$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: F1IVuAyHCs25yr9muvjvg44TRk56IOQTawZpFH2jJKw= Subject key identifier: 58:E6:CA:8D:EA:9F:68:0E:0A:07:B7:73:77:3E:7E:38:2B:23:27:99 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0718 Signing time: Sat 06 Sep 2025 22:13:04 +0000 Manifest this update: Sat 06 Sep 2025 22:13:03 +0000 Manifest next update: Sat 13 Sep 2025 22:13:03 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: lFK5KII9HrqMfLVsyy045GxeV8SmeWZMxUfvaVhWVMk=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: oH6etJLll8/xa7dgaHGyb02OWTJ3NWMaSZZdVBiHK0Q=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: FOUqi/Zhh8esXFcRli/yVF/Rw56vHIwH4UuHSxeTaMk=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: qk7Bx30QrpdNU4t2WsWpt2osPi+DUzc4S7fF1pPsooQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Sep 6 22:13:03 2025 GMT Not After : Sep 13 22:13:03 2025 GMT Subject: CN=68bcb1f0-604a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:ff:c6:9e:c4:10:ea:0c:10:bf:e5:a0:95: 10:98:47:9c:01:7e:4e:5d:72:8b:a0:c5:d6:46:e4: 00:d7:ec:90:de:4b:cf:b3:36:a8:32:e6:8d:2b:d9: cc:24:1f:79:f7:20:2c:c2:81:7a:95:5b:e1:65:10: a2:46:77:85:b0:31:bd:b3:e4:06:ec:39:99:e1:0e: 61:9e:b2:5f:c2:00:60:b1:d6:83:6a:a9:d2:c8:8f: 47:a4:53:0c:98:06:ef:b2:1d:8a:c9:9a:59:9f:ed: 77:a0:ff:d9:2c:93:6c:82:6c:68:fb:39:68:46:d5: ee:8c:eb:7b:ed:53:12:03:ad:74:38:89:9c:a8:1e: a7:fa:d6:dc:f5:85:e7:6c:4b:e6:4a:b8:f9:15:fd: 11:c8:99:5a:b6:11:eb:31:87:68:4a:f4:ea:0f:e8: 23:c2:1b:a3:4f:4a:ff:18:d1:de:3b:80:7d:ba:98: 04:d7:03:5c:d7:fc:51:ec:fc:71:c2:5d:67:3f:fd: 26:be:1c:7c:40:8c:53:a0:21:1c:ff:99:ad:4d:46: 97:0a:fe:c3:cc:b2:8f:27:e4:0e:8e:a4:4e:ae:10: b1:b5:e0:12:5d:0a:d4:c4:6b:fe:cb:1f:90:13:76: a5:8e:5b:e1:49:70:54:eb:16:c2:74:5a:c2:b7:4e: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:CA:8D:EA:9F:68:0E:0A:07:B7:73:77:3E:7E:38:2B:23:27:99 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:f2:af:29:23:23:eb:4c:bb:62:c3:5b:75:c8:c2:34:d7: 75:f2:f4:62:7a:61:1c:db:33:dc:da:b0:72:7b:ff:c6:dc:73: 25:b7:52:0e:cf:0a:98:e8:e0:f4:88:43:0f:74:3b:2e:db:4e: 93:b1:f3:54:bd:93:c2:86:2e:bf:3f:25:89:3d:24:3e:92:3f: d1:59:a1:be:83:6f:94:f0:e1:bb:1a:95:fb:77:a5:84:1d:e3: 42:a6:33:c9:ed:8d:69:04:d7:5a:c0:15:91:08:5e:c9:d8:f0: 8b:02:55:fc:0f:2d:54:99:1b:86:89:12:69:0a:c6:dc:4f:62: 42:a7:0c:b6:f3:fe:c1:e8:62:5a:c5:ab:10:9c:4a:2c:2c:52: 60:a5:91:4f:e8:77:0d:a7:be:83:90:73:80:87:eb:07:6f:0d: 99:e1:ce:1a:fc:98:97:b5:1f:21:73:8e:db:c7:77:48:41:18: b1:cb:68:17:1b:cb:1a:6d:c9:c1:e3:95:73:11:8c:2c:8c:54: ad:fd:46:80:2e:ac:e5:62:6c:c6:7d:50:27:e0:04:12:32:be: 1a:d0:9f:00:e0:dd:72:33:73:e8:f9:89:e7:16:77:48:10:68: 3c:f6:bd:b7:6a:5f:ed:68:1b:d6:f9:1d:cf:2c:01:82:f1:aa: a8:2d:56:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwOTA2MjIxMzAzWhcNMjUwOTEzMjIxMzAzWjAYMRYwFAYD VQQDEw02OGJjYjFmMC02MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXb/xp7EEOoMEL/loJUQmEecAX5OXXKLoMXWRuQA1+yQ3kvPszaoMuaNK9nM JB959yAswoF6lVvhZRCiRneFsDG9s+QG7DmZ4Q5hnrJfwgBgsdaDaqnSyI9HpFMM mAbvsh2KyZpZn+13oP/ZLJNsgmxo+zloRtXujOt77VMSA610OImcqB6n+tbc9YXn bEvmSrj5Ff0RyJlathHrMYdoSvTqD+gjwhujT0r/GNHeO4B9upgE1wNc1/xR7Pxx wl1nP/0mvhx8QIxToCEc/5mtTUaXCv7DzLKPJ+QOjqROrhCxteASXQrUxGv+yx+Q E3aljlvhSXBU6xbCdFrCt05LYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjmyo3q n2gOCge3c3c+fjgrIyeZMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU8/KvKSMj60y7YsNbdcjCNNd18vRiemEc2zPc2rBye//G3HMlt1IO zwqY6OD0iEMPdDsu206TsfNUvZPChi6/PyWJPSQ+kj/RWaG+g2+U8OG7GpX7d6WE HeNCpjPJ7Y1pBNdawBWRCF7J2PCLAlX8Dy1UmRuGiRJpCsbcT2JCpwy28/7B6GJa xasQnEosLFJgpZFP6HcNp76DkHOAh+sHbw2Z4c4a/JiXtR8hc47bx3dIQRixy2gX G8sabcnB45VzEYwsjFSt/UaALqzlYmzGfVAn4AQSMr4a0J8A4N1yM3Po+YnnFndI EGg89r23al/taBvW+R3PLAGC8aqoLVbi -----END CERTIFICATE-----Generated at Mon Sep 8 08:55:21 2025 by rpki-client