d2: ed:6f:43:cb:5f:0c:a6:48:ca:3d:7c:be:4e:d3:9d: 4d:9d:67:f2:0c:53:04:ed:7f:51:fb:cc:d5:cc:83: 8b:1c:16:2e:9b:2d:45:14:68:0c:81:24:42:33:50: 67:27:36:12:c6:bd:d3:33:47:07:f8:74:88:21:f7: 18:05:28:8d:8b:d2:7e:db:b3:8c:f3:38:62:42:53: 97:1b:44:e8:5d:e8:e1:e1:9f:d9:7a:d1:d9:d5:5c: a0:f2:94:91:94:73:66:70:70:ad:c5:01:c6:06:2f: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:94:08:AD:72:ED:E2:D3:2C:1D:8A:66:A8:C8:62:84:2C:15:BE:C0 X509v3 Authority Key Identifier: keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2b:a2:01:41:aa:8d:f0:f2:86:a9:2a:5f:38:5a:92:c8:2f: fa:ea:9d:e0:2d:fd:49:36:43:9f:22:07:bc:d9:6e:db:f0:87: f0:1d:f2:1e:43:bf:42:3e:84:b7:7b:8b:d4:b3:be:f1:26:17: 90:24:2e:31:da:36:b2:d0:89:a6:bd:bb:8e:a0:25:53:5a:54: ea:da:af:da:cd:a4:39:01:f2:2a:64:45:f7:d7:47:6c:a4:0a: f9:31:d6:f0:f6:83:d8:db:0b:4c:4d:e8:72:bf:8b:ad:fd:5c: 2a:c8:d3:80:5d:e2:8b:d6:61:db:c0:a0:97:1a:13:1b:79:ef: 28:b7:44:68:98:5d:75:a8:98:4e:5a:e6:f4:85:b5:24:42:7d: f2:ca:51:9d:ff:ae:65:00:16:f5:20:9c:df:b1:0e:fe:25:dd: 41:1c:57:5b:d5:d2:9c:cd:03:26:b4:ca:f6:b4:18:79:4b:e7: a4:ab:f7:16:60:6e:0b:c2:f4:48:f3:96:d8:26:57:eb:c6:85: 61:9e:56:4c:b4:5c:ac:f2:75:1b:2a:4d:b7:99:80:fd:65:c8: 88:44:89:4f:69:f4:45:08:f3:ea:b2:91:1a:3f:0e:31:73:1a: 0f:20:ca:bb:40:5a:45:99:4a:92:f9:9f:e4:6a:ac:31:e6:15: 3a:57:57:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5NUQxMTAvBgNVBAUTKDI3MkY5RkRGMzAxNDU0RUI2QzgxRjMwMTZDMjA1QUY0 NDNDQUJENUMwHhcNMjUwODA5MDAxOTQyWhcNMjUwODE2MDAxOTQyWjAYMRYwFAYD VQQDEw02ODk2OTQxZi0zMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBmmZ7COSv//alMW3XnqI5o9dWDsuCa2P45V2YFTnmRTc35ki7FGBoUaApgF IODKp7WrrOdNd0dXhSGmpHPSYN34CslwoUcx4L4wInVPo6JC6lpJct1J1pvm9y9D CdBT+z37cfLlJEZznZlIaCh+hzTsztsO5u6eOM8xACu66YJ6PVoJZBvxMGFDW8Tt S7kEhSofg9Ltb0PLXwymSMo9fL5O051NnWfyDFME7X9R+8zVzIOLHBYumy1FFGgM gSRCM1BnJzYSxr3TM0cH+HSIIfcYBSiNi9J+27OM8zhiQlOXG0ToXejh4Z/ZetHZ 1Vyg8pSRlHNmcHCtxQHGBi8XIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaUCK1y 7eLTLB2KZqjIYoQsFb7AMB8GA1UdIwQYMBaAFCcvn98wFFTrbIHzAWwgWvRDyr1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDk1RC84REUyRTRCQTMy NjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZPdHNnZk1CYkNCYTlFUEt2 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5LWYzekFVVk90c2dmTUJiQ0JhOUVQS3ZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDk1RC84REUyRTRCQTMyNjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZP dHNnZk1CYkNCYTlFUEt2VncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNK6IBQaqN8PKGqSpfOFqSyC/66p3gLf1JNkOfIge82W7b8IfwHfIe Q79CPoS3e4vUs77xJheQJC4x2jay0ImmvbuOoCVTWlTq2q/azaQ5AfIqZEX310ds pAr5Mdbw9oPY2wtMTehyv4ut/VwqyNOAXeKL1mHbwKCXGhMbee8ot0RomF11qJhO Wub0hbUkQn3yylGd/65lABb1IJzfsQ7+Jd1BHFdb1dKczQMmtMr2tBh5S+ekq/cW YG4LwvRI85bYJlfrxoVhnlZMtFys8nUbKk23mYD9ZciIRIlPafRFCPPqspEaPw4x cxoPIMq7QFpFmUqS+Z/kaqwx5hU6V1fF -----END CERTIFICATE-----Generated at Sun Aug 10 18:23:59 2025 by rpki-client