$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: WAcixb8APsHryTZjqAIpMtH7zq1nxmj1QcdNw7f8AIU= Subject key identifier: A5:C8:D8:6A:92:62:F4:F2:96:2C:46:D5:1E:A7:C6:28:DE:BA:42:B7 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: B1 Signing time: Sat 19 Jul 2025 06:13:15 +0000 Manifest this update: Sat 19 Jul 2025 06:13:15 +0000 Manifest next update: Sat 26 Jul 2025 06:13:15 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: njY9HlU4AeL+qo6JMplv1aZlr2MusMc6fIVl5pxGUlc=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Jul 19 06:13:15 2025 GMT Not After : Jul 26 06:13:15 2025 GMT Subject: CN=687b377b-4988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:f6:ac:11:c8:fd:02:15:4a:94:75:8b:b1: 2d:6b:81:fa:e3:e0:22:2c:c0:33:0d:0f:b3:ca:e2: 29:fb:d9:fd:57:21:4e:ca:22:7e:6d:8c:04:08:e4: 62:00:3d:02:92:c7:ae:6b:1b:d3:ef:cc:fb:a7:e3: fd:4e:33:89:cc:ee:c3:79:d9:47:c5:6d:10:67:c1: 98:fe:88:d6:89:0a:10:ea:70:19:7b:13:b3:49:f6: 90:5c:5a:f7:45:fc:23:7d:59:37:c6:08:ed:20:32: 7e:97:7a:c0:f3:c6:42:1a:ab:84:af:2c:2a:a3:17: a5:ed:10:5f:80:43:b2:cc:b0:44:6f:68:61:71:17: b1:25:c2:1a:dc:f2:18:3a:e8:fa:2f:c2:0c:ac:7d: 75:df:e0:40:99:44:61:35:f3:5f:f2:0c:08:1c:4d: 53:9a:62:5d:8f:37:81:3d:c8:7e:8d:98:1e:ff:5b: e8:9e:ac:ad:18:91:de:7e:61:f3:29:c2:6e:84:c8: 12:03:4c:70:8c:3d:80:15:df:24:f6:dd:6c:7b:ec: 06:4f:2a:3b:f6:4e:85:31:32:28:41:41:7f:f7:e5: e0:9c:41:c6:7c:71:a3:c0:9c:cd:a8:38:bd:67:c0: ed:20:e1:0f:18:ae:44:44:89:8b:0a:e3:aa:17:5b: 3f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:D8:6A:92:62:F4:F2:96:2C:46:D5:1E:A7:C6:28:DE:BA:42:B7 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:71:b1:70:96:1f:da:93:8c:5a:f2:02:43:ea:8d:fb:00:85: 70:2d:2d:4e:a8:de:45:e7:39:67:57:02:a8:0c:c4:bb:db:9d: 51:16:a9:5b:00:c1:fa:ed:dc:38:ef:4c:d0:fe:30:45:22:1d: 18:67:67:71:3a:b6:08:ef:d1:0a:d0:a1:fb:88:01:7f:3f:b4: e1:28:fd:e9:28:4d:eb:5a:70:a8:2a:af:ff:43:9f:0a:c3:34: 56:99:ec:2b:2b:80:e0:c0:65:fb:49:42:0d:0d:c5:d8:ae:f7: cc:2e:44:4f:c5:a4:8d:d5:7c:bc:82:1a:f9:cc:0e:94:c1:66: e0:03:cf:83:ca:5c:e4:0d:24:0c:f8:90:4d:0e:4a:f8:5b:2a: 46:41:88:c7:64:ea:b2:af:de:25:09:01:d1:45:d8:40:ba:24: c3:53:4a:ec:3b:d9:e3:66:e9:89:3e:db:6b:27:58:4a:b3:d4: 88:36:fc:82:fa:dc:c2:d1:ee:61:16:ec:3d:f5:77:bf:25:74: 9f:6e:3a:3b:b6:78:fc:7e:cb:b8:96:da:b5:1a:bf:32:fc:4e: e9:eb:d0:4f:95:06:2d:2a:2e:89:26:85:fc:ad:bf:c5:a7:13: cf:eb:25:b6:9a:2b:77:91:24:d2:be:64:77:5c:3f:3d:92:ce: 97:31:bf:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUwNzE5MDYxMzE1WhcNMjUwNzI2MDYxMzE1WjAYMRYwFAYD VQQDEw02ODdiMzc3Yi00OTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiH2rBHI/QIVSpR1i7Eta4H64+AiLMAzDQ+zyuIp+9n9VyFOyiJ+bYwECORi AD0CkseuaxvT78z7p+P9TjOJzO7DedlHxW0QZ8GY/ojWiQoQ6nAZexOzSfaQXFr3 RfwjfVk3xgjtIDJ+l3rA88ZCGquErywqoxel7RBfgEOyzLBEb2hhcRexJcIa3PIY Ouj6L8IMrH113+BAmURhNfNf8gwIHE1TmmJdjzeBPch+jZge/1vonqytGJHefmHz KcJuhMgSA0xwjD2AFd8k9t1se+wGTyo79k6FMTIoQUF/9+XgnEHGfHGjwJzNqDi9 Z8DtIOEPGK5ERImLCuOqF1s/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXI2GqS YvTylixG1R6nxijeukK3MB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYcbFwlh/ak4xa8gJD6o37AIVwLS1OqN5F5zlnVwKoDMS7251RFqlb AMH67dw470zQ/jBFIh0YZ2dxOrYI79EK0KH7iAF/P7ThKP3pKE3rWnCoKq//Q58K wzRWmewrK4DgwGX7SUINDcXYrvfMLkRPxaSN1Xy8ghr5zA6UwWbgA8+DylzkDSQM +JBNDkr4WypGQYjHZOqyr94lCQHRRdhAuiTDU0rsO9njZumJPttrJ1hKs9SINvyC +tzC0e5hFuw99Xe/JXSfbjo7tnj8fsu4ltq1Gr8y/E7p69BPlQYtKi6JJoX8rb/F pxPP6yW2mit3kSTSvmR3XD89ks6XMb/g -----END CERTIFICATE-----Generated at Sun Jul 20 03:19:56 2025 by rpki-client