$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: Hgvbm40h5R1dKbxNXBejW+O/GaVkqqZkrF58lF1FCNs= Subject key identifier: 59:E6:7E:2A:65:83:8E:EE:3E:9E:89:94:B2:AF:EE:10:18:86:23:16 Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1C34 Signing time: Thu 18 Sep 2025 16:18:29 +0000 Manifest this update: Thu 18 Sep 2025 16:18:28 +0000 Manifest next update: Thu 25 Sep 2025 16:18:28 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: i2M0K9fL7ZTcb/VNpIjqP+vgHJICqkCtA33ZdFiV5Y0=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7244 (0x1c4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Sep 18 16:18:28 2025 GMT Not After : Sep 25 16:18:28 2025 GMT Subject: CN=68cc30d4-6b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:33:f0:0c:00:14:43:74:3f:64:a7:b0:88: 27:68:d6:5d:7a:57:23:82:1a:d4:0d:12:84:f4:ce: 7f:3d:9c:e5:7a:cb:3f:cf:01:70:2c:86:c2:5f:9f: fb:8a:bc:cf:b2:52:2d:7c:2e:37:7b:20:4b:3f:a3: 8b:a4:3b:7a:e4:d7:3a:65:90:2c:a8:f0:45:cf:00: 30:df:1b:d9:e9:5b:d5:40:58:37:b4:30:fd:f7:99: 0d:69:4d:62:30:e5:d8:e1:c9:83:02:6f:1a:94:77: 7b:d6:0f:ca:b0:8a:96:c7:11:e7:91:2b:82:7e:53: 09:80:49:c5:cf:9a:9c:e7:33:fa:fa:7e:72:85:3b: 51:31:99:e3:af:5c:bd:60:b0:ab:a7:08:be:81:b4: af:9f:db:6d:88:e1:f2:46:b5:f6:45:20:9f:9c:88: 34:2b:1e:65:d0:15:66:95:52:ba:27:eb:e8:9c:54: 91:ac:91:7f:03:fa:e9:48:ec:2a:21:37:f2:02:01: ba:ca:e2:fa:de:64:18:1f:75:06:26:04:35:f0:c7: 44:44:71:9f:0b:2d:4b:a1:e8:72:86:9f:27:f6:32: de:9c:48:07:07:3a:61:8b:64:d3:b7:2e:90:9d:74: 65:46:c9:48:17:52:a1:b8:58:bd:11:50:8a:b1:e8: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:7E:2A:65:83:8E:EE:3E:9E:89:94:B2:AF:EE:10:18:86:23:16 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:54:89:f6:27:30:a7:f7:50:01:03:66:9a:65:bf:77:3e:bd: 7f:78:0d:fc:fa:58:37:f4:cf:23:d3:2e:1a:a1:48:45:d7:80: 46:ca:43:3f:2b:f6:01:e0:92:36:20:99:47:15:46:49:40:7f: 57:9b:83:34:92:96:cd:5c:41:9c:10:b1:a1:92:a2:c1:a8:9d: 4c:bd:91:9d:4d:0e:a9:6a:72:66:e6:07:e3:8a:41:f3:da:ae: 83:9c:4a:ca:65:b3:25:3b:bc:fe:71:8d:a8:81:85:bb:87:98: 16:45:57:85:bf:1f:25:e5:fa:36:81:57:eb:ab:43:2b:73:a4: e8:b0:43:d2:ea:9c:4a:8b:bf:75:66:2c:fb:5c:70:21:fc:0f: 42:a4:31:35:81:c8:43:35:de:7f:2e:a8:98:ad:41:fb:2a:be: 12:71:30:e1:87:c2:e4:4e:6a:59:d7:d6:3c:78:1f:ef:bd:b3: b0:61:ea:c0:ea:f3:80:8d:09:ed:1a:35:5e:7a:a7:b3:76:b7: c8:27:96:d2:64:29:29:a1:57:29:cb:c0:8a:1b:1f:6c:1a:e5: 33:69:8a:51:f5:6a:45:77:53:78:08:5e:c0:03:19:7a:80:78: f8:96:88:b3:58:6c:07:c1:43:c0:e0:5a:f0:fe:2b:72:cd:72: 53:15:bc:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwOTE4MTYxODI4WhcNMjUwOTI1MTYxODI4WjAYMRYwFAYD VQQDEw02OGNjMzBkNC02YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1soz8AwAFEN0P2SnsIgnaNZdelcjghrUDRKE9M5/PZzless/zwFwLIbCX5/7 irzPslItfC43eyBLP6OLpDt65Nc6ZZAsqPBFzwAw3xvZ6VvVQFg3tDD995kNaU1i MOXY4cmDAm8alHd71g/KsIqWxxHnkSuCflMJgEnFz5qc5zP6+n5yhTtRMZnjr1y9 YLCrpwi+gbSvn9ttiOHyRrX2RSCfnIg0Kx5l0BVmlVK6J+vonFSRrJF/A/rpSOwq ITfyAgG6yuL63mQYH3UGJgQ18MdERHGfCy1Loehyhp8n9jLenEgHBzphi2TTty6Q nXRlRslIF1KhuFi9EVCKsei+oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnmfipl g47uPp6JlLKv7hAYhiMWMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxVIn2JzCn91ABA2aaZb93Pr1/eA38+lg39M8j0y4aoUhF14BGykM/ K/YB4JI2IJlHFUZJQH9Xm4M0kpbNXEGcELGhkqLBqJ1MvZGdTQ6panJm5gfjikHz 2q6DnErKZbMlO7z+cY2ogYW7h5gWRVeFvx8l5fo2gVfrq0Mrc6TosEPS6pxKi791 Ziz7XHAh/A9CpDE1gchDNd5/LqiYrUH7Kr4ScTDhh8LkTmpZ19Y8eB/vvbOwYerA 6vOAjQntGjVeeqezdrfIJ5bSZCkpoVcpy8CKGx9sGuUzaYpR9WpFd1N4CF7AAxl6 gHj4loizWGwHwUPA4Frw/ityzXJTFbwh -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:12 2025 by rpki-client