$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: 5iSRfpjoA8pcu/V44NBd8w2+EYrzHM+K9oa6sbwpOaE= Subject key identifier: 60:48:85:80:AE:8B:B2:5B:B4:79:E9:29:AD:53:DD:26:EA:56:51:DE Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 0496 Signing time: Thu 11 Sep 2025 00:16:15 +0000 Manifest this update: Thu 11 Sep 2025 00:16:14 +0000 Manifest next update: Thu 18 Sep 2025 00:16:14 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: nRkNnmsBcnh8rxU2luixOe56AIHcguEIXtJV6KS5ra4=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 00:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Sep 11 00:16:14 2025 GMT Not After : Sep 18 00:16:14 2025 GMT Subject: CN=68c214ce-511b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:62:4a:dd:50:90:7d:18:43:f4:ae:83:f0: 1a:65:32:da:5a:f3:b2:1d:62:1e:62:a9:09:53:c3: 0f:15:e4:60:56:46:6d:e0:ad:f8:86:3a:ae:0b:ef: 18:fd:a9:30:82:86:d1:7e:39:d4:7a:ec:5c:17:06: 84:68:1b:10:ee:da:a8:88:fc:52:ca:84:bf:f5:aa: 36:2b:b7:b1:f2:65:f7:53:6c:78:67:8f:79:d9:df: 6a:40:c3:8d:dc:73:1b:58:8d:1f:9d:3a:bb:87:e4: e2:0f:76:8b:77:2e:b6:98:d9:0c:ef:3a:1b:2d:81: e4:a6:66:32:09:27:95:8f:0b:35:02:d6:6a:b4:d7: e3:84:c1:1a:1d:e7:4f:a4:97:72:93:f8:ad:10:0a: 1f:42:ae:4f:1a:b2:79:86:11:e9:d9:71:5f:8b:b8: d8:0b:55:a1:55:f5:87:0b:15:df:3e:34:93:d9:a8: 83:73:d6:3a:ee:18:0b:e0:68:af:bd:c4:af:ed:af: 75:9e:7b:67:9c:4a:ca:25:23:36:fc:d2:7f:ae:14: 6f:7c:dc:b5:69:fd:a9:69:db:4f:03:e9:0a:92:7f: c9:34:c7:1c:7a:5b:a3:5d:b0:ca:cf:d0:1a:9a:9c: db:41:8e:53:9f:fe:1e:f9:52:c2:a6:ef:72:ad:09: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:48:85:80:AE:8B:B2:5B:B4:79:E9:29:AD:53:DD:26:EA:56:51:DE X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:9f:09:62:c6:b9:6c:15:de:0d:7b:d1:3f:38:d8:ad:7d:e7: 60:5a:44:ac:17:f7:19:54:a8:b6:db:33:85:ae:60:23:b6:94: df:39:8f:e2:a0:23:bb:4a:31:1b:39:eb:96:2f:67:08:c4:53: 8f:6f:fc:10:ad:42:5b:dc:71:c5:a1:96:ee:0d:c3:d5:89:69: 88:72:85:e8:d6:28:40:df:bc:55:da:24:f6:d6:d2:9b:bc:49: cf:12:32:3c:83:45:e8:b9:07:8f:1e:f3:eb:88:93:a3:6f:7c: 81:43:01:ec:68:03:18:f0:8f:44:f4:c1:fe:0c:d4:c1:64:18: 8c:c4:5d:43:bd:68:af:47:d4:fe:e0:ca:5e:6f:f7:54:ca:fe: 99:ca:14:62:87:b9:9d:3f:22:52:21:47:b3:be:77:9d:c2:58: 38:c0:80:19:fa:72:c9:f2:12:f2:a5:b7:f7:a4:c9:5c:cb:52: d3:64:8a:a8:93:3b:46:47:ea:f8:e0:ec:76:f3:91:91:b3:bc: 43:6f:63:7f:16:f5:30:bd:a8:f0:fc:e2:c6:9d:f7:be:e3:ba: 4b:a2:9d:b5:3e:aa:1c:cb:02:59:37:5b:5c:a6:5c:bc:99:98: c4:b6:8d:67:b2:d0:5b:03:b1:e9:7d:f2:a6:f1:f1:ee:fd:c4: ae:1a:d7:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjUwOTExMDAxNjE0WhcNMjUwOTE4MDAxNjE0WjAYMRYwFAYD VQQDEw02OGMyMTRjZS01MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ABiSt1QkH0YQ/Sug/AaZTLaWvOyHWIeYqkJU8MPFeRgVkZt4K34hjquC+8Y /akwgobRfjnUeuxcFwaEaBsQ7tqoiPxSyoS/9ao2K7ex8mX3U2x4Z4952d9qQMON 3HMbWI0fnTq7h+TiD3aLdy62mNkM7zobLYHkpmYyCSeVjws1AtZqtNfjhMEaHedP pJdyk/itEAofQq5PGrJ5hhHp2XFfi7jYC1WhVfWHCxXfPjST2aiDc9Y67hgL4Giv vcSv7a91nntnnErKJSM2/NJ/rhRvfNy1af2padtPA+kKkn/JNMccelujXbDKz9Aa mpzbQY5Tn/4e+VLCpu9yrQmzzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBIhYCu i7JbtHnpKa1T3SbqVlHeMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQConwlixrlsFd4Ne9E/ONitfedgWkSsF/cZVKi22zOFrmAjtpTfOY/i oCO7SjEbOeuWL2cIxFOPb/wQrUJb3HHFoZbuDcPViWmIcoXo1ihA37xV2iT21tKb vEnPEjI8g0XouQePHvPriJOjb3yBQwHsaAMY8I9E9MH+DNTBZBiMxF1DvWivR9T+ 4Mpeb/dUyv6ZyhRih7mdPyJSIUezvnedwlg4wIAZ+nLJ8hLypbf3pMlcy1LTZIqo kztGR+r44Ox285GRs7xDb2N/FvUwvajw/OLGnfe+47pLop21PqocywJZN1tcply8 mZjEto1nstBbA7HpffKm8fHu/cSuGtcq -----END CERTIFICATE-----Generated at Thu Sep 11 10:53:50 2025 by rpki-client