$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: Am+5uSJMpokX30sQuJ44dnCXBMLV7ZyQF2/SA8bcyq8= Subject key identifier: 9C:B3:25:44:E5:BC:CA:9B:41:2A:B8:30:77:1C:B5:13:B3:F9:42:5C Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 1709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 16FF Signing time: Fri 08 Aug 2025 16:48:44 +0000 Manifest this update: Fri 08 Aug 2025 16:48:43 +0000 Manifest next update: Fri 15 Aug 2025 16:48:43 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: VORqAsFwi3Rjix0ONCcBlGAsRvqY9glPfufGHy71Rig=) 2: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (hash: 995PegsL3ZUwg9uvRMBU899Zay98EopTGO6qSEJefks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5897 (0x1709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Aug 8 16:48:43 2025 GMT Not After : Aug 15 16:48:43 2025 GMT Subject: CN=68962a6b-0e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:85:58:b6:a6:d1:f3:20:1d:cb:88:65:02: a9:20:be:55:3d:c8:a2:d9:3c:65:01:fc:a9:20:4d: 4f:2b:a8:bc:f5:e4:50:b7:d5:11:a9:1e:f0:51:58: 88:eb:df:a3:85:3f:c2:5e:cc:01:80:6c:e8:e8:87: 8a:83:8e:e0:e9:11:b0:0b:60:4d:6f:e5:33:e5:02: e3:d7:7c:6e:a0:42:26:e7:d1:e4:2a:00:ca:cd:7b: 84:09:4c:98:e5:86:61:db:80:92:64:b4:e1:4c:0f: 02:0b:e5:9c:13:bc:cf:7b:a5:74:88:98:01:f5:7b: 16:0b:d5:82:5f:2d:97:ad:be:ad:f7:2e:ec:19:d8: 5f:f1:f2:ee:83:e0:04:99:11:a0:a8:b4:b7:22:c9: 00:be:64:67:37:a2:73:c6:9a:24:c3:9f:74:64:40: 88:cb:73:8c:5a:64:9f:c7:0c:5c:a6:35:ed:a8:f4: c0:63:80:c6:d7:d2:7e:ae:23:aa:68:37:50:ac:ef: 6c:e2:59:5c:3d:cf:63:bd:fb:a0:fa:b7:67:9c:8c: 87:b4:ce:4d:93:c9:3d:96:e4:c4:ae:aa:60:ed:6f: ad:63:93:df:55:62:45:37:e4:26:10:e9:d5:d2:ab: 64:da:50:c0:62:cf:5e:96:74:78:24:6a:38:60:11: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B3:25:44:E5:BC:CA:9B:41:2A:B8:30:77:1C:B5:13:B3:F9:42:5C X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:78:43:8e:04:4e:e6:75:4f:53:51:c4:26:04:c3:9e:06:1a: ec:03:5d:1a:61:d4:0a:85:05:bb:3d:13:f1:7e:12:5d:d5:48: 0c:59:01:6b:e6:d3:56:32:6f:3a:66:81:55:05:47:7f:e1:de: d5:0f:e8:4f:06:3c:14:b6:6a:8f:b9:72:f6:16:1f:88:89:a5: 59:51:61:58:14:e9:f3:8b:88:70:e0:21:18:66:2d:bc:56:db: 6e:7e:1b:29:05:df:16:c4:67:20:9f:37:87:8e:be:27:16:14: a2:4f:57:54:e4:d7:d8:c0:de:68:aa:3d:dc:cb:97:95:4a:fd: ef:cc:4f:f8:a0:37:70:5d:f8:fc:73:86:80:44:0d:fc:72:c0: 90:79:a2:51:88:78:1d:57:b2:cb:a3:d3:f7:30:17:d2:6f:49: ed:03:1d:e4:dd:33:4a:99:b0:12:6b:ad:92:ad:91:e9:bb:38: 3e:53:47:3c:f5:40:74:e1:2f:b3:13:ce:be:8f:5b:91:0c:b0: 96:b3:4c:0c:52:55:64:b8:0f:87:b2:56:8a:de:29:3f:7d:99: 1e:95:87:f5:d6:69:a1:21:26:9f:0e:60:6d:06:23:4b:1b:10: a7:66:d3:a7:e1:17:d3:91:d5:58:3f:c6:1b:cf:84:c9:a9:03: 08:f0:57:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUwODA4MTY0ODQzWhcNMjUwODE1MTY0ODQzWjAYMRYwFAYD VQQDEw02ODk2MmE2Yi0wZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSiFWLam0fMgHcuIZQKpIL5VPcii2TxlAfypIE1PK6i89eRQt9URqR7wUViI 69+jhT/CXswBgGzo6IeKg47g6RGwC2BNb+Uz5QLj13xuoEIm59HkKgDKzXuECUyY 5YZh24CSZLThTA8CC+WcE7zPe6V0iJgB9XsWC9WCXy2Xrb6t9y7sGdhf8fLug+AE mRGgqLS3IskAvmRnN6Jzxpokw590ZECIy3OMWmSfxwxcpjXtqPTAY4DG19J+riOq aDdQrO9s4llcPc9jvfug+rdnnIyHtM5Nk8k9luTErqpg7W+tY5PfVWJFN+QmEOnV 0qtk2lDAYs9elnR4JGo4YBFYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyzJUTl vMqbQSq4MHcctROz+UJcMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzeEOOBE7mdU9TUcQmBMOeBhrsA10aYdQKhQW7PRPxfhJd1UgMWQFr 5tNWMm86ZoFVBUd/4d7VD+hPBjwUtmqPuXL2Fh+IiaVZUWFYFOnzi4hw4CEYZi28 VttufhspBd8WxGcgnzeHjr4nFhSiT1dU5NfYwN5oqj3cy5eVSv3vzE/4oDdwXfj8 c4aARA38csCQeaJRiHgdV7LLo9P3MBfSb0ntAx3k3TNKmbASa62SrZHpuzg+U0c8 9UB04S+zE86+j1uRDLCWs0wMUlVkuA+HslaK3ik/fZkelYf11mmhISafDmBtBiNL GxCnZtOn4RfTkdVYP8Ybz4TJqQMI8FdK -----END CERTIFICATE-----Generated at Sun Aug 10 04:50:01 2025 by rpki-client