$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: ocAalt8/AuwaxDDeL4zz8zZcp7eZqJHBK8C+1qfQ7Ww= Subject key identifier: BE:B5:4E:DC:E4:D5:16:52:21:6D:30:14:66:64:35:AD:C5:05:33:22 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: D7 Signing time: Fri 05 Sep 2025 06:00:01 +0000 Manifest this update: Fri 05 Sep 2025 06:00:01 +0000 Manifest next update: Fri 12 Sep 2025 06:00:01 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: G5HnwnsS5VwreIQS2/gIVcXdXZmcsK/svaOBff+ORpI=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: Q8jUoDfTBKkYt+wlmI66aJ+35Q4MifbD8LinqGUg/KY=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: KoaV0URvtmzdHrqA1z33gHV+eShaD03rJhOUSMjsP9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Sep 5 06:00:01 2025 GMT Not After : Sep 12 06:00:01 2025 GMT Subject: CN=68ba7c61-cf12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:ce:e1:00:6d:93:b1:15:fd:86:f8:f2:d0: 05:05:7d:81:8e:aa:a5:f5:a5:4d:d1:08:19:9f:94: e0:2f:ab:73:7d:2a:19:79:f3:cc:cc:04:91:01:06: 1e:85:61:ee:dd:66:6c:fe:1c:73:ad:24:74:8d:b5: 51:22:f6:d6:57:d0:da:5c:14:5e:b2:01:c7:b0:8f: ab:b1:fe:13:8a:20:ec:5f:4f:1b:45:0d:13:e2:e0: fa:81:e8:04:76:42:ef:76:4b:00:ff:25:02:cf:d9: 04:bf:10:b0:da:d0:f7:93:32:51:3f:f6:7a:8b:e8: 73:ed:70:03:f9:db:3b:05:fa:e0:04:d6:3f:64:53: 23:0b:c2:d8:f2:b1:35:de:4f:10:94:86:45:25:96: 57:f9:b4:c1:c9:f0:c0:a5:80:f2:e0:5d:82:88:6e: 86:52:97:4f:e7:63:ea:c7:be:24:d0:f2:5c:38:88: f5:ea:f8:f9:72:e9:6d:6b:9d:95:ce:30:85:93:e4: 67:65:fd:90:76:8c:24:df:8d:9d:b4:a7:2b:fe:af: ac:e9:4c:2c:07:bf:a2:d0:b1:d5:33:79:08:b5:79: 48:d8:59:9b:70:c4:fe:ed:7f:dd:1b:ba:6b:35:75: 83:24:39:19:b5:56:ec:57:61:11:b2:8c:c7:c5:da: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B5:4E:DC:E4:D5:16:52:21:6D:30:14:66:64:35:AD:C5:05:33:22 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6c:ee:60:bb:db:f3:81:81:17:c7:97:e5:57:f1:b4:d5:33: 5a:5b:b8:a4:9a:42:5b:c7:c2:9a:74:fc:27:c1:3e:58:a7:06: 5d:13:b7:cc:f5:3d:e9:0b:2a:7d:72:a6:cf:5f:a4:21:69:7c: 03:69:41:48:01:78:22:02:8b:90:91:ab:df:ca:68:50:8f:05: 5b:77:05:38:b2:67:17:58:b7:e2:6e:0d:f6:c4:7a:7f:68:d3: 03:7c:7f:a5:67:ec:c5:14:57:70:2d:01:53:f9:58:17:5b:0d: 1e:5b:a2:0d:1c:42:3e:1f:f1:a3:43:55:65:76:5f:9f:ad:ea: 9c:05:36:2e:1b:33:9d:7d:19:ff:e9:b3:3a:37:28:51:1d:ba: 2d:23:c9:39:19:59:10:c1:e7:5c:30:f1:19:ca:32:40:eb:4e: df:80:91:1f:e0:e8:8c:dd:b6:5f:18:18:cb:39:84:55:b1:5f: ab:5f:99:16:14:a2:a9:8b:ab:ea:09:82:d7:66:30:19:6e:90: d1:e2:2c:b8:01:98:30:05:b3:43:db:c5:0f:9c:ad:07:4e:8d: 2b:5d:5e:51:fd:b3:0a:5a:4f:fc:7d:7a:33:3b:1a:86:6e:02: eb:8c:af:c1:59:0c:bc:2d:96:09:88:25:ad:5a:30:7d:d2:eb: 64:7f:df:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwOTA1MDYwMDAxWhcNMjUwOTEyMDYwMDAxWjAYMRYwFAYD VQQDEw02OGJhN2M2MS1jZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBPO4QBtk7EV/Yb48tAFBX2Bjqql9aVN0QgZn5TgL6tzfSoZefPMzASRAQYe hWHu3WZs/hxzrSR0jbVRIvbWV9DaXBResgHHsI+rsf4TiiDsX08bRQ0T4uD6gegE dkLvdksA/yUCz9kEvxCw2tD3kzJRP/Z6i+hz7XAD+ds7BfrgBNY/ZFMjC8LY8rE1 3k8QlIZFJZZX+bTByfDApYDy4F2CiG6GUpdP52Pqx74k0PJcOIj16vj5culta52V zjCFk+RnZf2Qdowk342dtKcr/q+s6UwsB7+i0LHVM3kItXlI2FmbcMT+7X/dG7pr NXWDJDkZtVbsV2ERsozHxdqwkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL61Ttzk 1RZSIW0wFGZkNa3FBTMiMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPbO5gu9vzgYEXx5flV/G01TNaW7ikmkJbx8KadPwnwT5YpwZdE7fM 9T3pCyp9cqbPX6QhaXwDaUFIAXgiAouQkavfymhQjwVbdwU4smcXWLfibg32xHp/ aNMDfH+lZ+zFFFdwLQFT+VgXWw0eW6INHEI+H/GjQ1Vldl+freqcBTYuGzOdfRn/ 6bM6NyhRHbotI8k5GVkQwedcMPEZyjJA607fgJEf4OiM3bZfGBjLOYRVsV+rX5kW FKKpi6vqCYLXZjAZbpDR4iy4AZgwBbND28UPnK0HTo0rXV5R/bMKWk/8fXozOxqG bgLrjK/BWQy8LZYJiCWtWjB90utkf98p -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:22 2025 by rpki-client