$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: cWenMvyuzLPlGJLb85r01gTGuuRvTScquP48X1I3vXc= Subject key identifier: 50:D4:42:4F:EC:D2:04:34:56:A4:64:C6:2D:B2:6F:0E:E1:61:30:04 Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 0115 Signing time: Sat 09 Aug 2025 05:15:35 +0000 Manifest this update: Sat 09 Aug 2025 05:15:34 +0000 Manifest next update: Sat 16 Aug 2025 05:15:34 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: m9hcXOWHcxUfJ5TGEHKqfJkWpa5FeK3ZaJ7dm6NIkVk=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 3XSRq2gf3Qq1teYkUqCY6q4aLkAm0S7clGDEwM9Zv2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Aug 9 05:15:34 2025 GMT Not After : Aug 16 05:15:34 2025 GMT Subject: CN=6896d976-8e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:80:f8:7b:b4:4e:06:ab:a9:40:31:49:3c:e5: 88:6e:01:87:4c:3b:36:ab:c8:18:d4:0d:6e:4b:9c: f5:73:12:e4:e9:52:00:a3:39:52:54:1e:ee:5a:63: ad:fa:49:1b:f4:09:24:df:61:67:1e:30:40:79:f3: 06:74:c7:81:c9:92:27:9b:76:5e:84:28:09:9e:53: 58:42:be:47:b7:c4:48:e3:0d:c2:d5:e5:9f:a6:2e: ad:e1:32:cb:96:ec:54:01:66:e2:db:a6:66:64:10: 45:df:83:40:7f:9d:83:fd:b5:53:71:eb:4b:8a:37: 91:6a:83:a6:83:b8:09:9c:fc:17:40:35:ca:67:76: b6:c5:d0:99:bf:f9:8c:7a:0e:b4:83:e9:70:d3:14: c6:a2:be:1d:96:10:a8:96:d2:c3:fe:5c:3a:0b:e7: 3e:01:05:0c:a4:1a:64:5f:e6:8f:01:33:e1:2d:8c: bf:56:f6:cf:17:ce:f9:8c:0a:df:42:83:38:1e:2b: 04:4d:c6:0e:70:9c:62:f5:dd:77:87:46:b6:e6:e2: 29:c0:dd:1d:bb:d7:fb:8b:5e:86:c4:00:8e:74:84: 81:ca:d6:5b:b5:1b:1f:d7:7d:0c:af:ca:a7:2c:2f: 60:2d:31:4c:bd:a1:ca:06:d6:54:00:66:8d:d7:f0: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D4:42:4F:EC:D2:04:34:56:A4:64:C6:2D:B2:6F:0E:E1:61:30:04 X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b6:95:86:1c:47:93:72:c5:60:c3:09:c9:e5:cc:f5:13:ce: 5d:48:3b:9c:c1:f9:74:a4:e0:4e:bd:20:9a:37:49:43:e7:ea: f7:28:ac:c9:2f:d4:c9:4d:89:fd:d4:b0:32:e8:ee:d0:49:d4: b9:f6:64:a9:9e:8c:25:d6:01:d5:03:e6:b6:ed:88:38:7a:9d: 91:16:48:b4:11:2a:0a:43:c1:b8:ee:3d:df:78:79:5c:ce:cb: be:a7:ec:e2:36:c5:ab:82:46:87:4d:d2:bf:46:37:35:de:42: 98:45:af:61:37:6c:11:c0:7d:7f:cb:3a:ef:52:db:a9:ad:50: 8e:34:9b:3e:0e:08:c5:0f:03:1b:c8:ef:11:05:5c:fb:1a:c6: 58:d1:7e:aa:4e:3d:2f:49:5d:21:3f:e5:a9:f7:df:e6:f4:32: 21:11:8f:2c:55:54:75:98:9e:22:70:59:26:32:95:f6:2e:3a: d1:e8:05:ec:d9:3f:85:90:07:6f:58:56:39:ac:44:5b:86:74: a1:a6:22:91:b3:73:78:06:44:33:de:bb:fb:a0:9d:78:72:ea: 07:ea:bf:2d:9d:05:d8:14:35:e3:9a:d5:52:22:00:7d:e1:a3: 46:89:f6:4f:6e:7c:54:b6:7d:06:5a:af:d8:fe:7c:c6:ae:55: d2:d7:ba:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjUwODA5MDUxNTM0WhcNMjUwODE2MDUxNTM0WjAYMRYwFAYD VQQDEw02ODk2ZDk3Ni04ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9oD4e7ROBqupQDFJPOWIbgGHTDs2q8gY1A1uS5z1cxLk6VIAozlSVB7uWmOt +kkb9Akk32FnHjBAefMGdMeByZInm3ZehCgJnlNYQr5Ht8RI4w3C1eWfpi6t4TLL luxUAWbi26ZmZBBF34NAf52D/bVTcetLijeRaoOmg7gJnPwXQDXKZ3a2xdCZv/mM eg60g+lw0xTGor4dlhColtLD/lw6C+c+AQUMpBpkX+aPATPhLYy/VvbPF875jArf QoM4HisETcYOcJxi9d13h0a25uIpwN0du9f7i16GxACOdISBytZbtRsf130Mr8qn LC9gLTFMvaHKBtZUAGaN1/ArewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDUQk/s 0gQ0VqRkxi2ybw7hYTAEMB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJtpWGHEeTcsVgwwnJ5cz1E85dSDucwfl0pOBOvSCaN0lD5+r3KKzJ L9TJTYn91LAy6O7QSdS59mSpnowl1gHVA+a27Yg4ep2RFki0ESoKQ8G47j3feHlc zsu+p+ziNsWrgkaHTdK/Rjc13kKYRa9hN2wRwH1/yzrvUtuprVCONJs+DgjFDwMb yO8RBVz7GsZY0X6qTj0vSV0hP+Wp99/m9DIhEY8sVVR1mJ4icFkmMpX2LjrR6AXs 2T+FkAdvWFY5rERbhnShpiKRs3N4BkQz3rv7oJ14cuoH6r8tnQXYFDXjmtVSIgB9 4aNGifZPbnxUtn0GWq/Y/nzGrlXS17po -----END CERTIFICATE-----Generated at Sat Aug 9 23:27:03 2025 by rpki-client