$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: JSpQDob7PWDb5HQYYU505/y2gq9GXo9FnV9KqEtFzPE= Subject key identifier: 76:0E:F4:5A:64:17:EB:66:42:B0:F8:DF:D3:2C:46:1B:1E:B4:2A:77 Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 0126 Signing time: Thu 07 Aug 2025 05:10:35 +0000 Manifest this update: Thu 07 Aug 2025 05:10:34 +0000 Manifest next update: Thu 14 Aug 2025 05:10:34 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: Yg0reYXrokoEjiXjCpkd5PVHfFgf8+6zrpcAaJz7RYI=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: Aug 7 05:10:34 2025 GMT Not After : Aug 14 05:10:34 2025 GMT Subject: CN=6894354a-f446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:47:1c:96:9c:b0:e4:fd:d7:42:c7:ba:5b:69: 90:3d:98:6f:8f:62:91:47:ba:39:7b:51:62:0c:ff: 77:71:62:99:68:e2:ac:5b:f4:14:de:27:22:d3:77: a5:fe:6d:61:b8:f0:80:da:6e:b1:24:7d:9a:26:b6: 72:5e:9a:38:04:a9:8b:4b:fb:b4:d1:71:3e:ff:54: ec:25:28:17:74:ad:b7:89:66:c8:13:9d:4c:ba:5b: ce:ba:b6:bc:31:3b:9c:6d:55:7b:64:f3:bd:6b:b6: c4:83:3f:11:df:11:6d:c5:7f:33:e1:92:34:74:81: 53:f6:b9:1d:52:ff:c0:c8:54:5a:18:e6:03:cd:78: 2d:da:60:1e:b2:2f:e8:f4:d7:18:55:cf:c3:97:9a: ab:82:da:42:9f:53:f2:b2:7b:85:30:fa:31:bf:8b: 0a:7d:51:e7:d0:9a:29:6b:04:69:e6:8f:a2:64:8e: 0a:bd:7e:47:a7:15:4d:82:cb:70:1d:3e:76:28:32: 9a:6b:b0:63:6f:29:87:68:bc:c3:d1:29:da:ce:0b: b1:75:d2:00:e9:2a:2b:22:9d:c3:41:d1:36:86:79: 4d:c1:09:1d:86:e1:c5:a5:22:b2:aa:d8:bc:bb:ec: 2f:87:a0:71:d7:00:bf:5f:c5:d8:52:85:42:9f:1a: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0E:F4:5A:64:17:EB:66:42:B0:F8:DF:D3:2C:46:1B:1E:B4:2A:77 X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:72:51:a8:c0:c9:a0:1d:90:06:bb:10:d4:52:e1:8c:f4: e7:d2:e3:6f:c2:01:ae:99:84:c6:45:7d:bd:33:ec:e4:e7:23: 3b:a7:bc:72:28:82:65:df:17:34:f2:88:0f:f4:fe:c3:6b:2f: 22:c5:42:43:0b:c2:e3:96:db:8d:83:f1:2b:20:68:30:f6:b0: ec:94:82:4b:c8:98:57:3e:c7:b0:73:95:00:46:66:44:0c:d0: f2:d8:ea:37:4d:4a:a8:4d:d4:6c:3d:4a:74:b8:c8:2f:fc:81: 8f:1a:ae:21:60:e8:df:92:b0:21:ce:a9:f5:30:56:65:b6:1e: 74:a0:3f:8e:f5:95:9b:08:49:34:84:3d:28:1c:84:94:ab:18: 8f:84:f4:84:54:fd:8b:a5:64:7a:75:98:60:7a:b1:f3:a6:76: a6:71:0b:f3:3f:f4:62:02:e5:4b:09:8a:21:03:d0:e2:13:2f: 73:9f:d1:1d:bc:fe:3c:a0:49:c2:2e:15:48:e8:44:aa:d0:20: a4:96:f3:be:9d:82:63:0b:f8:b0:aa:47:7c:8c:ec:74:60:9d: b6:43:38:e2:11:88:06:50:c5:66:09:8b:b5:f3:56:34:dc:a4: b9:92:52:e7:ec:ed:b8:20:b3:f3:ad:52:95:97:c9:02:cf:45: a4:e1:11:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjUwODA3MDUxMDM0WhcNMjUwODE0MDUxMDM0WjAYMRYwFAYD VQQDEw02ODk0MzU0YS1mNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Ecclpyw5P3XQse6W2mQPZhvj2KRR7o5e1FiDP93cWKZaOKsW/QU3ici03el /m1huPCA2m6xJH2aJrZyXpo4BKmLS/u00XE+/1TsJSgXdK23iWbIE51MulvOura8 MTucbVV7ZPO9a7bEgz8R3xFtxX8z4ZI0dIFT9rkdUv/AyFRaGOYDzXgt2mAesi/o 9NcYVc/Dl5qrgtpCn1PysnuFMPoxv4sKfVHn0JopawRp5o+iZI4KvX5HpxVNgstw HT52KDKaa7BjbymHaLzD0SnazguxddIA6SorIp3DQdE2hnlNwQkdhuHFpSKyqti8 u+wvh6Bx1wC/X8XYUoVCnxpQcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYO9Fpk F+tmQrD439MsRhsetCp3MB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6JXJRqMDJoB2QBrsQ1FLhjPTn0uNvwgGumYTGRX29M+zk5yM7p7xy KIJl3xc08ogP9P7Day8ixUJDC8LjltuNg/ErIGgw9rDslIJLyJhXPsewc5UARmZE DNDy2Oo3TUqoTdRsPUp0uMgv/IGPGq4hYOjfkrAhzqn1MFZlth50oD+O9ZWbCEk0 hD0oHISUqxiPhPSEVP2LpWR6dZhgerHzpnamcQvzP/RiAuVLCYohA9DiEy9zn9Ed vP48oEnCLhVI6ESq0CCklvO+nYJjC/iwqkd8jOx0YJ22QzjiEYgGUMVmCYu181Y0 3KS5klLn7O24ILPzrVKVl8kCz0Wk4RGs -----END CERTIFICATE-----Generated at Sat Aug 9 01:04:21 2025 by rpki-client