$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft File: jwhmaAoC5LoOvh6PIljuKBzUPv4.mft (raw, json) Hash identifier: MwlLXynP/H/23YqmLPziEuwJpBUhBTr/E2IwVSEv20c= Subject key identifier: 24:AC:1B:78:71:18:56:ED:E4:47:8B:B6:74:9A:71:83:CC:0C:95:C1 Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE Certificate issuer: /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft Manifest number: 21 Signing time: Sun 07 Sep 2025 08:22:05 +0000 Manifest this update: Sun 07 Sep 2025 08:22:05 +0000 Manifest next update: Sun 14 Sep 2025 08:22:05 +0000 Files and hashes: 1: jwhmaAoC5LoOvh6PIljuKBzUPv4.crl (hash: 1WUeo9x7DGprOYMleBTtsCRjodkNhozEx+R9ZoXInQI=) 2: 9D1CBEB65D8111F0A04DD550C4F9AE02.roa (hash: WD6JX9ZeI2PyoWb+KcklrsjlIHW009aV5ZILyIaO+Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE Validity Not Before: Sep 7 08:22:05 2025 GMT Not After : Sep 14 08:22:05 2025 GMT Subject: CN=68bd40ad-49ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:6e:4c:d3:9e:50:eb:4b:a0:9b:9e:b2:49: d0:d8:82:40:11:6d:48:34:e9:3f:a0:7e:0e:88:fc: f4:3d:17:bc:92:47:52:76:24:6c:40:c7:4f:ab:a7: 73:85:87:46:7b:94:ef:2f:8f:15:b2:04:f3:23:72: 60:8a:b5:1d:f3:7b:c9:08:29:1b:7f:b2:99:63:ac: 14:de:47:ad:35:3c:fd:78:cb:0d:14:c6:c2:06:91: 22:39:18:7a:2d:f0:f4:5e:e8:ca:7a:9c:f0:ca:80: 0e:c1:4c:1c:00:8c:d9:6d:90:f6:13:22:63:42:9e: 61:5d:66:1e:b2:80:c9:82:ef:62:83:56:81:a4:4e: 98:5f:e7:31:0f:54:e5:fc:46:8d:0d:c7:45:d5:42: 6a:08:b2:f2:97:81:0b:ed:00:6b:64:51:f4:6f:9a: b2:ac:41:7a:79:b4:21:02:09:07:09:c6:6f:9d:e2: 7f:ed:e8:d3:0b:f0:83:3c:25:8b:d2:09:9c:05:8c: ab:af:bd:37:91:7b:b5:4c:61:10:09:c6:cc:64:10: ad:e6:6e:64:22:02:bb:7e:cf:00:a9:69:66:7d:8f: 66:a0:1d:58:21:e1:46:8a:2e:c0:3b:08:64:89:9f: 9a:24:6f:37:d7:76:f8:88:65:40:6a:35:b3:77:b5: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:1B:78:71:18:56:ED:E4:47:8B:B6:74:9A:71:83:CC:0C:95:C1 X509v3 Authority Key Identifier: keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:21:d8:83:98:e9:5d:d2:ce:17:ca:4e:aa:fe:d9:78:8c:1d: 37:cd:13:3c:4f:59:dd:72:48:21:a0:76:07:53:a6:fc:4e:27: 8c:58:5c:e1:6b:e3:66:5c:28:dd:5e:3c:59:93:75:77:6a:64: 0a:15:2a:26:c8:fe:8c:b8:3c:58:72:68:46:af:be:f5:39:89: ce:a7:d4:bb:98:75:32:93:07:87:b2:2c:08:08:c6:1e:e7:54: c9:91:ae:cb:ae:0a:61:19:a5:73:c1:f0:9f:f0:63:8d:95:e8: 43:3c:da:40:3d:7c:0d:3d:1e:c3:50:6c:27:40:59:b8:25:0c: 27:25:15:c0:3f:eb:e5:2c:87:e6:2a:40:ad:a9:b2:9f:90:74: bb:e2:36:00:86:07:ee:52:f5:ef:66:6d:c6:39:ed:61:fb:1b: f4:23:6e:c8:37:3c:15:33:17:ee:06:4c:e3:b8:dd:60:70:8a: 10:24:10:24:8d:4a:45:98:9a:fd:c5:e3:b1:bc:d4:e0:71:c3: 85:79:c4:08:22:20:31:1a:3f:e8:24:a1:31:b6:1a:a1:d2:ce: 6d:d0:0f:73:dd:d7:95:d7:68:34:e9:8b:e8:5f:b2:1d:20:86: 61:b1:ac:a1:0d:85:de:a6:3d:60:0e:f9:6e:5f:9f:2a:54:6a: ce:2e:ec:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoOEYwODY2NjgwQTAyRTRCQTBFQkUxRThGMjI1OEVFMjgx Q0Q0M0VGRTAeFw0yNTA5MDcwODIyMDVaFw0yNTA5MTQwODIyMDVaMBgxFjAUBgNV BAMTDTY4YmQ0MGFkLTQ5YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJTm5M055Q60ugm56ySdDYgkARbUg06T+gfg6I/PQ9F7ySR1J2JGxAx0+rp3OF h0Z7lO8vjxWyBPMjcmCKtR3ze8kIKRt/spljrBTeR601PP14yw0UxsIGkSI5GHot 8PRe6Mp6nPDKgA7BTBwAjNltkPYTImNCnmFdZh6ygMmC72KDVoGkTphf5zEPVOX8 Ro0Nx0XVQmoIsvKXgQvtAGtkUfRvmrKsQXp5tCECCQcJxm+d4n/t6NML8IM8JYvS CZwFjKuvvTeRe7VMYRAJxsxkEK3mbmQiArt+zwCpaWZ9j2agHVgh4UaKLsA7CGSJ n5okbzfXdviIZUBqNbN3tQg9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJKwbeHEY Vu3kR4u2dJpxg8wMlcEwHwYDVR0jBBgwFoAUjwhmaAoC5LoOvh6PIljuKBzUPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzIyMDY2OTdBNUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL2p3aG1hQW9DNUxvT3ZoNlBJbGp1S0J6VVB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvandobWFBb0M1TG9Pdmg2UElsanVLQnpVUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzIyMDY2OTdBNUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL2p3aG1hQW9DNUxv T3ZoNlBJbGp1S0J6VVB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkh2IOY6V3SzhfKTqr+2XiMHTfNEzxPWd1ySCGgdgdTpvxOJ4xYXOFr 42ZcKN1ePFmTdXdqZAoVKibI/oy4PFhyaEavvvU5ic6n1LuYdTKTB4eyLAgIxh7n VMmRrsuuCmEZpXPB8J/wY42V6EM82kA9fA09HsNQbCdAWbglDCclFcA/6+Ush+Yq QK2psp+QdLviNgCGB+5S9e9mbcY57WH7G/Qjbsg3PBUzF+4GTOO43WBwihAkECSN SkWYmv3F47G81OBxw4V5xAgiIDEaP+gkoTG2GqHSzm3QD3Pd15XXaDTpi+hfsh0g hmGxrKENhd6mPWAO+W5fnypUas4u7K4= -----END CERTIFICATE-----Generated at Mon Sep 8 14:36:04 2025 by rpki-client