$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: It0HHkspadpUhYhxaJrkRAJkQiB28GjCoPOTV8Aysl4= Subject key identifier: 53:E6:31:0B:02:AF:E6:C2:38:29:07:DA:AD:9D:8C:E0:70:49:65:E6 Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0C75 Signing time: Thu 18 Sep 2025 18:40:16 +0000 Manifest this update: Thu 18 Sep 2025 18:40:15 +0000 Manifest next update: Thu 25 Sep 2025 18:40:15 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: a3EhnpdA4zA7jkhY0mTwkkoXKZlmFOhzPiE57KUzXTc=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: 9iPRz/py3WiOljnKI7Jr3v4dx6W46Rk8EsivjaERwto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: Sep 18 18:40:15 2025 GMT Not After : Sep 25 18:40:15 2025 GMT Subject: CN=68cc520f-6988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:57:d7:d9:8c:0d:35:f0:e4:48:90:5d:9c: 46:2d:73:97:38:6c:b9:f5:e4:48:e0:08:ab:ec:77: 04:56:85:5f:c8:e1:7b:a5:9b:c3:9e:d9:bd:f4:7c: 57:88:ff:a3:d0:80:18:49:18:88:1b:3d:51:e4:b2: e4:7e:c7:4d:39:56:fb:9b:14:fb:a8:eb:fc:ea:f6: ef:e0:80:df:bf:f0:19:2f:08:ab:57:aa:89:3d:a5: cf:b9:d2:c9:64:ce:de:69:af:e7:49:e9:da:e7:ea: 32:ec:bd:59:e6:0c:dc:e0:17:18:3e:44:92:cb:43: dd:ae:06:3d:f0:86:11:75:2a:d6:55:f7:d4:47:cf: 62:f7:db:26:e8:ee:79:48:4b:d4:90:51:25:8d:0c: 44:46:61:d0:69:ab:b0:f5:6f:c5:0b:5c:fb:e6:26: 18:da:bb:27:1d:ab:26:e0:a5:b6:b4:c5:6c:1a:20: 46:d5:fc:09:86:76:f7:14:35:bb:63:b8:9d:f4:f3: 47:b4:e5:e1:a6:7a:ba:fb:e8:d7:01:ee:b3:f0:03: eb:cd:38:fe:95:c9:8a:8f:0a:bf:7d:23:82:37:d1: 17:eb:0e:4c:61:26:1c:00:3c:3a:33:3c:cc:a2:aa: 0b:ac:6a:18:e3:ab:70:ce:49:bb:72:70:9e:77:08: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E6:31:0B:02:AF:E6:C2:38:29:07:DA:AD:9D:8C:E0:70:49:65:E6 X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:7f:6e:db:85:7a:a6:ca:73:e4:73:3a:90:22:9b:17:80:06: 43:62:2a:95:8a:5c:2f:4a:1b:bc:7b:24:dd:12:7b:76:90:6b: 93:6e:50:60:e5:cb:23:f3:19:f3:af:60:08:65:d4:a8:50:b1: e9:ef:34:cd:f1:de:bc:eb:79:cd:d0:35:45:e4:ef:64:1e:8c: 65:63:20:84:a4:3a:7c:6a:79:fa:e2:41:8a:62:7b:ab:71:15: ac:2c:5f:33:00:3c:95:ad:b5:9f:b7:d7:7b:a6:84:bb:ea:58: 18:e7:82:58:c8:38:bd:28:1e:50:a2:db:7b:d2:bf:ee:cd:95: 75:02:71:e1:ee:0f:b6:34:8b:b5:a0:19:ff:a2:6f:05:87:25: 95:d9:4c:2c:1a:72:d5:76:b5:9a:ee:c4:e6:aa:5f:f3:4e:31: 1b:5c:7d:14:10:dd:41:0f:6a:81:50:91:4b:75:92:a5:1d:e2: 37:55:af:ab:dc:0b:1a:ad:fc:5b:f2:5c:fd:ca:bc:68:c5:d2: 82:75:0d:15:25:44:b7:d8:bc:61:6d:42:73:c1:39:c1:73:ec: 17:2b:48:bd:38:0c:49:a8:f7:af:25:be:23:3d:e4:f4:ca:87: a2:eb:07:22:eb:16:54:b1:e4:16:05:c1:85:db:a7:cc:aa:c4: fb:0a:ee:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjUwOTE4MTg0MDE1WhcNMjUwOTI1MTg0MDE1WjAYMRYwFAYD VQQDEw02OGNjNTIwZi02OTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RRX19mMDTXw5EiQXZxGLXOXOGy59eRI4Air7HcEVoVfyOF7pZvDntm99HxX iP+j0IAYSRiIGz1R5LLkfsdNOVb7mxT7qOv86vbv4IDfv/AZLwirV6qJPaXPudLJ ZM7eaa/nSena5+oy7L1Z5gzc4BcYPkSSy0PdrgY98IYRdSrWVffUR89i99sm6O55 SEvUkFEljQxERmHQaauw9W/FC1z75iYY2rsnHasm4KW2tMVsGiBG1fwJhnb3FDW7 Y7id9PNHtOXhpnq6++jXAe6z8APrzTj+lcmKjwq/fSOCN9EX6w5MYSYcADw6MzzM oqoLrGoY46twzkm7cnCedwivKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPmMQsC r+bCOCkH2q2djOBwSWXmMB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTf27bhXqmynPkczqQIpsXgAZDYiqVilwvShu8eyTdEnt2kGuTblBg 5csj8xnzr2AIZdSoULHp7zTN8d6863nN0DVF5O9kHoxlYyCEpDp8ann64kGKYnur cRWsLF8zADyVrbWft9d7poS76lgY54JYyDi9KB5Qott70r/uzZV1AnHh7g+2NIu1 oBn/om8FhyWV2UwsGnLVdrWa7sTmql/zTjEbXH0UEN1BD2qBUJFLdZKlHeI3Va+r 3Asarfxb8lz9yrxoxdKCdQ0VJUS32LxhbUJzwTnBc+wXK0i9OAxJqPevJb4jPeT0 yoei6wci6xZUseQWBcGF26fMqsT7Cu6L -----END CERTIFICATE-----Generated at Fri Sep 19 03:39:41 2025 by rpki-client