$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: r013NLwlqyPRXc+S3NxyO4Q6IxsRJRHsA262kwf9cNU= Subject key identifier: 90:7B:97:BE:E8:7D:DD:68:C6:A0:56:73:ED:13:6A:41:5E:68:DA:17 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 0203 Signing time: Thu 21 Aug 2025 02:22:22 +0000 Manifest this update: Thu 21 Aug 2025 02:22:21 +0000 Manifest next update: Thu 28 Aug 2025 02:22:21 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: rdaISlzJNMeeJGppbr8JESgjxs8J0J7mYcZWM1YSwEE=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Aug 21 02:22:21 2025 GMT Not After : Aug 28 02:22:21 2025 GMT Subject: CN=68a682de-5b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:d6:87:ff:bb:1f:3a:3e:66:cf:e0:00:0a: 5a:a6:3f:0a:85:52:80:ae:09:17:d2:2f:70:84:40: ad:84:7e:92:68:59:6f:8d:50:75:bd:05:47:49:1d: 58:94:73:fc:6c:6c:13:d7:cd:2f:c8:41:9c:53:36: e9:ad:29:eb:35:b0:1c:d9:e7:ff:34:14:20:ec:be: a9:d1:dc:15:8a:47:52:8f:d5:f3:cd:35:77:01:55: f3:93:48:a0:be:2c:04:46:22:fd:f4:7e:55:f5:0a: 33:1c:cf:d3:9d:57:e0:a1:0a:64:1f:94:b3:1d:d6: 76:ad:5f:70:17:ce:60:ca:c9:68:dc:ee:10:57:0a: 45:bd:3c:68:06:e5:0b:ab:b7:44:a0:42:22:8b:4d: 80:75:74:03:99:84:e2:9b:d5:88:6f:fe:c5:09:a2: a8:4b:8c:56:98:77:68:5f:bd:1e:3f:3f:fd:69:d8: 91:23:49:f4:4a:28:92:cb:b3:2f:c0:2a:73:87:20: 2c:d9:84:bc:10:c9:cd:a6:23:43:34:8b:d6:30:b9: ae:72:16:65:8f:24:eb:4b:4d:fa:82:df:0e:4f:52: bc:1e:0b:6d:e9:f5:09:74:84:fd:3f:c9:cb:02:0b: 0c:db:ba:21:83:ef:d9:55:c1:7a:fb:1b:05:29:58: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7B:97:BE:E8:7D:DD:68:C6:A0:56:73:ED:13:6A:41:5E:68:DA:17 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:eb:c2:f2:d1:82:62:b0:6a:04:99:66:e4:38:2c:bb:e4:cb: 3a:1b:14:a2:90:da:11:c6:75:95:96:b1:3a:03:46:e5:c5:ac: 24:ff:64:13:6f:15:fe:84:37:4e:03:f8:bc:c6:bc:28:59:72: 5a:b9:87:33:ba:05:53:c7:5f:dc:b5:17:80:e7:8c:aa:34:bd: 29:84:ca:c2:99:9c:dc:07:86:71:93:12:66:44:e5:57:30:1c: 1c:85:2f:07:de:c0:49:23:62:0c:a2:ad:3f:b8:7e:d8:7e:61: 76:c0:d1:81:3c:cc:48:4d:22:93:b0:7a:8f:44:32:2b:78:23: a0:cb:d7:32:8e:7a:11:db:b8:ea:7a:05:ae:e6:18:ca:f0:b1: 32:28:07:74:d2:28:d0:bb:39:41:34:ad:6b:df:f3:ec:e7:3c: 41:2e:b0:1d:94:4a:6a:24:79:db:9c:6f:03:a4:a6:7a:a7:5b: fa:9a:33:22:1a:24:a2:c1:fb:20:03:9f:08:ee:75:45:9a:24: 03:2b:6e:30:10:1d:c6:23:10:ef:0d:5a:2a:78:d2:d6:b8:ee: e6:5f:7b:de:1b:88:02:0d:dd:e3:b0:f4:36:8e:ba:df:fd:a5: 9e:fb:e5:44:eb:92:94:01:05:26:87:68:3a:8e:87:31:7d:fa: 23:5d:5f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjUwODIxMDIyMjIxWhcNMjUwODI4MDIyMjIxWjAYMRYwFAYD VQQDEw02OGE2ODJkZS01YjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO3Wh/+7Hzo+Zs/gAApapj8KhVKArgkX0i9whECthH6SaFlvjVB1vQVHSR1Y lHP8bGwT180vyEGcUzbprSnrNbAc2ef/NBQg7L6p0dwVikdSj9XzzTV3AVXzk0ig viwERiL99H5V9QozHM/TnVfgoQpkH5SzHdZ2rV9wF85gyslo3O4QVwpFvTxoBuUL q7dEoEIii02AdXQDmYTim9WIb/7FCaKoS4xWmHdoX70ePz/9adiRI0n0SiiSy7Mv wCpzhyAs2YS8EMnNpiNDNIvWMLmuchZljyTrS036gt8OT1K8Hgtt6fUJdIT9P8nL AgsM27ohg+/ZVcF6+xsFKVhjjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJB7l77o fd1oxqBWc+0TakFeaNoXMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG68Ly0YJisGoEmWbkOCy75Ms6GxSikNoRxnWVlrE6A0blxawk/2QT bxX+hDdOA/i8xrwoWXJauYczugVTx1/ctReA54yqNL0phMrCmZzcB4ZxkxJmROVX MBwchS8H3sBJI2IMoq0/uH7YfmF2wNGBPMxITSKTsHqPRDIreCOgy9cyjnoR27jq egWu5hjK8LEyKAd00ijQuzlBNK1r3/Ps5zxBLrAdlEpqJHnbnG8DpKZ6p1v6mjMi GiSiwfsgA58I7nVFmiQDK24wEB3GIxDvDVoqeNLWuO7mX3veG4gCDd3jsPQ2jrrf /aWe++VE65KUAQUmh2g6jocxffojXV9G -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:25 2025 by rpki-client