$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft (raw, json) Hash identifier: dGady34ChLQ5S4m267uPF4+OyzLD2XYEBOBu1J0KkCY= Subject key identifier: 1F:45:55:C1:A1:54:F9:F9:21:2A:D9:02:B8:EC:AF:52:A1:39:EE:79 Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 121F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft Manifest number: 1216 Signing time: Fri 08 Aug 2025 17:19:45 +0000 Manifest this update: Fri 08 Aug 2025 17:19:44 +0000 Manifest next update: Fri 15 Aug 2025 17:19:44 +0000 Files and hashes: 1: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl (hash: I4A91qx5ZGUM7bcjEda7iu44PnT0N8cyfxu/zdkeIt4=) 2: A295F860E71011E8899C3917C4F9AE02.roa (hash: u3ZjS5PQ+cLOr7B4bn5ZklBTiFJgjz1r0/eLvbqbKzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4639 (0x121f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Aug 8 17:19:44 2025 GMT Not After : Aug 15 17:19:44 2025 GMT Subject: CN=689631b0-b2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:7b:60:14:98:d6:78:a9:53:77:f0:74:f3: a9:2c:f2:c2:75:d0:e4:16:fc:76:45:15:0c:d5:dc: db:82:65:ee:67:54:23:67:c1:aa:33:ba:11:d6:f2: 76:a4:7a:bd:55:10:6e:ac:a2:b0:13:56:af:b5:9c: 86:2d:e0:3f:2c:f6:2b:47:7b:c0:cf:e5:b5:af:bb: 88:2c:0c:4a:6c:b5:f0:f5:4d:9f:b5:6d:27:7e:b1: 79:04:4d:6c:de:a3:00:06:75:30:68:3d:20:89:14: 0c:78:94:12:18:b4:0c:02:1c:af:5a:5a:6d:84:a1: 73:57:c5:23:65:fe:c7:60:81:dd:eb:f9:24:0e:53: 53:ec:a8:2b:6a:fd:16:c4:6f:2a:a0:bb:37:30:43: 37:36:d9:3b:96:da:ec:01:9e:a2:94:db:1b:e2:fa: f8:cf:d3:78:a3:bb:1b:f7:5d:ae:c4:df:7a:2f:9d: bd:41:c2:70:a5:5d:89:b8:40:d5:91:cf:98:1d:ae: 67:2d:8c:28:a2:9f:6b:6d:a5:75:ae:76:33:b6:9a: 95:8b:40:02:f0:f8:e7:4d:6c:f4:c3:68:21:ea:35: ee:bd:f2:1e:4e:0d:a7:39:8e:5c:12:63:23:18:08: f0:73:61:45:e7:f9:a2:e7:8e:5d:f4:b2:b0:65:78: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:45:55:C1:A1:54:F9:F9:21:2A:D9:02:B8:EC:AF:52:A1:39:EE:79 X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:aa:2d:15:34:2a:cb:b4:a3:50:55:b9:12:b4:c1:50:42:16: 02:7f:a9:c3:77:9d:a9:33:cb:3e:27:45:78:da:9a:fb:21:34: b3:a3:c2:f5:e2:f2:02:ac:48:a2:f2:7d:46:94:72:fa:b2:63: b4:a8:cf:94:b8:46:00:06:40:23:f2:e2:66:7f:f7:77:3c:fe: 3c:94:3a:19:5e:57:ca:30:df:52:69:14:9c:67:bf:20:8a:23: 17:b1:e5:a7:2d:f5:e6:ac:5d:37:b9:54:b5:4c:f7:2e:c9:3b: 80:ae:04:68:f8:22:5c:55:87:1b:ff:7f:8d:fc:3b:92:8d:99: 4b:50:7d:57:62:52:d7:11:7e:3e:69:51:a9:23:fe:17:56:08: 3a:cc:2b:6a:a5:37:5d:a1:44:6e:90:3b:1a:9d:18:57:5c:ee: c2:ba:ef:cf:5d:d0:e1:11:63:00:34:ac:28:fc:75:4c:55:1b: 0c:0c:fd:fa:81:b5:0b:73:37:57:0f:e8:27:f7:07:01:56:f2: 84:31:81:d6:cf:71:b1:ca:17:ae:ea:19:15:df:2d:32:da:11: 28:f9:79:95:70:3d:ed:7d:e7:f6:30:de:2d:90:f7:7f:bc:5c: c2:6c:90:d6:c4:10:2d:f8:a2:6d:fa:48:a2:3c:18:d4:c4:3e: e0:46:59:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjUwODA4MTcxOTQ0WhcNMjUwODE1MTcxOTQ0WjAYMRYwFAYD VQQDEw02ODk2MzFiMC1iMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhN7YBSY1nipU3fwdPOpLPLCddDkFvx2RRUM1dzbgmXuZ1QjZ8GqM7oR1vJ2 pHq9VRBurKKwE1avtZyGLeA/LPYrR3vAz+W1r7uILAxKbLXw9U2ftW0nfrF5BE1s 3qMABnUwaD0giRQMeJQSGLQMAhyvWlpthKFzV8UjZf7HYIHd6/kkDlNT7Kgrav0W xG8qoLs3MEM3Ntk7ltrsAZ6ilNsb4vr4z9N4o7sb912uxN96L529QcJwpV2JuEDV kc+YHa5nLYwoop9rbaV1rnYztpqVi0AC8PjnTWz0w2gh6jXuvfIeTg2nOY5cEmMj GAjwc2FF5/mi545d9LKwZXi3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9FVcGh VPn5ISrZArjsr1KhOe55MB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBf Wi14ZlNsUTZJRHBUNDg1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0qi0VNCrLtKNQVbkStMFQQhYCf6nDd52pM8s+J0V42pr7ITSzo8L1 4vICrEii8n1GlHL6smO0qM+UuEYABkAj8uJmf/d3PP48lDoZXlfKMN9SaRScZ78g iiMXseWnLfXmrF03uVS1TPcuyTuArgRo+CJcVYcb/3+N/DuSjZlLUH1XYlLXEX4+ aVGpI/4XVgg6zCtqpTddoURukDsanRhXXO7Cuu/PXdDhEWMANKwo/HVMVRsMDP36 gbULczdXD+gn9wcBVvKEMYHWz3Gxyheu6hkV3y0y2hEo+XmVcD3tfef2MN4tkPd/ vFzCbJDWxBAt+KJt+kiiPBjUxD7gRllT -----END CERTIFICATE-----Generated at Sun Aug 10 16:04:35 2025 by rpki-client