$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: N47qEmcJt+j7j9tkb3+yGXXPqCHo8NWowpQx9kk2JTM= Subject key identifier: 59:C8:61:4A:13:21:55:FD:61:8E:F0:20:A2:2E:60:A0:70:0D:73:BE Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 0189 Signing time: Mon 21 Jul 2025 03:36:35 +0000 Manifest this update: Mon 21 Jul 2025 03:36:35 +0000 Manifest next update: Mon 28 Jul 2025 03:36:35 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: Aiu6HqBwQiFCtDbvasSHi1bmPSRXE3YLtNt8i5Tzikc=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: TJboroWTjSH5MHMWjJ273LEWmOXtmootlWn74QKDiMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Jul 21 03:36:35 2025 GMT Not After : Jul 28 03:36:35 2025 GMT Subject: CN=687db5c3-71f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:36:4c:4d:60:aa:cf:a8:c7:1d:57:ef:79:c3: 30:a1:a1:b5:7f:b9:d3:46:37:bd:7e:c4:15:e2:69: 2a:c8:40:ae:7b:30:2f:e5:2c:c7:af:d1:b7:01:c7: 62:a6:18:61:75:2a:ec:1b:2d:ce:fc:a2:37:8b:6f: fb:87:2f:4f:4e:4f:b5:93:f1:0f:b5:d1:fd:2e:30: a4:c9:18:08:ca:0c:dc:c5:54:cc:90:4c:5e:7b:1e: 2e:d6:48:f2:b4:b5:49:92:ad:81:10:76:2c:4d:e8: 6a:8f:4f:78:a9:a8:57:01:fc:3b:16:76:8b:0a:2f: be:af:56:64:9a:73:1a:1a:18:7f:98:63:64:3d:ca: d6:01:0e:a0:1c:70:ec:da:77:8f:4f:f3:96:8a:0e: ee:69:66:fc:b8:ed:4c:bd:4e:f7:34:09:5c:f8:24: 28:73:88:7a:de:f3:11:f3:87:00:38:1c:52:bc:25: 31:0d:c9:c1:76:a4:48:38:de:5e:86:2a:f9:a9:ad: 45:af:5b:9a:ec:a1:9c:47:92:3d:ba:ac:ea:b3:74: 02:4b:a0:4b:be:59:02:61:eb:6b:13:82:b4:1c:94: 96:58:78:a9:df:aa:d4:2c:1e:14:fe:ba:87:cb:84: 1a:fe:c8:fe:32:b1:1f:23:b3:60:0c:6d:4e:5b:89: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C8:61:4A:13:21:55:FD:61:8E:F0:20:A2:2E:60:A0:70:0D:73:BE X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:de:45:86:7b:3b:73:d4:1e:d3:14:ce:07:d3:9d:30:1b:d7: b3:a9:2f:b6:9f:84:0e:c0:72:47:68:fa:da:52:a0:06:3f:99: f6:cc:4e:2e:be:64:94:54:3a:e8:98:30:23:f4:2c:46:5d:17: b4:66:27:3e:95:63:af:d9:f4:65:ce:4c:a4:b5:8f:c7:69:ec: 3f:e6:46:15:cf:8f:db:1f:f3:df:c8:a5:ed:92:4f:d6:87:df: 12:df:54:1e:c3:f8:bf:7b:37:fe:43:c8:fe:8d:e4:98:a7:4c: dd:51:81:21:26:18:a9:1b:4b:70:5b:62:a8:d2:bd:ab:6d:d8: 56:68:96:f7:36:41:cd:d2:6e:32:8b:08:aa:7c:ba:6a:fa:09: 2d:00:59:a9:26:0f:9c:38:d3:5d:32:92:3d:f4:bd:95:a7:ad: a7:56:74:ea:78:a6:c6:75:93:a1:04:c8:70:c5:0d:3f:0a:da: 12:35:bb:fb:04:0c:4b:28:7f:19:9a:48:05:c9:f7:d3:b8:5d: 3e:94:1d:5a:91:2d:45:5e:5c:5e:a9:72:b1:51:9a:31:68:6c: 77:e8:7e:ba:07:50:17:f1:92:33:cd:a8:c4:82:c3:2b:ad:a4: 21:41:e6:d7:fd:6f:97:1a:44:1b:d6:9c:ed:e4:d1:63:d5:95: 8c:b7:4a:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjUwNzIxMDMzNjM1WhcNMjUwNzI4MDMzNjM1WjAYMRYwFAYD VQQDEw02ODdkYjVjMy03MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jZMTWCqz6jHHVfvecMwoaG1f7nTRje9fsQV4mkqyECuezAv5SzHr9G3Acdi phhhdSrsGy3O/KI3i2/7hy9PTk+1k/EPtdH9LjCkyRgIygzcxVTMkExeex4u1kjy tLVJkq2BEHYsTehqj094qahXAfw7FnaLCi++r1ZkmnMaGhh/mGNkPcrWAQ6gHHDs 2nePT/OWig7uaWb8uO1MvU73NAlc+CQoc4h63vMR84cAOBxSvCUxDcnBdqRION5e hir5qa1Fr1ua7KGcR5I9uqzqs3QCS6BLvlkCYetrE4K0HJSWWHip36rULB4U/rqH y4Qa/sj+MrEfI7NgDG1OW4mL8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnIYUoT IVX9YY7wIKIuYKBwDXO+MB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt3kWGeztz1B7TFM4H050wG9ezqS+2n4QOwHJHaPraUqAGP5n2zE4u vmSUVDromDAj9CxGXRe0Zic+lWOv2fRlzkyktY/Haew/5kYVz4/bH/PfyKXtkk/W h98S31Qew/i/ezf+Q8j+jeSYp0zdUYEhJhipG0twW2Ko0r2rbdhWaJb3NkHN0m4y iwiqfLpq+gktAFmpJg+cONNdMpI99L2Vp62nVnTqeKbGdZOhBMhwxQ0/CtoSNbv7 BAxLKH8ZmkgFyffTuF0+lB1akS1FXlxeqXKxUZoxaGx36H66B1AX8ZIzzajEgsMr raQhQebX/W+XGkQb1pzt5NFj1ZWMt0p7 -----END CERTIFICATE-----Generated at Mon Jul 21 13:23:54 2025 by rpki-client