$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: wq93+vBth7DIKE+t5VjfthYCGzcnt4442/9KxhhZBGY= Subject key identifier: 75:38:44:F1:6B:35:88:8C:B3:EE:AE:D9:C8:01:63:4C:CB:3B:4F:AA Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1C16 Signing time: Tue 22 Jul 2025 16:20:08 +0000 Manifest this update: Tue 22 Jul 2025 16:20:07 +0000 Manifest next update: Tue 29 Jul 2025 16:20:07 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: TX0+hICcpJLQZSqBuZ7G/s6vBjCulWe4AOjNExEy5KM=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7214 (0x1c2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Jul 22 16:20:07 2025 GMT Not After : Jul 29 16:20:07 2025 GMT Subject: CN=687fba37-5b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d8:68:d9:6e:4d:9a:c6:0c:f8:01:74:b1:28: f4:36:e2:8e:b9:40:e8:65:f3:af:40:25:90:7b:af: 12:df:58:56:3a:b9:4c:95:dd:36:b5:88:d9:4a:03: b3:c9:de:72:73:11:bd:c9:fb:d9:f5:30:0c:17:5c: 71:89:ee:17:0b:a8:e8:d1:1a:ee:a8:33:84:5c:0a: d9:c4:0c:f2:ef:a8:88:55:da:5f:64:cb:c2:6c:60: 83:85:22:bd:93:20:30:04:f7:5d:b4:c9:b8:32:93: 87:bb:68:ca:e6:cc:b2:4e:f2:53:df:fa:a5:5a:aa: 77:1e:f4:4e:25:81:47:b0:35:e5:23:e3:83:25:65: b4:35:44:4e:77:6b:71:9b:d7:99:22:df:f2:ea:ef: 4c:04:98:43:3d:f9:b0:44:d3:22:c2:14:14:a2:f6: f7:6d:4a:06:43:f3:36:9d:7e:0e:f0:ab:10:79:a1: 73:1b:f2:13:91:7c:4a:f1:48:ea:a8:72:6f:13:90: 56:04:1d:13:d4:bb:0d:06:7a:76:a1:79:4e:2b:0b: c5:64:da:4a:e0:59:e3:f5:ac:06:b0:3e:3c:1c:4c: f8:79:5c:70:ed:a4:d2:a7:1f:37:eb:91:8c:b7:df: 9f:ea:75:3b:9a:23:ea:98:fd:ef:26:0d:d9:59:68: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:38:44:F1:6B:35:88:8C:B3:EE:AE:D9:C8:01:63:4C:CB:3B:4F:AA X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5e:d9:2c:1d:1f:41:b1:cc:7c:96:b2:07:58:d8:48:c5:12: 28:e2:3e:91:fe:13:b2:38:00:77:d8:62:9a:07:34:7a:99:6a: aa:ad:fa:0a:10:aa:ea:90:43:ec:59:71:1b:ab:e5:80:3d:ba: 0b:a6:03:c0:77:36:39:4b:bd:e9:b7:1a:55:e1:fe:bc:a7:a6: 7d:f4:3e:00:bc:d8:eb:12:96:4e:68:3d:81:d3:3a:e6:5b:2f: 36:f4:17:b8:a1:01:44:02:35:21:37:4a:17:cc:82:6f:34:5f: 91:79:83:57:8e:79:92:3c:ed:73:33:8e:ce:51:04:45:0b:7c: 11:82:35:e4:c0:42:48:9c:30:c4:58:36:b2:bc:64:e2:74:38: c3:8e:7f:a3:a1:b2:ce:8f:d6:53:da:4b:0e:41:6f:55:b4:d3: 70:23:c4:26:91:48:13:cd:85:dd:90:ca:a4:f9:ed:a6:94:45: bf:19:ea:8d:71:d7:c0:f3:26:94:ba:7b:7a:91:e6:2a:7e:64: f2:3e:a0:c1:8e:99:37:c8:42:91:d1:f9:dc:76:e1:a8:38:26: 22:80:db:fa:e2:e2:17:ab:44:7b:3e:74:19:54:ea:79:70:f6: 20:68:d1:1b:b0:a0:34:ae:b0:e3:68:aa:bb:a4:aa:37:0c:0f: 87:19:e2:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwNzIyMTYyMDA3WhcNMjUwNzI5MTYyMDA3WjAYMRYwFAYD VQQDEw02ODdmYmEzNy01YjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dho2W5NmsYM+AF0sSj0NuKOuUDoZfOvQCWQe68S31hWOrlMld02tYjZSgOz yd5ycxG9yfvZ9TAMF1xxie4XC6jo0RruqDOEXArZxAzy76iIVdpfZMvCbGCDhSK9 kyAwBPddtMm4MpOHu2jK5syyTvJT3/qlWqp3HvROJYFHsDXlI+ODJWW0NUROd2tx m9eZIt/y6u9MBJhDPfmwRNMiwhQUovb3bUoGQ/M2nX4O8KsQeaFzG/ITkXxK8Ujq qHJvE5BWBB0T1LsNBnp2oXlOKwvFZNpK4Fnj9awGsD48HEz4eVxw7aTSpx8365GM t9+f6nU7miPqmP3vJg3ZWWgDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHU4RPFr NYiMs+6u2cgBY0zLO0+qMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9XtksHR9Bscx8lrIHWNhIxRIo4j6R/hOyOAB32GKaBzR6mWqqrfoK EKrqkEPsWXEbq+WAPboLpgPAdzY5S73ptxpV4f68p6Z99D4AvNjrEpZOaD2B0zrm Wy829Be4oQFEAjUhN0oXzIJvNF+ReYNXjnmSPO1zM47OUQRFC3wRgjXkwEJInDDE WDayvGTidDjDjn+jobLOj9ZT2ksOQW9VtNNwI8QmkUgTzYXdkMqk+e2mlEW/GeqN cdfA8yaUunt6keYqfmTyPqDBjpk3yEKR0fncduGoOCYigNv64uIXq0R7PnQZVOp5 cPYgaNEbsKA0rrDjaKq7pKo3DA+HGeJj -----END CERTIFICATE-----Generated at Thu Jul 24 08:31:17 2025 by rpki-client