$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: 2RzlStRPXKylrbJ0OISnWguLSdj72Vbzc9rAq00a/4M= Subject key identifier: 25:E8:16:B7:92:F4:EA:23:CF:48:F0:5E:BE:44:65:89:A1:4C:6C:2A Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 0223 Signing time: Sat 09 Aug 2025 02:32:02 +0000 Manifest this update: Sat 09 Aug 2025 02:32:01 +0000 Manifest next update: Sat 16 Aug 2025 02:32:01 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: qKiiYTg9Zw0xZwaIFHqEvl39AlB2v9gTSVVlcNuCTgg=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mhhqfIxRoBjhuINkZ3XIMhFtJRPA+gdmIPhSIee7DFc=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: gcq2OURWYuZ9mt7r/ew2O7bw4Is8Oj5yrAJBkVF7NPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Aug 9 02:32:01 2025 GMT Not After : Aug 16 02:32:01 2025 GMT Subject: CN=6896b321-086e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:8b:db:f9:01:62:6c:12:d2:e1:02:6c:0e: c6:cf:6f:b3:77:08:c5:ad:20:34:a7:9b:62:51:ca: e5:b5:cf:5f:d1:1d:46:97:49:04:2b:4a:a0:60:90: e9:64:3a:7d:08:a0:d7:1b:cc:51:ef:98:a5:7c:4e: d4:ac:81:c3:07:06:ae:66:67:05:c1:9d:68:fd:f9: 49:20:cc:f8:1e:cc:12:fb:4d:05:6c:a0:6b:3f:da: 19:a3:07:4c:16:8c:c9:f5:a8:5a:f5:12:ec:7d:03: 32:d6:be:c4:9d:17:8c:2f:fa:45:27:cb:b7:52:d1: 21:b6:dc:0d:d0:04:48:f5:75:fb:14:a3:ef:4e:3e: 17:4e:5c:9e:c6:28:ad:6b:9d:e5:d8:d1:b1:ac:06: 8e:9a:52:c2:e9:a4:4a:cd:e1:a2:ca:87:31:bd:0c: de:5c:ff:81:89:ff:98:f3:b8:37:12:cd:54:81:d7: 93:bd:d5:ca:68:9a:80:12:0c:31:cb:ab:3d:7e:26: fd:70:b8:34:37:c6:b5:c1:b8:44:08:0d:06:4f:4c: a0:e5:5b:5a:e5:89:3f:19:89:76:ce:85:d8:c0:cc: b4:09:5e:12:4f:5e:6b:8e:81:11:de:38:cc:d2:1c: f6:d6:17:30:1e:31:4c:d5:22:e1:97:a3:9f:59:10: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E8:16:B7:92:F4:EA:23:CF:48:F0:5E:BE:44:65:89:A1:4C:6C:2A X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:90:36:e4:62:ad:ec:db:cb:24:e1:a9:07:34:50:10:6a:fc: 30:b9:a4:9a:da:98:ce:5c:d9:53:73:e7:33:13:8d:0d:7f:cd: 5f:24:d5:7e:ce:3f:cb:e4:5f:f3:fa:2f:43:d7:21:65:95:e4: 24:62:61:65:97:80:fa:ea:1a:97:7d:5e:2c:f8:8f:ea:95:85: 0e:ed:26:ee:40:9b:8d:2c:23:ca:58:df:2a:36:6f:7a:fd:70: f1:65:c6:09:46:cc:17:ee:02:9d:11:80:94:36:7c:f3:04:a8: 33:15:d7:b8:4d:a7:03:f2:f0:b1:57:ab:79:20:b9:97:d2:ea: 75:d3:c0:01:23:c3:ee:9f:6a:0e:a6:ba:58:a9:db:02:41:89: 5b:34:19:96:69:d7:0f:17:06:4f:94:f8:53:3d:31:fd:e5:d0: 7c:71:80:bc:0e:61:c5:fb:a7:57:20:dc:47:66:a3:fa:e1:8c: 72:c7:25:14:77:82:e0:21:5c:b0:94:73:38:c0:47:c1:19:87: 3f:53:f0:ba:70:47:76:9f:b0:f3:cd:0e:d0:57:8f:ee:61:df: 57:de:b1:0c:06:6b:d4:0e:c5:57:02:45:90:a3:34:0a:2a:79: 0f:80:14:d2:45:d5:99:67:ff:01:5e:d5:d4:59:b3:79:cf:fc: c9:72:eb:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjUwODA5MDIzMjAxWhcNMjUwODE2MDIzMjAxWjAYMRYwFAYD VQQDEw02ODk2YjMyMS0wODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34+L2/kBYmwS0uECbA7Gz2+zdwjFrSA0p5tiUcrltc9f0R1Gl0kEK0qgYJDp ZDp9CKDXG8xR75ilfE7UrIHDBwauZmcFwZ1o/flJIMz4HswS+00FbKBrP9oZowdM FozJ9aha9RLsfQMy1r7EnReML/pFJ8u3UtEhttwN0ARI9XX7FKPvTj4XTlyexiit a53l2NGxrAaOmlLC6aRKzeGiyocxvQzeXP+Bif+Y87g3Es1UgdeTvdXKaJqAEgwx y6s9fib9cLg0N8a1wbhECA0GT0yg5Vta5Yk/GYl2zoXYwMy0CV4ST15rjoER3jjM 0hz21hcwHjFM1SLhl6OfWRC7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXoFreS 9Oojz0jwXr5EZYmhTGwqMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkkDbkYq3s28sk4akHNFAQavwwuaSa2pjOXNlTc+czE40Nf81fJNV+ zj/L5F/z+i9D1yFlleQkYmFll4D66hqXfV4s+I/qlYUO7SbuQJuNLCPKWN8qNm96 /XDxZcYJRswX7gKdEYCUNnzzBKgzFde4TacD8vCxV6t5ILmX0up108ABI8Pun2oO prpYqdsCQYlbNBmWadcPFwZPlPhTPTH95dB8cYC8DmHF+6dXINxHZqP64YxyxyUU d4LgIVywlHM4wEfBGYc/U/C6cEd2n7DzzQ7QV4/uYd9X3rEMBmvUDsVXAkWQozQK KnkPgBTSRdWZZ/8BXtXUWbN5z/zJcusF -----END CERTIFICATE-----Generated at Sat Aug 9 05:39:14 2025 by rpki-client