$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: UoPAh94FJPD/Ml/r3FMW4gpJV98WDEP5nUXNcSHdYu4= Subject key identifier: CE:2C:3D:8B:AD:8D:20:3E:54:6A:97:AF:F6:A9:BA:A3:9C:55:E1:C9 Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 2E Signing time: Mon 11 Aug 2025 07:57:43 +0000 Manifest this update: Mon 11 Aug 2025 07:57:42 +0000 Manifest next update: Mon 18 Aug 2025 07:57:42 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: H3zXWkZazOQ0J9drtUGQ9ARcQ+TH4Khx8uDaZEOqOas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Aug 11 07:57:42 2025 GMT Not After : Aug 18 07:57:42 2025 GMT Subject: CN=6899a277-f24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:66:5e:4d:c6:75:7e:66:03:cb:06:16:db: 58:d7:48:4e:13:ee:13:11:ac:eb:0d:29:37:cd:5a: 12:df:30:35:db:d3:16:24:f1:06:4b:8c:e0:96:86: 6b:e2:cf:79:d6:16:94:91:d4:a0:f8:f4:47:de:a5: 0f:a3:21:17:36:09:04:70:9d:b2:a7:69:df:4c:26: 4b:c4:7d:17:09:43:53:76:dc:66:53:d6:31:37:fb: 3c:11:e2:18:48:47:98:df:56:3a:23:68:e5:2b:f6: 86:79:4d:e4:c2:1e:4e:3c:84:2e:e1:12:6c:60:91: bb:3f:8e:04:76:a3:f4:8a:4f:7f:21:bf:c7:19:86: b3:7f:ac:69:4b:3e:9e:03:cc:08:98:5d:6c:dc:a6: 89:06:60:8a:bc:06:67:8e:65:e2:75:5a:b4:e7:c3: 7b:06:5c:18:c1:13:d5:eb:ae:68:56:ce:8e:be:86: 77:e3:bc:42:20:ca:4d:60:d7:74:31:00:1a:a4:de: 1e:d8:9b:9e:9a:19:5a:dc:b2:03:95:05:d2:fb:39: 87:9b:c6:87:15:7d:2f:1f:db:94:6e:04:2a:e3:d6: 20:d2:db:ac:a8:1f:bf:45:52:73:38:68:ab:ae:80: 6c:67:b9:fe:d2:e6:0c:84:c7:60:80:18:20:5d:04: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2C:3D:8B:AD:8D:20:3E:54:6A:97:AF:F6:A9:BA:A3:9C:55:E1:C9 X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:2d:77:ba:2d:ad:3b:73:7f:41:20:97:e3:21:07:c1:b9:10: 55:b8:aa:0a:58:5e:e9:53:b8:0e:d9:48:14:82:3e:4b:df:e9: 2c:4c:b7:e4:87:fd:5f:84:cc:1c:e6:68:86:fb:cd:d9:33:04: 9a:04:54:a0:83:48:3c:37:a9:56:b6:64:22:80:e5:f4:dc:e2: 8d:5f:2d:5d:aa:27:b4:3b:46:30:88:a1:5d:1e:8c:82:dc:ba: 94:9c:ac:40:6d:e5:38:5f:7f:b1:a0:46:c2:6d:fd:a0:e1:01: b3:93:1f:f5:7c:70:39:76:b8:b5:02:00:f7:a9:a1:44:03:9c: bc:a4:11:1e:40:7d:db:1b:13:e2:8b:19:61:31:b1:4e:9d:5b: c0:9a:5b:a3:3a:df:86:d2:65:f9:ba:05:d2:05:1e:47:75:b0: 72:51:55:40:94:50:b5:85:99:b5:fb:ca:86:2b:b8:91:0b:43: da:70:17:83:7c:a4:3f:d3:43:c1:fd:b2:f1:02:23:9c:b6:0e: e2:fc:7b:43:44:66:97:ba:5e:ba:6b:99:4b:7d:a5:90:ba:fc: 90:1c:35:a3:84:4e:20:2f:d3:d1:92:57:46:2a:56:11:d4:04: b7:8e:0e:57:5f:4e:ea:89:09:19:12:27:ea:b6:5b:21:70:d6: 77:53:92:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTA4MTEwNzU3NDJaFw0yNTA4MTgwNzU3NDJaMBgxFjAUBgNV BAMTDTY4OTlhMjc3LWYyNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwZWZeTcZ1fmYDywYW21jXSE4T7hMRrOsNKTfNWhLfMDXb0xYk8QZLjOCWhmvi z3nWFpSR1KD49EfepQ+jIRc2CQRwnbKnad9MJkvEfRcJQ1N23GZT1jE3+zwR4hhI R5jfVjojaOUr9oZ5TeTCHk48hC7hEmxgkbs/jgR2o/SKT38hv8cZhrN/rGlLPp4D zAiYXWzcpokGYIq8BmeOZeJ1WrTnw3sGXBjBE9XrrmhWzo6+hnfjvEIgyk1g13Qx ABqk3h7Ym56aGVrcsgOVBdL7OYebxocVfS8f25RuBCrj1iDS26yoH79FUnM4aKuu gGxnuf7S5gyEx2CAGCBdBE/rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUziw9i62N ID5Uapev9qm6o5xV4ckwHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFMtd7otrTtzf0Egl+MhB8G5EFW4qgpYXulTuA7ZSBSCPkvf6SxMt+SH /V+EzBzmaIb7zdkzBJoEVKCDSDw3qVa2ZCKA5fTc4o1fLV2qJ7Q7RjCIoV0ejILc upScrEBt5Thff7GgRsJt/aDhAbOTH/V8cDl2uLUCAPepoUQDnLykER5AfdsbE+KL GWExsU6dW8CaW6M634bSZfm6BdIFHkd1sHJRVUCUULWFmbX7yoYruJELQ9pwF4N8 pD/TQ8H9svECI5y2DuL8e0NEZpe6XrprmUt9pZC6/JAcNaOETiAv09GSV0YqVhHU BLeODldfTuqJCRkSJ+q2WyFw1ndTku0= -----END CERTIFICATE-----Generated at Tue Aug 12 18:57:38 2025 by rpki-client