$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json) Hash identifier: uKT/nwC3dpNenm+pRhaZHSHY9fQCFlJovS9D7QgjMXw= Subject key identifier: 09:11:87:E7:38:E6:04:67:34:9F:B1:25:46:BC:23:75:64:E5:79:1F Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft Manifest number: A2 Signing time: Thu 07 Aug 2025 06:48:58 +0000 Manifest this update: Thu 07 Aug 2025 06:48:58 +0000 Manifest next update: Thu 14 Aug 2025 06:48:58 +0000 Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: S38emoqeF/ZkSW8SmRrmIbCnVQ9JY3oY+6BAPLQEScU=) 2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Validity Not Before: Aug 7 06:48:58 2025 GMT Not After : Aug 14 06:48:58 2025 GMT Subject: CN=68944c5a-4905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:5a:29:aa:2e:e2:e6:b7:48:30:98:6c:87: 76:4a:02:78:3e:af:da:bd:9c:53:b5:e3:61:12:ae: ab:27:cd:de:8e:b5:af:e2:08:e2:aa:e1:9f:4b:06: c0:b1:df:69:09:ed:06:d2:16:6d:72:5c:ea:34:41: c2:83:57:fa:c9:dc:d3:f9:08:46:63:01:fe:61:89: b7:f7:a2:0c:1b:06:94:61:50:27:6c:fb:2a:9c:53: c3:70:a2:6d:0f:19:a3:47:cc:26:e2:2e:21:33:20: 72:26:c8:99:ce:a2:c1:9e:05:12:4b:83:df:ac:c4: bb:7a:76:69:67:6f:1b:1c:83:49:5e:0f:a1:32:99: be:ed:b7:57:14:1d:75:d9:55:cb:37:28:11:47:d7: a4:d2:d8:7f:99:f6:8f:c8:77:d2:e3:0f:d9:22:1b: a0:9a:7f:4c:35:4e:8c:17:a8:bc:b1:fc:14:bc:36: 32:01:62:f3:d0:99:13:46:c2:9f:2d:6e:2a:69:1c: 80:f1:f4:bc:e4:4a:d4:5a:99:56:63:b0:df:07:05: 9c:ee:30:5c:64:6a:f1:49:16:63:e7:f0:74:5b:bc: 8d:c4:b6:f6:eb:3b:07:f6:fc:8a:a5:24:39:37:71: 89:a1:5d:74:ad:27:b6:a9:f5:5a:7d:53:7b:3b:70: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:11:87:E7:38:E6:04:67:34:9F:B1:25:46:BC:23:75:64:E5:79:1F X509v3 Authority Key Identifier: keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fc:c4:f4:9e:94:49:15:c5:62:b6:e5:80:e0:88:87:46:e5: fe:29:d2:66:8c:a9:e2:73:92:2a:21:3c:b4:46:01:a2:99:ac: e7:b8:28:ea:7e:e6:d2:2e:31:62:e4:34:ea:f1:8a:11:0d:6e: a2:5c:a9:54:95:ee:c6:84:f7:17:da:e2:48:03:15:9f:4a:ed: ad:6d:f5:e2:34:af:6c:cd:ae:3b:dd:b3:40:30:dd:e6:b2:17: 73:a9:2f:86:35:36:ed:d0:0f:66:11:dc:13:f0:4a:01:89:56: 36:b7:af:f1:84:da:ff:b1:14:1c:53:51:98:a0:1c:ed:c3:44: b5:28:9d:41:17:2d:17:b7:fa:c5:7b:bb:58:4e:e0:3d:6b:8b: 37:3a:03:56:b7:0c:57:3c:f2:ac:09:66:a8:fa:5c:59:c8:37: d4:e3:1d:b3:3f:2f:9b:2a:d2:3f:eb:84:53:43:4e:66:c7:bc: 11:f5:43:48:f5:07:be:3e:fe:79:b6:fd:16:8e:d8:4c:06:4c: 16:9a:f0:5d:91:b2:da:27:3a:c8:ce:37:e5:91:95:18:42:35: 99:90:c9:95:c5:9f:da:f9:64:06:3e:54:fc:27:c9:7c:9b:25: 1d:8b:13:31:37:87:8b:d6:70:f2:fb:b9:31:eb:82:a2:8b:40: af:12:80:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1 RjE2M0FFNDMwHhcNMjUwODA3MDY0ODU4WhcNMjUwODE0MDY0ODU4WjAYMRYwFAYD VQQDEw02ODk0NGM1YS00OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq5aKaou4ua3SDCYbId2SgJ4Pq/avZxTteNhEq6rJ83ejrWv4gjiquGfSwbA sd9pCe0G0hZtclzqNEHCg1f6ydzT+QhGYwH+YYm396IMGwaUYVAnbPsqnFPDcKJt DxmjR8wm4i4hMyByJsiZzqLBngUSS4PfrMS7enZpZ28bHINJXg+hMpm+7bdXFB11 2VXLNygRR9ek0th/mfaPyHfS4w/ZIhugmn9MNU6MF6i8sfwUvDYyAWLz0JkTRsKf LW4qaRyA8fS85ErUWplWY7DfBwWc7jBcZGrxSRZj5/B0W7yNxLb26zsH9vyKpSQ5 N3GJoV10rSe2qfVafVN7O3A9jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkRh+c4 5gRnNJ+xJUa8I3Vk5XkfMB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm MUFiYklESTJaWnhmRmpya00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs/MT0npRJFcVituWA4IiHRuX+KdJmjKnic5IqITy0RgGimaznuCjq fubSLjFi5DTq8YoRDW6iXKlUle7GhPcX2uJIAxWfSu2tbfXiNK9sza473bNAMN3m shdzqS+GNTbt0A9mEdwT8EoBiVY2t6/xhNr/sRQcU1GYoBztw0S1KJ1BFy0Xt/rF e7tYTuA9a4s3OgNWtwxXPPKsCWao+lxZyDfU4x2zPy+bKtI/64RTQ05mx7wR9UNI 9Qe+Pv55tv0WjthMBkwWmvBdkbLaJzrIzjflkZUYQjWZkMmVxZ/a+WQGPlT8J8l8 myUdixMxN4eL1nDy+7kx64Kii0CvEoCS -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:58 2025 by rpki-client