$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: 0WLn0hNd3SrK7eaUn1XxekRBH2B/HyHZH7w9Ef1ytto= Subject key identifier: 28:7A:B6:5E:A4:8C:94:FC:F5:2C:D6:2A:0E:A5:4C:2A:D6:80:66:4A Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: C9 Signing time: Sat 09 Aug 2025 06:10:20 +0000 Manifest this update: Sat 09 Aug 2025 06:10:19 +0000 Manifest next update: Sat 16 Aug 2025 06:10:19 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: zdyGB7hS7aChUXdqCrPBEPJ3dIf3qYZY7X1vd2hwrlM=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: Q8jUoDfTBKkYt+wlmI66aJ+35Q4MifbD8LinqGUg/KY=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: KoaV0URvtmzdHrqA1z33gHV+eShaD03rJhOUSMjsP9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Aug 9 06:10:19 2025 GMT Not After : Aug 16 06:10:19 2025 GMT Subject: CN=6896e64c-9e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:74:9b:13:63:29:4d:3c:6c:22:42:29:c4: 58:28:7d:88:a3:11:9e:3a:e1:46:14:2d:ee:b1:b5: 65:a6:42:31:72:6b:67:11:e2:03:3d:7a:c7:e0:49: db:a1:0e:1e:18:92:d1:df:32:77:df:9c:28:23:72: c3:be:62:b2:87:80:61:b7:e7:61:7e:7f:38:2a:1b: 81:80:cc:b2:fd:fe:b7:e3:9c:6a:76:3e:2e:3f:58: fc:0b:42:ec:f4:b6:c5:47:37:ec:fb:44:ff:0a:f7: cd:ef:e6:dc:ba:d7:1d:45:d3:43:8e:91:de:cc:01: 9f:fb:51:99:ae:41:60:ad:be:bd:6e:07:1a:29:f2: b1:2e:e3:d0:f7:50:0f:c2:e2:d0:cc:90:21:7e:41: fb:6b:f6:6c:84:90:bc:16:da:60:7f:42:94:cc:d4: 49:4b:e3:77:18:e2:af:73:8b:b5:bf:2e:15:50:1a: 0a:3a:11:2f:35:ab:f9:6d:ed:83:6b:84:ad:3f:04: 18:65:c2:41:5c:3a:c6:e1:31:a6:03:c5:b3:23:70: fe:51:d8:4c:8e:93:e9:8e:28:ab:97:61:ca:6f:be: 92:c2:5b:f1:03:17:78:f7:e3:c3:61:0c:0a:f2:21: d9:5d:05:7e:0a:f0:14:3a:cd:15:3c:89:e3:84:12: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:B6:5E:A4:8C:94:FC:F5:2C:D6:2A:0E:A5:4C:2A:D6:80:66:4A X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e5:ea:9a:90:0f:39:15:6c:a1:a0:5f:d8:20:7c:fe:88:7f: 35:b7:bd:58:26:c1:c0:9e:64:6e:fe:8b:fc:3b:3f:d5:e1:a3: 9d:d5:b1:a8:54:16:dc:83:f3:ac:c8:1a:6e:ef:aa:1b:14:41: aa:bd:9c:fa:43:c8:b4:9d:e7:c5:68:c9:4a:9b:47:92:50:5d: 3d:50:80:db:70:b9:82:b4:9a:02:91:0f:ed:2f:bc:5b:1d:86: ca:b0:a0:4b:04:a0:08:a8:98:6a:0f:59:d3:51:43:99:70:7d: ce:01:14:ec:69:21:c6:c8:ea:90:46:45:72:12:f0:ba:80:b3: 24:62:34:79:28:31:0a:4d:4d:a3:13:e8:f4:84:51:4c:a8:31: 26:5c:00:a5:ed:c5:10:50:08:6e:ea:ba:a8:d0:16:fe:32:47: 81:04:5f:2b:c4:7c:ef:8a:ac:11:d1:14:ad:7d:ed:bd:26:93: 50:64:d7:d1:fc:91:76:9a:85:4c:e5:ce:66:17:ee:c9:43:7a: 6f:31:01:b9:51:08:3d:3a:26:eb:be:68:ef:e4:dd:71:6d:15: 65:b2:88:b6:b8:40:2e:b0:89:47:b6:8f:6b:9d:7b:63:a2:7e: aa:21:54:39:eb:4b:4a:23:29:18:aa:ea:5a:7b:ce:63:8e:35: 15:05:1c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwODA5MDYxMDE5WhcNMjUwODE2MDYxMDE5WjAYMRYwFAYD VQQDEw02ODk2ZTY0Yy05ZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPZ0mxNjKU08bCJCKcRYKH2IoxGeOuFGFC3usbVlpkIxcmtnEeIDPXrH4Enb oQ4eGJLR3zJ335woI3LDvmKyh4Bht+dhfn84KhuBgMyy/f6345xqdj4uP1j8C0Ls 9LbFRzfs+0T/CvfN7+bcutcdRdNDjpHezAGf+1GZrkFgrb69bgcaKfKxLuPQ91AP wuLQzJAhfkH7a/ZshJC8Ftpgf0KUzNRJS+N3GOKvc4u1vy4VUBoKOhEvNav5be2D a4StPwQYZcJBXDrG4TGmA8WzI3D+UdhMjpPpjiirl2HKb76SwlvxAxd49+PDYQwK 8iHZXQV+CvAUOs0VPInjhBJaDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCh6tl6k jJT89SzWKg6lTCrWgGZKMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu5eqakA85FWyhoF/YIHz+iH81t71YJsHAnmRu/ov8Oz/V4aOd1bGo VBbcg/OsyBpu76obFEGqvZz6Q8i0nefFaMlKm0eSUF09UIDbcLmCtJoCkQ/tL7xb HYbKsKBLBKAIqJhqD1nTUUOZcH3OARTsaSHGyOqQRkVyEvC6gLMkYjR5KDEKTU2j E+j0hFFMqDEmXACl7cUQUAhu6rqo0Bb+MkeBBF8rxHzviqwR0RStfe29JpNQZNfR /JF2moVM5c5mF+7JQ3pvMQG5UQg9Oibrvmjv5N1xbRVlsoi2uEAusIlHto9rnXtj on6qIVQ560tKIykYqupae85jjjUVBRwl -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:15 2025 by rpki-client