$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: i5bmRe33P8bH22RFZ/rj/fqGPRr+dACbmKFxUOwQYsg= Subject key identifier: AA:1A:7F:30:4E:F8:A0:59:A5:1A:55:E6:33:FD:97:B2:1A:88:2D:90 Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 13F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 13F0 Signing time: Wed 20 Aug 2025 17:00:53 +0000 Manifest this update: Wed 20 Aug 2025 17:00:53 +0000 Manifest next update: Wed 27 Aug 2025 17:00:53 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: 3QlIEaaMDlhT0qir5TwulE71EwIB5MX3VwfsJcU+VNA=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 4zJ9/i0D6qT42odGNdGTQH8LvSwP3oB1L9xGXSlqgko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5112 (0x13f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Validity Not Before: Aug 20 17:00:53 2025 GMT Not After : Aug 27 17:00:53 2025 GMT Subject: CN=68a5ff45-a545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:ca:6c:25:51:68:b7:76:be:4e:c3:ba:fe: ce:fa:63:3e:92:f4:8c:96:55:22:96:06:53:f5:42: 10:1a:3c:5f:b5:76:0e:b3:e6:dc:da:8e:83:38:a0: 0e:4c:9e:ea:2f:4e:e3:a5:04:d1:e8:45:f3:8d:31: 1c:8c:69:61:a1:14:ff:cb:e1:52:7f:c8:0c:46:b4: 51:3a:d7:31:36:55:37:8f:aa:1b:7a:41:03:ae:cd: 2b:89:83:ab:a3:7f:cb:bb:0a:90:85:17:a6:6c:26: 04:12:4e:e8:96:b5:71:ef:a9:a3:47:5b:be:a9:14: dc:9d:56:e6:c5:6a:7f:35:64:dd:94:d2:89:20:5b: 34:20:17:ed:89:a4:18:be:83:cc:b4:90:39:4a:9a: 4d:ee:b8:97:81:2d:94:8f:48:66:29:29:8e:6a:2f: 53:d5:0c:97:34:36:0b:61:90:86:53:3f:f4:a5:4c: e6:6d:e8:1c:98:fb:16:95:3a:19:ac:96:78:fb:78: 84:f1:0c:98:ee:e4:e8:07:a8:f4:17:0b:1f:fe:e6: ac:50:17:32:9e:8e:95:f4:71:ec:3c:8b:1c:67:8f: 77:da:74:a3:e0:67:58:ce:e5:1c:18:d1:f0:1d:b4: 4b:8a:04:e8:11:c3:13:49:71:8a:16:f0:65:ba:74: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1A:7F:30:4E:F8:A0:59:A5:1A:55:E6:33:FD:97:B2:1A:88:2D:90 X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2e:70:f5:1d:21:c7:1c:d6:88:2c:ee:c9:ba:4e:fa:f5:fd: d1:3d:3c:28:cc:0d:08:d0:b4:15:bf:d3:38:c4:c7:96:19:42: d9:d4:5a:9d:2a:76:f6:d9:27:55:8a:33:06:35:c8:73:53:9b: de:57:ea:3b:5a:8a:05:2b:c4:65:3b:55:30:5e:d2:54:f1:ba: a6:62:0b:7e:38:cb:92:bd:d3:8f:5d:43:aa:34:27:43:fa:cb: 13:9e:55:d5:d5:8b:7c:0d:5a:64:1d:7f:db:a6:ac:9f:cf:68: dc:40:3e:e1:e9:a6:91:1f:79:e1:37:34:fc:55:a0:7d:86:17: 1d:df:26:3b:ca:8b:7c:7c:0e:25:ba:60:de:1d:70:49:4d:08: 9f:39:11:cb:49:c1:9d:28:ff:78:5d:e2:46:b3:82:3b:0f:1c: 97:3d:b5:49:f7:c2:7f:60:9f:7a:d1:fb:8d:49:4a:eb:c9:05: 42:68:e5:7d:ba:76:ac:df:1c:fc:00:7b:01:2c:2a:ad:d7:ef: 5d:61:75:c0:89:eb:bc:98:92:e5:c8:e9:db:03:c0:3b:3e:da: 78:1e:a3:87:ac:1a:f6:91:a1:6a:da:a8:a7:0a:8f:04:75:0f: a8:8c:c9:d4:d9:ae:de:f3:ed:a3:bf:a7:a1:da:c3:5b:bf:8a: e9:7c:e1:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjUwODIwMTcwMDUzWhcNMjUwODI3MTcwMDUzWjAYMRYwFAYD VQQDEw02OGE1ZmY0NS1hNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrjKbCVRaLd2vk7Duv7O+mM+kvSMllUilgZT9UIQGjxftXYOs+bc2o6DOKAO TJ7qL07jpQTR6EXzjTEcjGlhoRT/y+FSf8gMRrRROtcxNlU3j6obekEDrs0riYOr o3/LuwqQhRembCYEEk7olrVx76mjR1u+qRTcnVbmxWp/NWTdlNKJIFs0IBftiaQY voPMtJA5SppN7riXgS2Uj0hmKSmOai9T1QyXNDYLYZCGUz/0pUzmbegcmPsWlToZ rJZ4+3iE8QyY7uToB6j0Fwsf/uasUBcyno6V9HHsPIscZ4932nSj4GdYzuUcGNHw HbRLigToEcMTSXGKFvBlunSCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoafzBO +KBZpRpV5jP9l7IaiC2QMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLnD1HSHHHNaILO7Juk769f3RPTwozA0I0LQVv9M4xMeWGULZ1Fqd Knb22SdVijMGNchzU5veV+o7WooFK8RlO1UwXtJU8bqmYgt+OMuSvdOPXUOqNCdD +ssTnlXV1Yt8DVpkHX/bpqyfz2jcQD7h6aaRH3nhNzT8VaB9hhcd3yY7yot8fA4l umDeHXBJTQifORHLScGdKP94XeJGs4I7DxyXPbVJ98J/YJ960fuNSUrryQVCaOV9 unas3xz8AHsBLCqt1+9dYXXAieu8mJLlyOnbA8A7Ptp4HqOHrBr2kaFq2qinCo8E dQ+ojMnU2a7e8+2jv6eh2sNbv4rpfOF+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:39 2025 by rpki-client