$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json) Hash identifier: pROPf9ED4bmC6ckWDO3DOZV8qR+6y/nUmEv1s1p9MYc= Subject key identifier: 2F:A9:84:2F:1B:BE:13:4F:F8:33:01:AC:24:C2:97:44:47:65:F0:54 Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft Manifest number: FB Signing time: Sat 19 Jul 2025 05:25:17 +0000 Manifest this update: Sat 19 Jul 2025 05:25:16 +0000 Manifest next update: Sat 26 Jul 2025 05:25:16 +0000 Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: Oao0M4N5K9MjExRU+w1CXp3mFl87f5SFI3WI03+A5UI=) 2: 6F09FF784B3111F0AED6945EC4F9AE02.roa (hash: I1sNkwrJ9A9oI4DVJU2qBgFfehpgUx5dO53gjYthp7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Validity Not Before: Jul 19 05:25:16 2025 GMT Not After : Jul 26 05:25:16 2025 GMT Subject: CN=687b2c3c-878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:28:b2:28:71:fc:f1:46:67:11:33:f8:06: a3:c7:f9:cf:a5:7e:cc:2f:24:dd:1d:7d:8d:31:6b: 84:c1:d9:d0:a7:e3:8c:f0:05:c3:89:68:25:04:6a: cd:39:88:8a:9c:16:23:e1:09:ab:49:7e:5c:82:70: d6:d9:1d:77:52:e3:ab:46:96:a9:e0:0a:d1:40:d4: fe:d0:9b:0e:87:9a:44:b7:f1:7d:58:28:70:74:ff: 15:10:b4:c2:45:ff:64:61:b5:fd:80:8e:7e:ec:fd: 86:26:1f:14:ea:54:78:82:48:9b:50:d8:8d:7f:85: a5:f5:8f:b6:a8:17:af:85:02:ff:f6:f1:d9:93:9a: ab:6a:8d:25:89:a6:9d:83:3b:c1:17:d3:ea:be:9b: 8e:09:6b:52:fa:99:3e:95:3d:31:ab:11:15:ff:56: 4d:e1:5b:56:4b:06:5a:11:34:a8:fc:ca:ed:ad:89: f7:87:56:fe:dd:2d:71:c1:8e:53:fb:4b:7c:f1:1f: f0:37:20:ea:c2:5a:9e:85:00:a9:12:97:19:f3:59: dd:6d:84:32:88:cf:14:53:18:6c:ea:a1:13:71:3c: d0:a9:c3:2d:70:73:65:c5:ae:66:01:f4:3b:a2:eb: 31:61:df:44:35:bf:ca:0f:11:4e:5f:b8:8e:18:1f: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:84:2F:1B:BE:13:4F:F8:33:01:AC:24:C2:97:44:47:65:F0:54 X509v3 Authority Key Identifier: keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:64:d3:6f:eb:43:48:b3:4e:5e:9c:58:1e:77:f9:7f:d7:7b: ba:f5:7d:f9:4f:4f:1c:65:21:b3:7b:17:92:79:af:db:59:85: 6a:6c:70:92:5c:35:46:2b:ef:a2:aa:5e:a8:76:46:25:1c:88: 96:49:65:e5:f0:82:c3:0d:c8:12:4c:2e:81:4f:f3:dd:e0:11: e8:4d:a0:dd:ea:11:be:f2:cd:17:2e:aa:50:8c:d6:bd:5c:ed: 90:96:2f:e5:1f:fb:cb:e8:3c:2d:7b:cb:62:b1:77:d0:7f:fc: 1a:84:04:4d:8f:3a:de:89:77:ad:24:a4:51:de:19:d8:c6:e4: 0f:0f:f9:40:85:0d:0c:2a:20:5c:9b:d3:70:b3:ec:b6:2d:77: 95:3f:af:22:b2:a8:ff:0c:b9:27:3e:62:8a:56:23:76:78:a4: 40:9e:22:78:48:41:5d:e6:f4:f6:48:68:b5:e7:7a:92:5b:68: a6:6b:88:62:e3:2b:e0:60:de:c3:83:47:6d:cb:9f:6c:2b:a3: 1f:ea:fd:95:00:62:d8:68:c1:ee:77:fe:a3:ba:da:14:1b:1f: a9:1c:09:e9:98:40:f9:e5:53:e4:a4:27:29:59:ff:a3:61:86: 53:b3:1a:cc:82:a1:54:9b:93:fe:84:f1:c1:3b:93:ea:e9:2c: a3:11:04:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz NzVFODEzREIwHhcNMjUwNzE5MDUyNTE2WhcNMjUwNzI2MDUyNTE2WjAYMRYwFAYD VQQDEw02ODdiMmMzYy04NzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzUosihx/PFGZxEz+Aajx/nPpX7MLyTdHX2NMWuEwdnQp+OM8AXDiWglBGrN OYiKnBYj4QmrSX5cgnDW2R13UuOrRpap4ArRQNT+0JsOh5pEt/F9WChwdP8VELTC Rf9kYbX9gI5+7P2GJh8U6lR4gkibUNiNf4Wl9Y+2qBevhQL/9vHZk5qrao0liaad gzvBF9PqvpuOCWtS+pk+lT0xqxEV/1ZN4VtWSwZaETSo/MrtrYn3h1b+3S1xwY5T +0t88R/wNyDqwlqehQCpEpcZ81ndbYQyiM8UUxhs6qETcTzQqcMtcHNlxa5mAfQ7 ousxYd9ENb/KDxFOX7iOGB/6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+phC8b vhNP+DMBrCTCl0RHZfBUMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI2RC8yMTUyMjE4MkU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5 dHhMX0IzM2dTUWczWG9FOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdZNNv60NIs05enFged/l/13u69X35T08cZSGzexeSea/bWYVqbHCS XDVGK++iql6odkYlHIiWSWXl8ILDDcgSTC6BT/Pd4BHoTaDd6hG+8s0XLqpQjNa9 XO2Qli/lH/vL6Dwte8tisXfQf/wahARNjzreiXetJKRR3hnYxuQPD/lAhQ0MKiBc m9Nws+y2LXeVP68isqj/DLknPmKKViN2eKRAniJ4SEFd5vT2SGi153qSW2ima4hi 4yvgYN7Dg0dty59sK6Mf6v2VAGLYaMHud/6jutoUGx+pHAnpmED55VPkpCcpWf+j YYZTsxrMgqFUm5P+hPHBO5Pq6SyjEQQb -----END CERTIFICATE-----Generated at Sun Jul 20 03:15:59 2025 by rpki-client