$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: Cm3xVe3Ee40OqfoOZxiwqGji3zgM1/CbUs0gQfFK8dE= Subject key identifier: F4:E3:67:10:84:6D:A3:25:2B:6B:1A:9D:18:B0:79:E9:2A:CF:22:33 Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: F2 Signing time: Thu 21 Aug 2025 05:26:44 +0000 Manifest this update: Thu 21 Aug 2025 05:26:43 +0000 Manifest next update: Thu 28 Aug 2025 05:26:43 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: QSsMIDAVpCPplLc5CK19dfnOcE9sTDlSobkbxIDSCNo=) 2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=) 3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Validity Not Before: Aug 21 05:26:43 2025 GMT Not After : Aug 28 05:26:43 2025 GMT Subject: CN=68a6ae13-aadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:ab:d8:62:82:05:7c:c3:96:0b:0e:97:07: ac:b7:48:b0:53:93:04:cb:3a:74:23:99:cf:6e:8a: 7b:0d:00:8b:14:1d:bf:d9:bf:8c:12:1d:d5:a8:44: f1:76:3e:92:cf:e8:aa:26:53:4e:78:a7:c4:7e:d5: 07:06:f4:72:74:5f:78:32:0e:2c:bd:61:f8:d7:68: 1a:b2:7b:69:7e:2b:62:8a:66:c5:33:b1:e3:68:ac: f2:63:68:b3:96:4b:95:b4:15:cf:6b:d7:c1:69:d7: ae:ff:ba:4c:1a:09:91:76:b7:5b:12:cb:cf:2c:49: d1:79:6e:66:f0:ee:b6:24:12:cb:3e:3e:ec:98:89: 65:07:8f:71:58:28:03:40:86:c3:b4:f9:fb:11:94: d0:e9:18:eb:33:27:1b:68:89:e8:ba:b1:0d:35:c7: f9:ed:bb:a6:ba:6d:34:68:00:84:1b:f0:a8:ad:e6: a9:7a:4e:66:5e:3e:11:f9:ff:ef:67:3b:e7:c2:34: 4c:d9:22:10:5a:59:04:3a:67:25:b4:ec:02:3b:03: 6d:9f:9b:98:29:56:02:bc:0d:aa:0f:93:da:3b:91: 50:ac:50:aa:b5:f3:93:6b:df:4e:a6:15:84:29:48: 21:ab:51:09:b8:59:14:05:b7:c0:41:25:39:5e:1d: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E3:67:10:84:6D:A3:25:2B:6B:1A:9D:18:B0:79:E9:2A:CF:22:33 X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0f:94:37:c8:4b:1e:0f:6b:5e:d2:67:c7:7a:f6:21:0f:3d: cf:c9:c7:c7:be:ee:49:3a:9e:65:e3:83:b0:72:92:bb:1b:c5: c9:b8:8f:50:20:56:9d:5f:95:75:9a:ee:62:73:7b:bd:d9:2c: af:84:1a:da:f9:7d:47:2e:eb:57:54:71:f0:9c:ee:f1:00:72: 10:a4:fc:ca:bb:c6:8e:06:94:92:8f:a5:18:72:c8:d6:f1:ec: f2:70:a9:50:de:dc:9b:f5:c2:7f:a2:40:39:63:d0:e2:55:a0: fb:8b:20:1c:a4:2c:cd:15:c2:98:44:41:db:ee:60:e6:9b:64: 0b:75:d6:69:d7:cf:20:71:e8:0f:67:23:26:ba:ab:ef:41:e6: 58:a9:ee:36:bb:16:88:4d:7d:31:38:26:91:b1:57:c0:24:70: ae:bc:ef:fe:81:cf:42:bf:8d:fc:62:e2:13:86:09:b2:8b:42: 91:0b:77:86:f0:23:2a:bd:3d:f2:2f:87:cb:ae:2b:f5:fe:11: 7b:6a:a3:8c:04:8e:a3:c3:bb:e7:83:84:1a:72:83:81:3d:47: db:79:ea:e8:be:92:b5:d8:b8:24:e1:8b:81:63:1a:a5:de:aa: a6:d6:73:f0:1a:c4:78:10:2a:6a:ae:1e:6e:e2:6a:bf:10:bf: 28:ed:a3:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQUIxMTAvBgNVBAUTKDI2NTcwM0Q4NTkzM0Y0NUQ5QjA0REFCNzcyMzc1ODRG QzkyRDlENDQwHhcNMjUwODIxMDUyNjQzWhcNMjUwODI4MDUyNjQzWjAYMRYwFAYD VQQDEw02OGE2YWUxMy1hYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXer2GKCBXzDlgsOlwest0iwU5MEyzp0I5nPbop7DQCLFB2/2b+MEh3VqETx dj6Sz+iqJlNOeKfEftUHBvRydF94Mg4svWH412gasntpfitiimbFM7HjaKzyY2iz lkuVtBXPa9fBadeu/7pMGgmRdrdbEsvPLEnReW5m8O62JBLLPj7smIllB49xWCgD QIbDtPn7EZTQ6RjrMycbaInourENNcf57bumum00aACEG/Coreapek5mXj4R+f/v ZzvnwjRM2SIQWlkEOmcltOwCOwNtn5uYKVYCvA2qD5PaO5FQrFCqtfOTa99OphWE KUghq1EJuFkUBbfAQSU5Xh2FmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTjZxCE baMlK2sanRiweekqzyIzMB8GA1UdIwQYMBaAFCZXA9hZM/RdmwTat3I3WE/JLZ1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBBQi83NDQ1MjZGNjBG QTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlGMmJCTnEzY2pkWVQ4a3Ru VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlG MmJCTnEzY2pkWVQ4a3RuVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3D5Q3yEseD2te0mfHevYhDz3PycfHvu5JOp5l44OwcpK7G8XJuI9Q IFadX5V1mu5ic3u92SyvhBra+X1HLutXVHHwnO7xAHIQpPzKu8aOBpSSj6UYcsjW 8ezycKlQ3tyb9cJ/okA5Y9DiVaD7iyAcpCzNFcKYREHb7mDmm2QLddZp188gcegP ZyMmuqvvQeZYqe42uxaITX0xOCaRsVfAJHCuvO/+gc9Cv438YuIThgmyi0KRC3eG 8CMqvT3yL4fLriv1/hF7aqOMBI6jw7vng4QacoOBPUfbeerovpK12Lgk4YuBYxql 3qqm1nPwGsR4ECpqrh5u4mq/EL8o7aM7 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:36 2025 by rpki-client