$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json) Hash identifier: 5sy6KWHUtby22+6IVU0fqNIqZxB1KEI5x63uQL6RLBc= Subject key identifier: 24:51:35:3B:26:15:F8:D1:C5:35:5C:41:B4:2E:71:B6:44:87:66:F8 Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Certificate serial: 20EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft Manifest number: 20E8 Signing time: Sun 24 Aug 2025 15:55:24 +0000 Manifest this update: Sun 24 Aug 2025 15:55:23 +0000 Manifest next update: Sun 31 Aug 2025 15:55:23 +0000 Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: fl0wgUEZeHibh3uEuln2beDnK+wQPI2Lx6MU3PynGW4=) 2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: KDA9/GHhy0rjdE5GkXBH2Mt48KB9YjSR7eGXIC67yec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8431 (0x20ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Validity Not Before: Aug 24 15:55:23 2025 GMT Not After : Aug 31 15:55:23 2025 GMT Subject: CN=68ab35eb-814b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:28:59:1a:78:46:f8:be:b8:94:1e:cf:26: 9b:e7:51:6a:43:f8:34:5a:18:8d:90:c3:60:60:e3: a7:c1:3c:1a:a5:15:a4:ac:e6:6c:bf:c7:f7:2c:57: 7c:aa:9e:6c:b2:67:1e:a9:32:26:31:27:f9:ed:ff: 03:4e:4d:60:bb:e1:00:b2:50:be:2e:9c:5a:1b:6d: 1f:d6:d0:c1:3f:4a:69:0f:87:89:41:a5:ce:25:f1: d8:38:fc:77:34:d4:dd:9c:25:24:4f:81:b1:33:92: f8:de:d7:a1:29:c5:d4:5f:98:bb:ff:5d:6c:20:f2: 5a:65:9d:fc:6e:42:34:cb:9f:a8:5d:ed:0c:b2:fd: df:5c:99:e0:8a:bf:06:0b:1a:33:3a:8f:bc:ae:8c: 9f:c8:ad:7c:b4:70:34:06:93:7c:6c:64:c8:6c:3a: f0:96:d9:4e:ad:a6:17:76:c9:55:fe:4c:e7:e1:43: be:06:ef:26:54:97:5a:bf:58:fc:f4:b0:75:e6:81: a6:45:04:20:9b:f0:3b:9b:1e:10:3f:8a:02:6f:08: 82:d0:4f:0a:9d:83:1c:a9:64:64:10:91:73:96:08: 96:72:3c:66:fe:80:c5:f5:71:c0:56:11:4c:20:3b: 6f:5c:23:96:26:2f:48:e6:7f:c2:bb:ac:39:81:5c: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:35:3B:26:15:F8:D1:C5:35:5C:41:B4:2E:71:B6:44:87:66:F8 X509v3 Authority Key Identifier: keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:de:14:41:cc:79:53:fe:ec:f1:b7:5e:ac:72:21:e8:04:9e: f2:28:92:52:c2:0c:f8:ee:29:01:e4:29:2b:85:10:2d:b1:29: dd:8a:63:41:c6:17:4d:b9:00:a8:e2:d4:95:07:53:76:cd:4a: 38:6d:ec:c8:aa:e7:1d:53:32:b0:e1:10:c9:05:36:dd:d7:f0: b9:f5:13:fd:26:35:18:70:ce:a8:a6:e7:c0:f2:de:3e:13:05: f8:ba:36:98:91:a9:94:7c:80:ec:c3:db:c0:9f:98:96:85:ba: bf:e4:e6:55:01:d6:db:5a:b9:0e:b0:8a:e3:6c:fa:40:32:25: 37:30:99:13:86:bc:13:88:1f:bb:c0:68:74:94:f4:f6:01:f5: 47:37:8b:30:e0:0a:d2:84:e2:5a:b0:41:c9:2c:4f:5a:45:0b: b3:ac:c1:b0:91:5b:2d:9c:0f:5e:c2:71:82:00:6e:69:1b:4d: c6:06:4a:20:99:ae:3b:cc:6e:a5:ac:f2:8e:a4:04:3e:ab:62: e3:4f:05:38:9b:db:5e:25:b0:59:a4:1c:8c:db:c0:84:11:68: ec:3d:21:82:9b:24:f7:51:25:70:96:11:67:21:f6:a8:95:4b: c8:9d:f0:aa:da:67:e4:f8:91:ff:20:45:61:18:6c:96:8f:27: e4:a1:cd:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVFMUUxNENBQjg1 Njk4N0IwNUQwHhcNMjUwODI0MTU1NTIzWhcNMjUwODMxMTU1NTIzWjAYMRYwFAYD VQQDEw02OGFiMzVlYi04MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3soWRp4Rvi+uJQezyab51FqQ/g0WhiNkMNgYOOnwTwapRWkrOZsv8f3LFd8 qp5ssmceqTImMSf57f8DTk1gu+EAslC+LpxaG20f1tDBP0ppD4eJQaXOJfHYOPx3 NNTdnCUkT4GxM5L43tehKcXUX5i7/11sIPJaZZ38bkI0y5+oXe0Msv3fXJngir8G CxozOo+8royfyK18tHA0BpN8bGTIbDrwltlOraYXdslV/kzn4UO+Bu8mVJdav1j8 9LB15oGmRQQgm/A7mx4QP4oCbwiC0E8KnYMcqWRkEJFzlgiWcjxm/oDF9XHAVhFM IDtvXCOWJi9I5n/Cu6w5gVzQ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRRNTsm FfjRxTVcQbQucbZEh2b4MB8GA1UdIwQYMBaAFI03iUsJQez9TWsF4eFMq4Vph7Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODkwRC8yMUI3QTgwRUZG RkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQMU5hd1hoNFV5cmhXbUhz RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pUZUpTd2xCN1AxTmF3WGg0VXlyaFdtSHNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODkwRC8yMUI3QTgwRUZGRkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQ MU5hd1hoNFV5cmhXbUhzRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA63hRBzHlT/uzxt16sciHoBJ7yKJJSwgz47ikB5CkrhRAtsSndimNB xhdNuQCo4tSVB1N2zUo4bezIqucdUzKw4RDJBTbd1/C59RP9JjUYcM6opufA8t4+ EwX4ujaYkamUfIDsw9vAn5iWhbq/5OZVAdbbWrkOsIrjbPpAMiU3MJkThrwTiB+7 wGh0lPT2AfVHN4sw4ArShOJasEHJLE9aRQuzrMGwkVstnA9ewnGCAG5pG03GBkog ma47zG6lrPKOpAQ+q2LjTwU4m9teJbBZpByM28CEEWjsPSGCmyT3USVwlhFnIfao lUvInfCq2mfk+JH/IEVhGGyWjyfkoc18 -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:18 2025 by rpki-client