$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json) Hash identifier: gMV1ZsE8HtiCRV+kV5jIDe3BLr7A4qZxeIYslvD25qs= Subject key identifier: 9A:91:C4:F3:18:A5:8B:28:1F:8D:DB:4F:C7:19:53:F0:5F:D7:7E:BF Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Certificate serial: 09AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft Manifest number: 09A1 Signing time: Fri 18 Jul 2025 20:17:49 +0000 Manifest this update: Fri 18 Jul 2025 20:17:49 +0000 Manifest next update: Fri 25 Jul 2025 20:17:49 +0000 Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: ERmKCuBj1vnTOVOAOqB99hlqlbfrOu+asWCxRMU7q7g=) 2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: OjAcbEOp0amxQNPqpOvSSPyQnwHnVe9MoEWy3pew2ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Validity Not Before: Jul 18 20:17:49 2025 GMT Not After : Jul 25 20:17:49 2025 GMT Subject: CN=687aabed-8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:f3:ec:b6:1d:ce:96:40:3b:e1:da:52:3f: 51:28:97:8c:18:2c:16:2c:9f:01:7a:68:b5:f6:fc: 6c:5c:a5:65:da:57:bc:66:1a:6e:06:e8:06:af:1e: 86:a8:49:9d:39:ff:2f:9a:20:c4:15:3c:68:fb:5e: 25:40:b2:3d:b1:99:b6:e6:e8:19:07:38:a4:8c:a2: 55:03:05:e0:c8:d1:27:3b:ad:7d:9b:ec:63:e3:7c: de:33:af:5c:eb:80:8d:ca:37:8c:1f:5a:49:37:ab: 53:9a:54:4e:89:11:86:8c:fd:7f:bd:4a:7f:99:29: ce:56:c8:6d:d7:a2:39:88:e6:c8:05:5f:c2:87:2b: 09:f8:2f:e8:e4:19:ef:37:d8:e3:98:18:1b:9f:60: b8:62:36:d8:53:38:43:6f:b2:e2:90:f0:6d:59:13: 16:b9:d0:35:3f:1e:32:47:5e:7b:8c:aa:aa:27:19: 3a:80:4a:bc:59:74:73:bc:7c:ec:52:88:b1:fa:a0: f6:d4:54:49:65:a9:d4:4d:55:bd:b8:7a:a0:91:f7: 65:7d:c3:37:fd:5c:21:9f:0b:cb:09:b7:5a:09:d5: 30:3e:96:d5:c4:4b:24:42:6a:35:5d:56:b2:36:eb: f1:0c:ad:44:e2:1f:d9:8a:ba:d6:a5:a7:f4:7f:8c: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:91:C4:F3:18:A5:8B:28:1F:8D:DB:4F:C7:19:53:F0:5F:D7:7E:BF X509v3 Authority Key Identifier: keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4d:44:ad:14:48:24:83:75:cd:41:e7:21:99:d7:92:00:41: fb:ef:6d:18:d4:94:ec:ce:36:5c:36:3f:e6:6d:f7:d4:d2:00: 6b:ce:0d:5f:f7:99:c0:09:c5:1b:fc:fc:6c:e4:82:1e:0c:12: d9:e6:92:e7:44:89:a0:df:da:23:8d:71:ab:ec:e3:e6:28:ff: 50:16:64:7c:bd:1b:a8:43:e7:85:45:28:53:f4:c8:89:c2:3a: 8e:f8:fa:1c:09:b1:bc:96:7b:d7:a7:10:c3:98:9c:a6:d3:d2: 2d:55:bc:41:a1:02:b1:55:09:21:8d:42:8c:e9:d1:80:43:9c: d9:b0:57:11:d5:5b:70:af:44:0e:31:92:f3:28:7a:5a:03:27: 9d:6a:8f:8b:63:a3:56:4e:28:93:7d:4b:e7:cc:52:96:f0:d5: 3c:24:ab:db:5a:2f:11:1f:4c:9e:b9:fd:0a:af:7b:28:62:c7: c3:41:44:1b:3e:55:1a:7e:67:0a:9d:a8:4d:04:ab:b9:0d:d3: ce:3e:cf:e1:eb:38:2a:1b:34:ce:30:15:8c:a3:17:24:15:dd: 87:e2:b1:53:f7:83:60:c6:89:13:9a:cb:b0:95:c0:09:8a:49: ae:09:5b:a5:20:c5:43:ae:cc:73:d3:4b:c8:2a:f7:39:66:a6: d8:78:22:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw Q0M2RjI5MEIwHhcNMjUwNzE4MjAxNzQ5WhcNMjUwNzI1MjAxNzQ5WjAYMRYwFAYD VQQDEw02ODdhYWJlZC04MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO3z7LYdzpZAO+HaUj9RKJeMGCwWLJ8Bemi19vxsXKVl2le8ZhpuBugGrx6G qEmdOf8vmiDEFTxo+14lQLI9sZm25ugZBzikjKJVAwXgyNEnO619m+xj43zeM69c 64CNyjeMH1pJN6tTmlROiRGGjP1/vUp/mSnOVsht16I5iObIBV/ChysJ+C/o5Bnv N9jjmBgbn2C4YjbYUzhDb7LikPBtWRMWudA1Px4yR157jKqqJxk6gEq8WXRzvHzs Uoix+qD21FRJZanUTVW9uHqgkfdlfcM3/VwhnwvLCbdaCdUwPpbVxEskQmo1XVay NuvxDK1E4h/ZirrWpaf0f4zcMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqRxPMY pYsoH43bT8cZU/Bf136/MB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2 NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8TUStFEgkg3XNQechmdeSAEH7720Y1JTszjZcNj/mbffU0gBrzg1f 95nACcUb/Pxs5IIeDBLZ5pLnRImg39ojjXGr7OPmKP9QFmR8vRuoQ+eFRShT9MiJ wjqO+PocCbG8lnvXpxDDmJym09ItVbxBoQKxVQkhjUKM6dGAQ5zZsFcR1Vtwr0QO MZLzKHpaAyedao+LY6NWTiiTfUvnzFKW8NU8JKvbWi8RH0yeuf0Kr3soYsfDQUQb PlUafmcKnahNBKu5DdPOPs/h6zgqGzTOMBWMoxckFd2H4rFT94NgxokTmsuwlcAJ ikmuCVulIMVDrsxz00vIKvc5ZqbYeCKR -----END CERTIFICATE-----Generated at Sun Jul 20 07:46:11 2025 by rpki-client