$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft File: pjicd02tZdiN8ubU9D3ioLVy7no.mft (raw, json) Hash identifier: S6owwIW9iQidi2EJHC/squ6mf3w2HbaRz1DHTPBu7I0= Subject key identifier: 1A:6E:88:4D:FB:45:5D:B8:C8:F0:1C:69:CA:0C:6C:AA:2B:87:03:63 Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft Manifest number: 0268 Signing time: Mon 11 Aug 2025 02:01:29 +0000 Manifest this update: Mon 11 Aug 2025 02:01:29 +0000 Manifest next update: Mon 18 Aug 2025 02:01:29 +0000 Files and hashes: 1: pjicd02tZdiN8ubU9D3ioLVy7no.crl (hash: JPrHewm4y7T8Rq2JgpIAJmX5ioGBhjwiuGaAIF6vrvc=) 2: 9995D8D6276011EDAF21D06DC4F9AE02.roa (hash: De/y5SymwOEb9D5+rzbdyyNd+/EfQtgf39FuJEq4RYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Validity Not Before: Aug 11 02:01:29 2025 GMT Not After : Aug 18 02:01:29 2025 GMT Subject: CN=68994ef9-d81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:66:0a:d3:46:43:09:a4:fa:6a:c7:f1:6d:ae: e1:4a:80:aa:d9:43:ed:d2:ff:5d:9d:0e:82:46:b1: 88:8e:7d:ed:8f:a3:21:b7:bb:b1:be:89:2b:d0:c2: ca:b1:87:f8:44:b1:0b:8f:82:92:da:73:94:2d:aa: c9:d9:cf:45:5e:1a:5d:55:b9:f1:78:14:d9:4d:02: 33:1b:ab:b6:9c:9e:d6:74:47:4a:c5:f2:a3:bf:9b: 27:46:62:e8:bf:9d:eb:d7:fb:51:33:34:cf:d8:a5: c7:1f:f2:51:ef:e8:8f:40:b1:50:24:51:cf:25:2f: 5f:43:b1:50:75:8a:72:45:1d:44:cd:10:5b:ae:78: db:1c:96:57:4b:b7:ae:ed:87:33:82:f8:a9:4b:75: aa:cd:c5:38:93:f0:9e:37:ff:91:7b:5d:a3:e6:2e: 6a:63:56:29:1f:27:0c:50:e4:c8:b4:d4:5d:2b:c7: 8a:b0:eb:5a:61:55:da:19:97:d5:24:e2:e5:5e:8a: b5:18:b2:a1:c0:45:48:92:63:6b:81:5d:5b:4b:13: c9:f3:8d:83:99:23:0a:a6:e5:2e:b9:40:e5:70:2a: 74:89:d2:16:ed:00:26:e6:6f:37:b9:cf:19:cf:bf: 83:91:39:53:a6:d7:e1:80:2e:d9:1e:9e:db:2c:9a: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6E:88:4D:FB:45:5D:B8:C8:F0:1C:69:CA:0C:6C:AA:2B:87:03:63 X509v3 Authority Key Identifier: keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:71:2e:c1:73:8f:e3:8f:40:85:03:ed:c1:1f:fa:1e:8a:4a: fa:f3:fa:57:8c:99:c6:57:3f:39:af:db:1f:9a:c3:57:d1:f7: 5f:e4:f8:41:fc:5d:70:c9:34:49:c6:f3:34:9e:56:ce:52:7c: b7:0a:f4:38:3d:b3:3c:8a:75:a9:77:44:ea:e7:62:d4:1e:ea: 38:43:86:9f:e7:f2:74:3f:cf:bf:d1:66:48:05:18:d5:b6:8f: 9e:df:a8:30:be:3f:21:e9:b0:1d:c8:61:49:3e:ea:17:6e:e9: 36:61:6a:69:38:c6:d7:b0:fb:df:fb:b9:23:08:12:ac:3b:3b: e7:89:22:4c:8f:f1:f0:8a:f0:61:53:bd:ea:8a:bc:ce:51:17: ca:a4:83:5b:5e:f7:0b:2e:68:19:60:95:3c:0c:f3:a5:3a:64: 75:80:9a:90:8b:b9:db:07:2b:98:3e:93:3c:83:35:fe:b1:a0: 08:1b:5b:52:fb:8d:d8:ba:05:2f:39:d1:20:5e:ae:fa:f3:e4: a9:58:d1:5e:92:f8:b5:b8:37:c7:96:93:ee:7a:56:45:cc:81: c3:c9:90:85:92:c2:cb:c3:97:55:21:2a:88:50:28:5a:4b:6d: 09:b0:f6:ec:5c:75:9f:58:15:4d:84:47:96:ef:62:ed:b3:7e: 7f:10:d7:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1MjIxMTAvBgNVBAUTKEE2Mzg5Qzc3NERBRDY1RDg4REYyRTZENEY0M0RFMkEw QjU3MkVFN0EwHhcNMjUwODExMDIwMTI5WhcNMjUwODE4MDIwMTI5WjAYMRYwFAYD VQQDEw02ODk5NGVmOS1kODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52YK00ZDCaT6asfxba7hSoCq2UPt0v9dnQ6CRrGIjn3tj6Mht7uxvokr0MLK sYf4RLELj4KS2nOULarJ2c9FXhpdVbnxeBTZTQIzG6u2nJ7WdEdKxfKjv5snRmLo v53r1/tRMzTP2KXHH/JR7+iPQLFQJFHPJS9fQ7FQdYpyRR1EzRBbrnjbHJZXS7eu 7YczgvipS3WqzcU4k/CeN/+Re12j5i5qY1YpHycMUOTItNRdK8eKsOtaYVXaGZfV JOLlXoq1GLKhwEVIkmNrgV1bSxPJ842DmSMKpuUuuUDlcCp0idIW7QAm5m83uc8Z z7+DkTlTptfhgC7ZHp7bLJrG0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpuiE37 RV24yPAcacoMbKorhwNjMB8GA1UdIwQYMBaAFKY4nHdNrWXYjfLm1PQ94qC1cu56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDUyMi9ERTIwRkM5NjI3 NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpkaU44dWJVOUQzaW9MVnk3 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqaWNkMDJ0WmRpTjh1YlU5RDNpb0xWeTduby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDUyMi9ERTIwRkM5NjI3NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpk aU44dWJVOUQzaW9MVnk3bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxcS7Bc4/jj0CFA+3BH/oeikr68/pXjJnGVz85r9sfmsNX0fdf5PhB /F1wyTRJxvM0nlbOUny3CvQ4PbM8inWpd0Tq52LUHuo4Q4af5/J0P8+/0WZIBRjV to+e36gwvj8h6bAdyGFJPuoXbuk2YWppOMbXsPvf+7kjCBKsOzvniSJMj/HwivBh U73qirzOURfKpINbXvcLLmgZYJU8DPOlOmR1gJqQi7nbByuYPpM8gzX+saAIG1tS +43YugUvOdEgXq768+SpWNFekvi1uDfHlpPuelZFzIHDyZCFksLLw5dVISqIUCha S20JsPbsXHWfWBVNhEeW72Lts35/ENfq -----END CERTIFICATE-----Generated at Mon Aug 11 13:05:44 2025 by rpki-client