$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: 7jHQzik0ytgYXoTD9xB6B4lctIL2qI4AH6imA7YOLI4= Subject key identifier: BE:72:B4:5E:A1:CB:FA:61:1D:F4:EA:D3:41:17:F1:5F:54:D9:B5:55 Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 086C Signing time: Sat 26 Jul 2025 20:49:07 +0000 Manifest this update: Sat 26 Jul 2025 20:49:06 +0000 Manifest next update: Sat 02 Aug 2025 20:49:06 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: 7zM/ntp4oE5Twq2VmvwqJR4Bde3gtaSgTo7wJgQiYwM=) 2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: SYp3+Qw2NUOxAP2PI8VyKC4eZrJ7XxwyTmQykIlzc3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 20:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Jul 26 20:49:06 2025 GMT Not After : Aug 2 20:49:06 2025 GMT Subject: CN=68853f42-94b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:43:a6:43:83:98:bd:7d:17:4c:d0:17:5e: fa:30:ac:4b:64:de:38:49:3c:3f:7b:03:f3:c3:11: 75:8d:28:3e:ac:1d:a3:0b:76:ba:5b:4a:f7:5c:41: c9:4c:34:b6:f1:cf:2e:8b:65:84:57:50:b8:89:68: b0:4a:df:89:81:cd:48:db:d7:bb:9d:c8:28:41:48: f7:08:78:d0:34:cd:ea:67:ac:5a:ea:4f:3e:5d:2f: 2f:bd:a0:84:ad:31:20:af:c2:ec:5b:6d:74:5a:50: de:0f:fa:1b:3a:bf:2c:14:ae:70:b6:95:8d:2b:08: f3:24:f9:b0:f1:02:55:af:d3:df:62:99:c5:dc:5a: 43:c2:b4:59:f2:d2:2e:0f:73:97:08:41:13:46:e8: 98:98:72:26:5d:77:53:66:03:a5:f0:66:e9:0d:a2: 37:f3:c1:d3:de:7a:72:71:13:4f:67:7a:b6:46:58: 11:73:86:a3:1f:7a:b2:71:0a:69:4b:56:b0:22:9e: c6:18:76:af:fd:7f:4f:22:2a:da:85:c9:d3:d1:10: 7d:f2:ea:fc:71:e5:d4:e3:04:c0:e6:21:20:59:52: fa:1d:f0:3c:00:6d:43:c8:07:51:38:4f:29:69:b5: 41:32:06:ee:5d:00:50:99:09:ee:39:c8:1b:53:3a: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:B4:5E:A1:CB:FA:61:1D:F4:EA:D3:41:17:F1:5F:54:D9:B5:55 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a7:3c:6b:40:70:37:e8:b5:f9:be:4c:f3:78:7b:b9:25:3f: 9d:ee:51:fe:66:07:b8:c7:d1:b8:dd:40:4d:8c:50:5c:10:63: b7:0a:0a:ca:46:60:a1:28:44:a8:08:fb:c3:9b:d7:3b:97:16: 2b:0d:16:c4:ab:ed:b1:97:cb:5c:07:3e:3b:62:18:b4:01:88: a4:7e:96:a1:ba:89:bf:c9:b7:a9:1a:48:ac:9f:d5:39:8c:1a: b6:9d:2c:ab:0e:21:73:95:7e:35:71:87:b6:0d:67:83:b4:2a: 40:09:a0:db:49:65:8b:87:b7:a1:19:cd:5c:ae:b2:f1:3c:ea: dc:0e:4d:48:5a:ee:91:7f:46:19:f9:47:96:93:1a:fc:3b:31: 3b:5d:d0:f6:9f:a4:2b:3b:40:63:f5:e3:1e:de:e8:89:58:8a: a6:e8:df:ef:0b:1b:4c:36:6a:ce:f7:76:ca:e2:82:4f:38:cf: 0d:14:47:07:a7:f5:8b:20:0c:ed:65:7e:05:af:4c:5e:40:67: 42:5f:a4:a1:7e:4b:26:8e:d2:5d:4b:ec:93:c6:f5:b2:54:53: 00:99:38:31:79:de:f3:f7:b4:8a:be:47:03:36:30:cc:b1:26: 5e:c8:8b:6f:7e:b1:c4:c9:84:4f:b1:dd:81:b2:dc:1f:84:0e: be:d0:6c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwNzI2MjA0OTA2WhcNMjUwODAyMjA0OTA2WjAYMRYwFAYD VQQDEw02ODg1M2Y0Mi05NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMdDpkODmL19F0zQF176MKxLZN44STw/ewPzwxF1jSg+rB2jC3a6W0r3XEHJ TDS28c8ui2WEV1C4iWiwSt+Jgc1I29e7ncgoQUj3CHjQNM3qZ6xa6k8+XS8vvaCE rTEgr8LsW210WlDeD/obOr8sFK5wtpWNKwjzJPmw8QJVr9PfYpnF3FpDwrRZ8tIu D3OXCEETRuiYmHImXXdTZgOl8GbpDaI388HT3npycRNPZ3q2RlgRc4ajH3qycQpp S1awIp7GGHav/X9PIirahcnT0RB98ur8ceXU4wTA5iEgWVL6HfA8AG1DyAdROE8p abVBMgbuXQBQmQnuOcgbUzqHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5ytF6h y/phHfTq00EX8V9U2bVVMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxpzxrQHA36LX5vkzzeHu5JT+d7lH+Zge4x9G43UBNjFBcEGO3CgrK RmChKESoCPvDm9c7lxYrDRbEq+2xl8tcBz47Yhi0AYikfpahuom/ybepGkisn9U5 jBq2nSyrDiFzlX41cYe2DWeDtCpACaDbSWWLh7ehGc1crrLxPOrcDk1IWu6Rf0YZ +UeWkxr8OzE7XdD2n6QrO0Bj9eMe3uiJWIqm6N/vCxtMNmrO93bK4oJPOM8NFEcH p/WLIAztZX4Fr0xeQGdCX6ShfksmjtJdS+yTxvWyVFMAmTgxed7z97SKvkcDNjDM sSZeyItvfrHEyYRPsd2BstwfhA6+0GwQ -----END CERTIFICATE-----Generated at Sun Jul 27 08:48:33 2025 by rpki-client