$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: R1AzZvbzhRH4CW47CMbIaOJRqzkT9DbtuG8mZgeKt7s= Subject key identifier: 62:39:60:7A:5E:B0:22:7F:CE:92:10:2C:5F:7C:BF:62:60:23:19:45 Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 1643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 1639 Signing time: Thu 18 Sep 2025 16:52:28 +0000 Manifest this update: Thu 18 Sep 2025 16:52:27 +0000 Manifest next update: Thu 25 Sep 2025 16:52:27 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: guQLDzHV9OeJoOv1OF0LRnf4OAHIlEsfd4wizmMD95s=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5699 (0x1643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: Sep 18 16:52:27 2025 GMT Not After : Sep 25 16:52:27 2025 GMT Subject: CN=68cc38cb-01d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:83:86:3c:47:53:71:f4:c2:00:dd:01:e5: 29:4e:46:e1:20:d9:46:7c:fe:0b:82:f4:36:2c:8b: 97:b5:8d:df:8b:bb:26:a3:97:74:0b:6b:48:b1:cf: fc:b4:b5:fe:5a:0b:39:19:18:28:68:01:0f:ba:b1: 0d:30:b2:8d:95:ea:62:83:14:22:ef:fa:bb:0a:52: 47:66:c6:06:55:1f:be:9c:1a:91:91:81:8a:68:aa: 01:fd:24:56:8e:6c:60:49:31:b3:b8:31:29:99:94: 66:7b:67:2b:69:07:ea:eb:f8:99:7e:19:f8:d9:7b: 52:98:c3:a2:1a:24:44:f2:4a:87:75:17:7a:f5:b5: a7:4b:c1:4d:e1:6c:8a:5c:7a:ab:be:4c:3f:7c:e8: 59:48:af:86:f2:6b:98:77:97:99:59:cd:2b:6a:28: 4c:a4:49:4d:e9:89:c1:41:25:77:39:10:d2:84:84: df:1d:dc:1f:67:7b:ac:80:c9:88:f7:03:0c:ad:6a: 78:f6:7b:1b:16:47:3e:4e:9a:c1:c9:e2:d1:8b:ea: 78:e8:8e:25:19:94:20:f7:28:c5:56:09:5e:6d:9f: 85:1d:86:98:8b:75:c5:5b:3c:9f:33:60:86:fa:8f: d3:fc:ff:d7:33:b8:23:50:cc:5b:e1:e7:64:70:6b: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:39:60:7A:5E:B0:22:7F:CE:92:10:2C:5F:7C:BF:62:60:23:19:45 X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:2e:ed:63:09:57:7c:0b:25:6f:84:03:84:35:4c:03:e2:25: e5:b3:2e:72:21:f5:fe:3c:1f:02:67:41:84:d1:13:14:f7:84: 00:18:35:d4:fc:78:f7:22:da:07:1a:1e:af:70:2d:2f:5e:63: 0e:d5:5b:ee:e7:63:36:58:ee:41:19:f0:af:43:ff:7b:33:92: 99:4f:b9:fd:5f:7c:e4:c8:b6:48:a3:eb:36:8a:cb:de:89:3d: 3d:ad:61:46:32:f9:73:64:90:e0:5b:4c:22:3a:e8:23:b3:3d: 8b:c2:a4:32:27:5d:6c:bc:5e:5d:8b:d4:20:42:4b:7f:11:92: 30:d1:86:33:14:6d:16:09:0c:4a:aa:c0:64:fe:20:11:9c:97: 2d:e4:fc:7f:e9:6f:ef:7d:5f:ad:e2:5a:33:da:fc:01:75:e7: ae:59:87:1b:5c:28:90:7e:1c:c1:09:e7:8e:c1:e2:d0:28:ac: 9e:f7:d5:7e:40:25:37:c5:7c:03:98:e1:0a:da:1d:b8:1e:d0: 4b:3a:b8:6e:7f:7a:b9:10:c9:7d:71:86:c3:72:25:88:2a:98: 0f:27:42:fa:e6:e4:62:f8:2c:2e:1b:3b:10:80:97:6f:91:c8: e6:ff:ce:28:d0:83:52:21:06:64:68:1f:f5:0e:81:4d:bb:95: e6:c3:f0:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUwOTE4MTY1MjI3WhcNMjUwOTI1MTY1MjI3WjAYMRYwFAYD VQQDEw02OGNjMzhjYi0wMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQCDhjxHU3H0wgDdAeUpTkbhINlGfP4LgvQ2LIuXtY3fi7smo5d0C2tIsc/8 tLX+Wgs5GRgoaAEPurENMLKNlepigxQi7/q7ClJHZsYGVR++nBqRkYGKaKoB/SRW jmxgSTGzuDEpmZRme2craQfq6/iZfhn42XtSmMOiGiRE8kqHdRd69bWnS8FN4WyK XHqrvkw/fOhZSK+G8muYd5eZWc0raihMpElN6YnBQSV3ORDShITfHdwfZ3usgMmI 9wMMrWp49nsbFkc+TprByeLRi+p46I4lGZQg9yjFVglebZ+FHYaYi3XFWzyfM2CG +o/T/P/XM7gjUMxb4edkcGsI5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI5YHpe sCJ/zpIQLF98v2JgIxlFMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkLu1jCVd8CyVvhAOENUwD4iXlsy5yIfX+PB8CZ0GE0RMU94QAGDXU /Hj3ItoHGh6vcC0vXmMO1Vvu52M2WO5BGfCvQ/97M5KZT7n9X3zkyLZIo+s2isve iT09rWFGMvlzZJDgW0wiOugjsz2LwqQyJ11svF5di9QgQkt/EZIw0YYzFG0WCQxK qsBk/iARnJct5Px/6W/vfV+t4loz2vwBdeeuWYcbXCiQfhzBCeeOweLQKKye99V+ QCU3xXwDmOEK2h24HtBLOrhuf3q5EMl9cYbDciWIKpgPJ0L65uRi+CwuGzsQgJdv kcjm/84o0INSIQZkaB/1DoFNu5Xmw/BG -----END CERTIFICATE-----Generated at Fri Sep 19 07:07:41 2025 by rpki-client