$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: ENUIMmQ/Dl5uCZICU596SUwlzLriH6Cob5/zdQ8/u5U= Subject key identifier: 7A:DC:97:D0:EB:9F:D5:17:1F:69:0E:73:45:B5:33:B3:49:54:B9:00 Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0D75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0D6A Signing time: Wed 20 Aug 2025 18:03:32 +0000 Manifest this update: Wed 20 Aug 2025 18:03:31 +0000 Manifest next update: Wed 27 Aug 2025 18:03:31 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: Bio/1ORdxYZhNGigPd7TpsPvMt4815kRAo435gEENPA=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3445 (0xd75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: Aug 20 18:03:31 2025 GMT Not After : Aug 27 18:03:31 2025 GMT Subject: CN=68a60df3-0ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:d6:ac:b3:cb:57:c2:f6:58:48:18:9b:69: b2:87:e9:a7:d6:be:f2:ae:a1:ea:db:cc:f0:0f:0b: e4:7b:7f:b8:4b:4e:df:f7:9f:49:c6:51:10:c0:2c: b9:4e:da:75:d0:2c:27:6d:65:0b:e0:9c:ba:bb:f4: f5:30:4e:f4:7e:74:82:ef:4a:05:21:e9:1d:35:50: e9:1c:9a:7e:43:45:90:79:63:e3:29:32:65:9f:61: 0e:80:09:91:69:b1:84:25:2a:ca:d7:93:7c:40:76: 1e:99:a3:71:74:73:18:7e:33:86:e3:5a:6a:6d:70: 6d:55:b0:6f:71:32:03:a0:13:70:f5:d3:ec:28:c9: 17:bb:21:8a:d0:b9:3a:d0:26:76:96:64:3c:d7:b5: b6:a5:55:4f:7b:91:aa:88:1b:bc:38:43:3d:7a:18: 1e:68:c8:f1:c4:df:b8:e8:80:7c:d1:ae:1e:77:9f: 49:98:ff:fc:05:3a:c7:0e:5a:a5:4b:8c:39:15:fe: 71:ec:7f:25:e9:28:aa:b2:c8:0f:32:80:33:e5:9a: 56:67:22:ed:c6:09:db:9c:ae:d9:3e:10:a5:6e:55: c6:87:1b:50:53:cb:1f:6a:2d:4f:12:69:ca:78:23: cc:38:93:12:19:a7:06:39:88:01:31:60:73:d4:78: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DC:97:D0:EB:9F:D5:17:1F:69:0E:73:45:B5:33:B3:49:54:B9:00 X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:88:a0:da:7b:98:17:c4:9d:c6:f6:22:7b:75:2c:98:dc:6c: db:95:c6:2a:ef:f3:4c:d9:30:2c:36:60:cc:e0:3f:09:a7:51: 66:69:ea:ce:c3:ba:1a:63:7b:06:ee:16:24:e9:04:e1:e0:38: 13:10:ee:77:12:f8:8c:c1:39:ad:8e:f8:7b:94:e7:03:00:d5: 39:bc:73:37:c2:ba:06:eb:19:37:46:81:6c:ba:b4:74:c2:65: 66:05:45:a5:9a:33:df:e4:01:24:fd:a4:c4:f0:e5:ea:99:7b: 3b:b6:94:4a:70:ed:ac:6f:3a:02:2a:ca:41:bb:8a:0c:00:d3: 1a:e9:15:66:0b:3a:58:e8:89:5e:46:ea:1d:9d:b1:5f:7c:7d: cf:fc:9d:ed:5d:c2:7f:23:00:51:a4:dc:cd:85:ec:be:44:02: 93:fd:6b:06:0f:57:95:a1:2b:24:57:d6:28:a4:3c:85:24:57: c2:1c:ed:85:ef:f4:f5:1a:f7:2f:49:71:41:5b:b3:c0:70:88: 88:02:53:cf:83:64:a0:eb:a5:a1:1b:2c:7c:f2:62:c7:97:98: a2:61:f5:68:bb:4d:89:0a:4d:a4:47:60:a3:9f:a4:ab:e6:23: 40:8d:06:c2:7b:61:cd:c6:0c:d0:b7:41:36:01:44:11:c1:10: 87:01:d2:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUwODIwMTgwMzMxWhcNMjUwODI3MTgwMzMxWjAYMRYwFAYD VQQDEw02OGE2MGRmMy0wYWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2PWrLPLV8L2WEgYm2myh+mn1r7yrqHq28zwDwvke3+4S07f959JxlEQwCy5 Ttp10CwnbWUL4Jy6u/T1ME70fnSC70oFIekdNVDpHJp+Q0WQeWPjKTJln2EOgAmR abGEJSrK15N8QHYemaNxdHMYfjOG41pqbXBtVbBvcTIDoBNw9dPsKMkXuyGK0Lk6 0CZ2lmQ817W2pVVPe5GqiBu8OEM9ehgeaMjxxN+46IB80a4ed59JmP/8BTrHDlql S4w5Ff5x7H8l6SiqssgPMoAz5ZpWZyLtxgnbnK7ZPhClblXGhxtQU8sfai1PEmnK eCPMOJMSGacGOYgBMWBz1HgoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrcl9Dr n9UXH2kOc0W1M7NJVLkAMB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbiKDae5gXxJ3G9iJ7dSyY3GzblcYq7/NM2TAsNmDM4D8Jp1FmaerO w7oaY3sG7hYk6QTh4DgTEO53EviMwTmtjvh7lOcDANU5vHM3wroG6xk3RoFsurR0 wmVmBUWlmjPf5AEk/aTE8OXqmXs7tpRKcO2sbzoCKspBu4oMANMa6RVmCzpY6Ile RuodnbFffH3P/J3tXcJ/IwBRpNzNhey+RAKT/WsGD1eVoSskV9YopDyFJFfCHO2F 7/T1GvcvSXFBW7PAcIiIAlPPg2Sg66WhGyx88mLHl5iiYfVou02JCk2kR2Cjn6Sr 5iNAjQbCe2HNxgzQt0E2AUQRwRCHAdIC -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:15 2025 by rpki-client