$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: rnX1kCYY4+LL7Z21NPb7kltgwdkkmabtZ8y+4rya3Qs= Subject key identifier: 1F:E1:66:77:B4:0E:78:78:D5:55:1D:01:3E:8E:94:F1:0B:99:35:0E Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 08E2 Signing time: Fri 08 Aug 2025 20:45:26 +0000 Manifest this update: Fri 08 Aug 2025 20:45:26 +0000 Manifest next update: Fri 15 Aug 2025 20:45:26 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: wj2MWnArB+5CSHDcXsRbeHTIEy/1nS1wsE3+8kKvImo=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Aug 8 20:45:26 2025 GMT Not After : Aug 15 20:45:26 2025 GMT Subject: CN=689661e6-ebcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:22:76:97:3c:06:63:05:62:16:14:3c:9c: 6c:79:8f:ef:3b:80:63:7b:d2:b8:66:61:62:9c:d0: 54:ec:38:a7:56:0b:d0:90:4a:1d:6c:11:c3:2c:11: 0d:62:df:a7:0d:7d:64:13:4a:75:51:1b:2d:67:15: 95:0b:9a:7f:48:62:bf:69:b9:c5:6e:da:67:41:8d: 3b:b5:79:46:a3:1d:67:95:79:09:b7:51:82:a9:5a: 3f:87:e0:07:a8:72:f1:38:3e:01:06:4c:91:0b:99: 65:de:28:1b:7d:45:35:1a:cb:eb:45:24:30:56:8a: 15:df:bc:4e:b7:ac:a7:f6:3c:b3:99:6f:58:a8:18: 57:cb:a7:9d:35:e1:63:e1:7c:dd:41:be:3c:8c:3d: b0:fe:cd:6d:39:b9:58:3c:46:64:51:ff:02:e2:81: 24:07:2c:43:96:e4:24:a9:13:c4:c7:ed:a8:3b:92: 4a:0a:d0:78:dc:40:4d:a9:aa:4d:45:b8:35:d8:d1: 8d:72:cc:20:57:2d:72:84:62:2c:e5:33:6c:a1:df: 9d:d4:bd:f2:36:38:2c:5c:5a:4b:5d:56:bd:ca:5c: 11:3a:1e:70:17:24:98:45:1e:a7:fd:6a:93:3a:c8: 43:ef:a7:6b:81:21:20:30:a9:6c:d5:6f:3c:62:d5: 39:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E1:66:77:B4:0E:78:78:D5:55:1D:01:3E:8E:94:F1:0B:99:35:0E X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f9:6e:f1:9a:31:18:55:88:d5:65:a2:0c:cf:b8:1f:7e:55: 05:98:6c:94:f5:24:9f:4f:fd:6a:bb:f2:06:c0:b4:98:eb:78: 59:e7:bf:2c:63:c5:10:cc:33:68:eb:e7:1e:f0:dc:8e:34:aa: 6d:16:78:68:20:f3:0e:f1:29:fc:d2:be:ee:28:05:62:97:cf: 98:26:46:0e:63:81:d1:bc:40:d0:7c:12:42:d6:75:ce:3f:2e: 9e:31:ac:07:e8:cc:2b:5c:31:0c:8a:16:ca:59:16:73:c0:27: ed:7f:a4:c1:f9:e6:09:e9:cd:cb:60:3a:80:9f:93:9b:74:6b: 39:05:5f:27:5b:15:8b:c9:b7:f6:6e:58:68:4d:c5:36:95:51: 92:3b:6a:b6:23:49:c3:82:35:35:7e:89:2f:14:9c:55:e5:21: 76:48:dc:09:f3:86:b5:ec:62:6a:ba:15:f5:5e:73:38:19:67: 66:11:03:0b:81:1a:c6:54:92:74:54:41:63:1c:cc:f6:f9:ae: eb:ef:11:45:03:0c:b7:63:71:4a:9b:db:2a:34:bf:b6:6e:82: b5:e7:58:8e:d5:d2:9d:f6:e9:2b:0d:05:a5:8b:ef:b6:92:76: b8:11:bd:c0:02:6b:d4:73:33:bc:a2:9c:10:cf:69:9f:a2:e1: 3c:2b:98:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUwODA4MjA0NTI2WhcNMjUwODE1MjA0NTI2WjAYMRYwFAYD VQQDEw02ODk2NjFlNi1lYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOoidpc8BmMFYhYUPJxseY/vO4Bje9K4ZmFinNBU7DinVgvQkEodbBHDLBEN Yt+nDX1kE0p1URstZxWVC5p/SGK/abnFbtpnQY07tXlGox1nlXkJt1GCqVo/h+AH qHLxOD4BBkyRC5ll3igbfUU1GsvrRSQwVooV37xOt6yn9jyzmW9YqBhXy6edNeFj 4XzdQb48jD2w/s1tOblYPEZkUf8C4oEkByxDluQkqRPEx+2oO5JKCtB43EBNqapN Rbg12NGNcswgVy1yhGIs5TNsod+d1L3yNjgsXFpLXVa9ylwROh5wFySYRR6n/WqT OshD76drgSEgMKls1W88YtU5qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/hZne0 Dnh41VUdAT6OlPELmTUOMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ+W7xmjEYVYjVZaIMz7gfflUFmGyU9SSfT/1qu/IGwLSY63hZ578s Y8UQzDNo6+ce8NyONKptFnhoIPMO8Sn80r7uKAVil8+YJkYOY4HRvEDQfBJC1nXO Py6eMawH6MwrXDEMihbKWRZzwCftf6TB+eYJ6c3LYDqAn5ObdGs5BV8nWxWLybf2 blhoTcU2lVGSO2q2I0nDgjU1fokvFJxV5SF2SNwJ84a17GJquhX1XnM4GWdmEQML gRrGVJJ0VEFjHMz2+a7r7xFFAwy3Y3FKm9sqNL+2boK151iO1dKd9ukrDQWli++2 kna4Eb3AAmvUczO8opwQz2mfouE8K5jp -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:11 2025 by rpki-client