$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: qQZk2Fs7Z5wo/nVZ8mlGk8SbMy9MMR/TH4g7NNgi2xU= Subject key identifier: BD:12:86:FD:BA:0A:95:F2:91:A5:19:45:C7:B3:19:0A:BF:60:1E:6E Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 0628 Signing time: Fri 18 Jul 2025 23:06:29 +0000 Manifest this update: Fri 18 Jul 2025 23:06:29 +0000 Manifest next update: Fri 25 Jul 2025 23:06:29 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: sKkR6XTIuTW+iDymPEYtLKldwT/sC0qlLBOFhHQf09k=) 2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=) 3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: WwU6SoQDG+8gwXxtD5WuoKkjOwOvaEm4Y976SHnYcTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Jul 18 23:06:29 2025 GMT Not After : Jul 25 23:06:29 2025 GMT Subject: CN=687ad375-98c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:db:f0:b6:bd:89:a7:6b:38:ed:80:06:6c: 2d:ea:47:8c:1f:6f:85:a7:86:c6:c6:b9:2c:d2:8c: b7:2b:fc:23:61:f4:5a:20:f4:ed:9c:9c:27:f8:e6: ef:d0:f0:03:15:31:9c:bc:78:2a:46:b1:85:4c:69: 35:ca:21:1b:0f:86:c0:1d:42:6c:8d:ef:1d:eb:24: bb:bb:74:64:51:9e:8e:90:9a:f1:70:c3:76:06:ae: ed:cb:3b:ac:cc:f4:f1:f9:5e:e7:af:b9:d5:95:90: 28:25:32:13:6c:bb:50:aa:20:fe:dd:88:6d:74:1d: d5:9a:17:f9:b1:70:a8:f5:f4:8a:4c:64:3a:77:1e: 82:1b:ba:1d:f5:d9:f0:ea:2a:f0:bd:0b:1a:94:ac: f1:43:d8:b1:fc:96:c0:8f:9a:fa:c1:86:c6:a2:c4: d3:c7:08:8c:bf:c4:cb:63:0e:dd:89:db:91:59:ef: f3:5a:df:85:43:4f:33:45:5f:33:50:86:3d:dc:2e: 80:f3:70:79:63:82:a2:9c:3e:43:26:a8:2e:04:9c: 2c:de:b9:37:5e:49:49:b9:6c:fb:89:82:b5:9d:9a: 5c:3e:21:fc:d6:5e:fe:2d:e4:f5:5b:72:37:0c:c7: 24:2c:86:d6:0d:d4:7a:0c:39:aa:04:f6:6a:2f:e1: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:12:86:FD:BA:0A:95:F2:91:A5:19:45:C7:B3:19:0A:BF:60:1E:6E X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:86:44:45:5b:28:c6:ca:1d:ef:fe:81:10:c6:dc:20:81:6d: ef:a1:be:b6:37:b9:02:9d:a1:5d:bd:6f:70:ad:d3:79:98:ef: c1:23:20:69:b7:dc:55:f2:3f:c9:9c:51:d0:06:52:f7:52:c8: 95:7c:69:69:33:7a:6a:88:a4:77:8f:8c:37:c1:4d:13:ad:bb: 44:f9:8c:6e:8b:e3:87:e2:a6:b2:d9:82:0f:13:b3:2c:24:5f: 80:4a:23:1a:55:67:8c:26:6d:a3:0a:93:d2:ff:5b:9a:6d:68: 4c:cb:41:e7:03:13:ea:14:f4:3b:c3:63:39:c4:a3:24:37:b8: ec:6a:19:16:00:ae:79:b3:4d:f6:38:2d:1d:8d:26:51:5f:ac: 8c:12:51:d5:28:77:fc:0f:87:ee:6f:03:d1:eb:94:9c:b1:61: 7d:ef:0f:0f:32:47:b4:68:d6:05:ed:c0:15:82:da:29:d5:86: bf:0e:c8:cd:9c:ed:4b:cb:bd:db:d8:93:5b:b6:5f:0a:19:b1: 8d:21:b6:09:4c:ec:06:27:f6:7f:e5:09:d4:5b:d0:3f:03:99: f4:49:de:46:cf:2a:55:40:0c:f9:52:e5:85:51:62:5c:68:ca: d8:e5:1c:39:d0:08:3e:f5:b7:90:96:59:1c:51:10:51:32:9b: 6e:bc:a2:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjUwNzE4MjMwNjI5WhcNMjUwNzI1MjMwNjI5WjAYMRYwFAYD VQQDEw02ODdhZDM3NS05OGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbjb8La9iadrOO2ABmwt6keMH2+Fp4bGxrks0oy3K/wjYfRaIPTtnJwn+Obv 0PADFTGcvHgqRrGFTGk1yiEbD4bAHUJsje8d6yS7u3RkUZ6OkJrxcMN2Bq7tyzus zPTx+V7nr7nVlZAoJTITbLtQqiD+3YhtdB3Vmhf5sXCo9fSKTGQ6dx6CG7od9dnw 6irwvQsalKzxQ9ix/JbAj5r6wYbGosTTxwiMv8TLYw7diduRWe/zWt+FQ08zRV8z UIY93C6A83B5Y4KinD5DJqguBJws3rk3XklJuWz7iYK1nZpcPiH81l7+LeT1W3I3 DMckLIbWDdR6DDmqBPZqL+EZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0Shv26 CpXykaUZRcezGQq/YB5uMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBehkRFWyjGyh3v/oEQxtwggW3vob62N7kCnaFdvW9wrdN5mO/BIyBp t9xV8j/JnFHQBlL3UsiVfGlpM3pqiKR3j4w3wU0TrbtE+Yxui+OH4qay2YIPE7Ms JF+ASiMaVWeMJm2jCpPS/1uabWhMy0HnAxPqFPQ7w2M5xKMkN7jsahkWAK55s032 OC0djSZRX6yMElHVKHf8D4fubwPR65ScsWF97w8PMke0aNYF7cAVgtop1Ya/DsjN nO1Ly73b2JNbtl8KGbGNIbYJTOwGJ/Z/5QnUW9A/A5n0Sd5GzypVQAz5UuWFUWJc aMrY5Rw50Ag+9beQllkcURBRMptuvKIE -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:23 2025 by rpki-client