$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft File: JqEcV_UL86H3onhKHUlNXomDYc0.mft (raw, json) Hash identifier: XT8mhglQEdfybh1+JXZtnQJLv7qsMZ4lIedOnFhUpUk= Subject key identifier: 2E:DD:7C:1E:BA:26:4E:48:23:28:19:F8:59:09:27:7F:1E:DC:7F:7D Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD Certificate issuer: /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft Manifest number: 25 Signing time: Fri 05 Sep 2025 08:17:55 +0000 Manifest this update: Fri 05 Sep 2025 08:17:55 +0000 Manifest next update: Fri 12 Sep 2025 08:17:55 +0000 Files and hashes: 1: JqEcV_UL86H3onhKHUlNXomDYc0.crl (hash: +VBxnkl2KzVrI0iNh/rf9tf6Ym5/iVApglQHRKjmDNM=) 2: 0CEE97B4563411F09FBF271BC4F9AE02.roa (hash: +5nsa0L3pEvZ7rt0LONhGmy6TtSxJKovU9i/lVSRT84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Validity Not Before: Sep 5 08:17:55 2025 GMT Not After : Sep 12 08:17:55 2025 GMT Subject: CN=68ba9cb3-5595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:92:f4:ae:b2:6e:47:32:19:db:fb:fe:23:84: 1b:ca:5d:33:12:78:98:cc:64:f8:ba:da:db:27:6d: 82:ef:9f:9e:b7:7d:0a:ed:d3:14:42:8e:f5:7a:a1: 6a:29:ef:25:8b:b1:30:49:56:b1:c9:4a:30:12:f4: a1:b6:7c:b1:74:73:58:36:86:58:41:f7:7a:b8:f4: f9:51:ba:0a:1c:52:6e:02:af:46:98:62:89:20:e0: b0:b6:a7:f6:bb:d5:66:c2:5f:c4:ab:3b:5c:1e:71: a1:00:18:a1:eb:82:05:fd:b4:6b:9b:85:b3:5c:5d: b5:4d:b8:88:42:77:72:34:b5:91:bb:ff:b5:ac:73: 5e:f4:df:50:72:4f:93:bf:d6:bf:8e:32:4d:2b:7f: 18:52:49:ef:a2:66:6a:4b:b7:a6:5f:9f:17:2b:5c: 42:52:85:7f:cb:01:e8:9f:86:04:da:62:d6:2d:40: 2d:f2:64:1b:ad:ec:20:ed:81:de:ef:4d:b8:fe:4b: 35:af:d8:fb:de:18:ad:01:05:7f:10:7d:e8:10:2d: a6:37:b1:29:5b:52:39:4c:97:31:0e:c3:58:29:fb: d6:8a:dd:31:a8:73:08:20:c2:e4:d5:94:66:56:03: bd:13:91:89:a7:a1:70:2e:79:c2:b3:83:1c:b4:c2: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:7C:1E:BA:26:4E:48:23:28:19:F8:59:09:27:7F:1E:DC:7F:7D X509v3 Authority Key Identifier: keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:90:e5:1c:48:2d:5b:75:c4:9d:13:9a:ad:75:08:34:a6:ff: 7c:4d:15:48:82:64:ba:e1:a1:54:1a:70:04:66:4b:19:a9:16: c5:de:13:a7:2d:ec:e6:04:97:a4:81:c5:e7:1a:0f:79:72:b4: b8:1a:99:fb:8c:82:92:5a:44:87:6f:d9:50:0d:a3:f6:f8:b0: 09:e6:54:42:60:5c:21:52:77:d3:47:db:15:36:51:d8:26:fe: d7:40:5a:03:4a:7c:ac:12:08:95:47:39:7d:67:bc:f7:42:c1: 42:ca:24:c7:ad:5f:95:c9:58:89:79:83:3c:c8:b2:0d:de:e2: 96:18:bd:5d:fd:03:f8:8b:77:34:af:cf:e0:ec:ba:5e:a8:40: 79:c3:65:9a:5d:bc:70:d8:d2:a9:14:69:75:ab:9c:a4:0b:1e: 45:f2:b4:db:64:39:91:5d:9f:99:c1:75:c9:36:70:63:71:be: 9b:e9:6d:cb:b7:55:f9:a8:bc:06:4d:3e:28:41:12:e2:de:92: 36:a9:de:e3:0b:60:a8:7a:55:92:02:39:f8:7c:8d:57:b3:37: 8f:e6:0a:5c:af:57:c5:66:e1:a5:e5:d1:bc:b9:75:87:a8:f3: 51:8f:01:dd:01:5e:3d:23:41:b0:c3:56:0d:38:69:61:91:a4: ed:9c:1c:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoMjZBMTFDNTdGNTBCRjNBMUY3QTI3ODRBMUQ0OTRENUU4 OTgzNjFDRDAeFw0yNTA5MDUwODE3NTVaFw0yNTA5MTIwODE3NTVaMBgxFjAUBgNV BAMTDTY4YmE5Y2IzLTU1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDukvSusm5HMhnb+/4jhBvKXTMSeJjMZPi62tsnbYLvn563fQrt0xRCjvV6oWop 7yWLsTBJVrHJSjAS9KG2fLF0c1g2hlhB93q49PlRugocUm4Cr0aYYokg4LC2p/a7 1WbCX8SrO1wecaEAGKHrggX9tGubhbNcXbVNuIhCd3I0tZG7/7Wsc17031ByT5O/ 1r+OMk0rfxhSSe+iZmpLt6ZfnxcrXEJShX/LAeifhgTaYtYtQC3yZBut7CDtgd7v Tbj+SzWv2PveGK0BBX8QfegQLaY3sSlbUjlMlzEOw1gp+9aK3TGocwggwuTVlGZW A70TkYmnoXAuecKzgxy0wksRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULt18Hrom TkgjKBn4WQknfx7cf30wHwYDVR0jBBgwFoAUJqEcV/UL86H3onhKHUlNXomDYc0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0VCMEY3NThFNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZIM29uaEtIVWxOWG9tRFlj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnFFY1ZfVUw4Nkgzb25oS0hVbE5Yb21EWWMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0VCMEY3NThFNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZI M29uaEtIVWxOWG9tRFljMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIWQ5RxILVt1xJ0Tmq11CDSm/3xNFUiCZLrhoVQacARmSxmpFsXeE6ct 7OYEl6SBxecaD3lytLgamfuMgpJaRIdv2VANo/b4sAnmVEJgXCFSd9NH2xU2Udgm /tdAWgNKfKwSCJVHOX1nvPdCwULKJMetX5XJWIl5gzzIsg3e4pYYvV39A/iLdzSv z+Dsul6oQHnDZZpdvHDY0qkUaXWrnKQLHkXytNtkOZFdn5nBdck2cGNxvpvpbcu3 VfmovAZNPihBEuLekjap3uMLYKh6VZICOfh8jVezN4/mClyvV8Vm4aXl0by5dYeo 81GPAd0BXj0jQbDDVg04aWGRpO2cHMg= -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:07 2025 by rpki-client