$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft File: jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json) Hash identifier: Tb91S1j8nOY8gX7VmKeZFcxXF6ZmVr+35+EiNx9Nx6Y= Subject key identifier: B8:CE:2B:5E:36:BE:02:E3:B0:99:35:64:EB:7D:71:14:AE:12:D9:79 Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft Manifest number: 03F2 Signing time: Fri 18 Jul 2025 23:35:36 +0000 Manifest this update: Fri 18 Jul 2025 23:35:36 +0000 Manifest next update: Fri 25 Jul 2025 23:35:36 +0000 Files and hashes: 1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: sOzX/cEbifSEPUXJ1+upec2uKkX3uPx+Jl0izPdpoPI=) 2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=) 3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Validity Not Before: Jul 18 23:35:36 2025 GMT Not After : Jul 25 23:35:36 2025 GMT Subject: CN=687ada48-17d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:30:16:f6:8f:a9:fd:40:b8:e6:f9:46:45: 4b:8a:6d:03:23:e3:14:10:08:86:aa:e4:75:7d:05: af:78:62:9e:1e:91:40:78:ff:05:8f:9d:db:43:9e: c4:44:6e:5c:e3:3f:68:b5:6a:34:cb:87:d3:71:a2: 29:0f:7c:fd:0d:6b:d4:e4:c0:06:61:64:7c:09:32: 59:d1:17:4b:c7:98:b7:73:4c:cd:a8:a0:12:73:c0: d1:ba:ec:77:e0:8d:5c:c7:87:7a:cb:fb:d3:c2:a8: 3a:09:7b:b5:04:c9:89:f7:0a:87:65:0b:78:a6:52: 7d:a8:f9:55:1c:31:e7:87:11:35:5a:3d:fb:36:a8: f6:61:1a:55:cb:60:d7:d7:28:b4:25:29:fb:fb:70: ab:14:db:ba:e9:bd:34:ee:af:3c:7e:a4:45:54:31: 45:e1:7b:93:c3:5a:52:1f:42:20:74:e2:ca:1f:53: 65:93:db:df:f7:b0:d6:48:a2:74:96:bf:fc:da:cb: e6:a8:1c:05:7e:1d:bb:fb:ed:1c:e9:2e:10:38:d4: 32:b4:1b:9e:a3:24:24:52:c6:29:2c:4e:a4:1d:03: 07:be:0b:62:af:d6:25:81:63:fe:c8:82:a3:fa:f9: 33:9f:9a:c6:6b:e5:60:05:68:88:41:13:5a:e4:ed: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CE:2B:5E:36:BE:02:E3:B0:99:35:64:EB:7D:71:14:AE:12:D9:79 X509v3 Authority Key Identifier: keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:9b:94:e1:a1:1f:be:90:8b:b4:30:96:aa:2c:95:fa:21:de: 93:7e:49:63:17:5e:04:d6:92:08:9d:1b:21:6c:77:3c:2d:1f: 05:4b:78:1b:05:73:f5:ed:55:6a:27:cb:77:7a:02:16:ce:19: fd:02:f4:43:36:e9:19:8c:d3:dc:82:25:c5:8c:af:18:ec:18: b6:b6:81:9f:5b:37:a5:f5:13:13:ee:fb:b8:8b:34:ac:35:87: a7:31:25:f9:64:a9:ad:c3:d1:52:96:b7:ac:76:57:a8:c7:a5: a4:64:f0:8a:46:cf:d7:ff:95:7c:3a:91:ad:65:79:58:98:2a: 34:3d:d6:0f:3d:cc:a0:f4:0f:90:69:de:ae:af:bf:b0:f0:8a: 36:f0:eb:a8:d4:43:8e:4c:f5:dd:36:99:be:6d:25:51:33:73: 71:d3:97:74:94:3a:e0:f1:81:ea:f1:45:14:f9:67:68:64:24: 76:79:25:40:ca:f5:72:f3:34:6b:3a:eb:3d:5a:c0:88:65:fd: 3e:95:a2:f9:c3:77:ae:6f:75:4c:d6:6a:9f:8d:6e:dc:b9:1f: b2:f9:de:26:59:62:01:ba:f6:fa:7c:3c:86:e3:0b:31:83:25: e4:d4:24:2d:5d:20:ec:47:ed:88:14:38:6b:37:41:4c:8c:48: ab:fd:a9:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0 MEJBRDNBREUwHhcNMjUwNzE4MjMzNTM2WhcNMjUwNzI1MjMzNTM2WjAYMRYwFAYD VQQDEw02ODdhZGE0OC0xN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a4wFvaPqf1AuOb5RkVLim0DI+MUEAiGquR1fQWveGKeHpFAeP8Fj53bQ57E RG5c4z9otWo0y4fTcaIpD3z9DWvU5MAGYWR8CTJZ0RdLx5i3c0zNqKASc8DRuux3 4I1cx4d6y/vTwqg6CXu1BMmJ9wqHZQt4plJ9qPlVHDHnhxE1Wj37Nqj2YRpVy2DX 1yi0JSn7+3CrFNu66b007q88fqRFVDFF4XuTw1pSH0IgdOLKH1Nlk9vf97DWSKJ0 lr/82svmqBwFfh27++0c6S4QONQytBueoyQkUsYpLE6kHQMHvgtir9YlgWP+yIKj +vkzn5rGa+VgBWiIQRNa5O1BMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjOK142 vgLjsJk1ZOt9cRSuEtl5MB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4 ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS9BNDZCRTU4ODg4ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgx d3RaanNLYWhDODFBdXRPdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDam5ThoR++kIu0MJaqLJX6Id6TfkljF14E1pIInRshbHc8LR8FS3gb BXP17VVqJ8t3egIWzhn9AvRDNukZjNPcgiXFjK8Y7Bi2toGfWzel9RMT7vu4izSs NYenMSX5ZKmtw9FSlresdleox6WkZPCKRs/X/5V8OpGtZXlYmCo0PdYPPcyg9A+Q ad6ur7+w8Io28Ouo1EOOTPXdNpm+bSVRM3Nx05d0lDrg8YHq8UUU+WdoZCR2eSVA yvVy8zRrOus9WsCIZf0+laL5w3eub3VM1mqfjW7cuR+y+d4mWWIBuvb6fDyG4wsx gyXk1CQtXSDsR+2IFDhrN0FMjEir/amw -----END CERTIFICATE-----Generated at Sun Jul 20 15:05:25 2025 by rpki-client