$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: ZQkjokT7+WBxBIgVyotj1vpw6PkjbMH3ZNpbuR82Qmw= Subject key identifier: 67:12:D5:E2:97:00:DC:35:0A:61:34:41:B7:1A:FD:60:1A:E7:BB:3D Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1C17 Signing time: Thu 24 Jul 2025 16:18:38 +0000 Manifest this update: Thu 24 Jul 2025 16:18:38 +0000 Manifest next update: Thu 31 Jul 2025 16:18:38 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: xs06BDJ9jltJqAOfzgKBcHy8dD4M4U8wdVLnbl7zHMs=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 16:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7215 (0x1c2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Jul 24 16:18:38 2025 GMT Not After : Jul 31 16:18:38 2025 GMT Subject: CN=68825cde-7c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:1b:7d:e7:6a:75:e0:57:a2:b5:da:49:9a: 15:ef:0f:01:a7:15:04:73:b8:1a:fa:ee:43:21:72: 87:0f:87:29:ed:d9:67:e7:01:05:1b:6c:57:64:3d: 9f:80:da:c6:56:63:58:e7:55:68:fa:96:6f:bc:ba: 89:20:ca:e7:51:3e:36:f1:2c:5f:97:94:da:ee:1e: 72:c6:7f:25:cd:7a:3f:2f:6b:00:27:15:8d:27:6a: 94:ba:83:30:62:0f:8b:38:06:eb:f8:b7:a3:00:72: 58:5c:44:b8:35:e5:57:ef:a9:be:11:14:17:9a:80: 65:cd:d3:ee:2f:5d:4c:d1:9b:8a:62:fc:8f:33:4b: c7:ce:b9:2f:8f:f6:43:35:70:00:19:e7:f7:24:09: 0e:e5:8a:4e:34:33:71:f7:39:ae:02:7b:87:2d:39: 0e:7f:d1:23:0e:80:63:4a:fa:cd:a9:ce:2b:b3:75: 75:e4:80:1c:da:76:51:14:e5:80:7a:58:40:4e:15: d9:15:f4:27:73:3e:68:5c:77:0a:c6:86:13:f1:e2: 51:c7:98:d6:a3:d5:46:25:5f:43:b9:ad:80:19:b4: 7b:f0:ec:8b:e1:78:a1:e0:f5:84:66:2b:ee:df:f5: b5:13:c6:94:55:bf:b5:9c:c4:20:0b:c3:2e:0f:2f: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:12:D5:E2:97:00:DC:35:0A:61:34:41:B7:1A:FD:60:1A:E7:BB:3D X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:8e:fb:30:09:51:13:a3:71:b5:f8:e2:42:26:64:35:ed:5d: 15:2e:3a:e6:c1:c0:55:95:71:b8:0d:2b:55:bc:1e:57:e4:61: 88:2b:c8:2d:86:7c:a3:5a:82:e8:d6:01:a6:12:c4:29:1f:fa: 1c:8c:2c:b8:10:d8:12:41:a8:76:67:08:db:b6:3f:99:7c:be: 1c:23:23:6a:ff:61:bc:d8:6b:ca:fc:42:d5:5e:1d:ba:7b:a3: 74:54:37:a8:c9:3d:2a:a5:0b:65:e2:25:27:57:de:16:a2:16: 33:30:da:0e:5f:31:56:d1:c6:ab:a0:ea:a6:59:a0:6d:12:5d: 56:d2:5a:57:61:f1:f0:1b:5d:37:a2:c3:7d:a9:0b:83:15:ac: 07:d4:7d:e6:4d:16:3c:8e:d3:4b:ff:77:5d:20:c4:24:8a:df: 74:67:3a:01:c9:95:f2:ba:f4:cd:eb:48:a8:3e:23:82:c6:53: 1f:fe:8e:72:a4:7d:5a:25:a7:a3:6c:8a:ea:18:e9:bb:4f:53: 93:93:ee:6f:0b:85:3c:49:e2:d3:d4:92:85:a4:5e:bc:b3:1c: 2f:6d:c8:95:29:45:0c:4c:c5:d0:64:a3:13:1f:58:76:a3:90: 97:88:a7:08:77:78:ef:55:0b:97:61:dd:3f:06:ec:ea:5f:90: 58:76:6a:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwNzI0MTYxODM4WhcNMjUwNzMxMTYxODM4WjAYMRYwFAYD VQQDEw02ODgyNWNkZS03YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkwbfedqdeBXorXaSZoV7w8BpxUEc7ga+u5DIXKHD4cp7dln5wEFG2xXZD2f gNrGVmNY51Vo+pZvvLqJIMrnUT428Sxfl5Ta7h5yxn8lzXo/L2sAJxWNJ2qUuoMw Yg+LOAbr+LejAHJYXES4NeVX76m+ERQXmoBlzdPuL11M0ZuKYvyPM0vHzrkvj/ZD NXAAGef3JAkO5YpONDNx9zmuAnuHLTkOf9EjDoBjSvrNqc4rs3V15IAc2nZRFOWA elhAThXZFfQncz5oXHcKxoYT8eJRx5jWo9VGJV9Dua2AGbR78OyL4Xih4PWEZivu 3/W1E8aUVb+1nMQgC8MuDy8lrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcS1eKX ANw1CmE0Qbca/WAa57s9MB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7jvswCVETo3G1+OJCJmQ17V0VLjrmwcBVlXG4DStVvB5X5GGIK8gt hnyjWoLo1gGmEsQpH/ocjCy4ENgSQah2Zwjbtj+ZfL4cIyNq/2G82GvK/ELVXh26 e6N0VDeoyT0qpQtl4iUnV94WohYzMNoOXzFW0caroOqmWaBtEl1W0lpXYfHwG103 osN9qQuDFawH1H3mTRY8jtNL/3ddIMQkit90ZzoByZXyuvTN60ioPiOCxlMf/o5y pH1aJaejbIrqGOm7T1OTk+5vC4U8SeLT1JKFpF68sxwvbciVKUUMTMXQZKMTH1h2 o5CXiKcId3jvVQuXYd0/BuzqX5BYdmou -----END CERTIFICATE-----Generated at Fri Jul 25 05:26:31 2025 by rpki-client