$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json) Hash identifier: zAekYnZRyvsH3gMBRXiO1qqHfYdiqXz3gyddoMP1CF8= Subject key identifier: 77:72:8A:80:8F:21:FD:CE:B4:3E:E8:50:0B:0F:44:20:1E:5C:29:A7 Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Certificate serial: 17A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft Manifest number: 1797 Signing time: Fri 22 Aug 2025 16:41:18 +0000 Manifest this update: Fri 22 Aug 2025 16:41:17 +0000 Manifest next update: Fri 29 Aug 2025 16:41:17 +0000 Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: UcJpkkbWs9bUDJ73QUjT58SAcTlGD5QkJU2SqpHtY7E=) 2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: AFv3+8G4+14cWKdLCa3SvwGQd6CuiEszUkutLoyR7bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6055 (0x17a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Validity Not Before: Aug 22 16:41:17 2025 GMT Not After : Aug 29 16:41:17 2025 GMT Subject: CN=68a89dad-93d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:27:e7:1b:90:5e:45:e0:79:b4:e2:81:b9: 78:4a:d5:37:ea:29:07:c5:d6:b0:d7:ea:e2:b6:cf: 0a:f8:68:d3:c2:6f:01:cb:37:91:87:50:f0:fb:a0: 9e:3a:f7:0a:46:8a:1e:bb:11:1b:09:7a:f2:1d:e1: b3:58:90:d3:8f:c1:fb:3e:01:97:d9:5f:f0:df:f4: 7f:d5:59:fb:d0:7e:32:63:7a:3d:0d:4a:7a:5d:3e: 35:ac:a4:2b:44:ee:cd:19:8e:4d:8e:2a:81:48:32: d1:f5:cc:dc:cd:4a:14:64:17:70:b1:99:15:ac:8f: 2e:7e:f8:be:09:95:89:be:48:91:ee:d3:bc:49:79: 56:af:27:b0:9f:db:db:b4:51:bb:89:79:54:1f:e3: f9:18:95:b2:71:29:c4:2e:f7:76:eb:d0:15:82:5b: d9:b3:33:72:96:a9:19:1a:65:bb:d0:b0:5a:5d:6b: ec:f0:5d:59:e9:7b:fe:29:1c:ed:59:30:e8:b6:f7: bc:02:76:f9:a9:7a:62:65:99:51:00:b1:58:5b:c1: 68:8e:b8:67:12:72:a0:51:be:fb:6d:07:92:48:9d: 40:31:94:6e:78:91:bb:80:c0:f1:5e:20:de:9a:55: 92:51:b0:af:a2:db:78:f9:3e:85:02:8f:08:cd:57: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:8A:80:8F:21:FD:CE:B4:3E:E8:50:0B:0F:44:20:1E:5C:29:A7 X509v3 Authority Key Identifier: keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:12:45:fe:f4:3e:93:8b:6d:34:9a:33:c8:c9:97:5e:de:04: d8:73:40:68:df:db:3f:8e:c4:7e:ae:cb:c6:ca:10:18:5c:cc: 73:39:6f:4e:a5:4f:0f:ff:25:24:3c:8c:3e:35:fc:73:3f:77: f2:90:6e:56:c5:79:f0:37:22:a0:37:b0:8f:df:4e:8f:09:98: 3e:2d:de:27:09:15:4a:21:80:95:63:74:82:c0:46:37:40:28: b1:ec:57:03:2d:b3:c7:e5:80:f7:f9:a8:2d:b5:ba:6a:24:d5: 32:53:bb:41:74:04:48:e3:b8:e2:8e:04:ee:cf:c3:da:30:e2: 0e:ed:7e:5b:98:e7:5a:81:5f:b5:2a:32:fd:9e:24:ef:30:10: d7:ce:f8:c0:8d:8f:6f:9e:68:82:4b:12:b8:3d:9e:2c:32:33: 8a:10:78:3d:8f:cc:cc:35:95:16:46:35:fe:e5:82:f5:ff:e6: 08:6c:0e:14:fb:1d:93:df:0f:b2:01:46:7b:d3:06:39:1f:2d: 39:5e:a4:ec:78:8b:93:59:a7:86:88:dc:a4:b4:cd:4a:2d:e6: 8a:12:ff:dc:88:54:7a:0a:19:d0:1f:23:ba:cc:cf:4e:5d:a1: ed:47:76:18:92:33:99:cd:70:cc:bf:d3:2b:45:88:d7:dc:d8: fb:74:f7:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy MjdGNEU4N0IwHhcNMjUwODIyMTY0MTE3WhcNMjUwODI5MTY0MTE3WjAYMRYwFAYD VQQDEw02OGE4OWRhZC05M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy94n5xuQXkXgebTigbl4StU36ikHxdaw1+rits8K+GjTwm8ByzeRh1Dw+6Ce OvcKRooeuxEbCXryHeGzWJDTj8H7PgGX2V/w3/R/1Vn70H4yY3o9DUp6XT41rKQr RO7NGY5NjiqBSDLR9czczUoUZBdwsZkVrI8ufvi+CZWJvkiR7tO8SXlWryewn9vb tFG7iXlUH+P5GJWycSnELvd269AVglvZszNylqkZGmW70LBaXWvs8F1Z6Xv+KRzt WTDotve8Anb5qXpiZZlRALFYW8FojrhnEnKgUb77bQeSSJ1AMZRueJG7gMDxXiDe mlWSUbCvott4+T6FAo8IzVfB6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdyioCP If3OtD7oUAsPRCAeXCmnMB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1 RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5 aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeEkX+9D6Ti200mjPIyZde3gTYc0Bo39s/jsR+rsvGyhAYXMxzOW9O pU8P/yUkPIw+NfxzP3fykG5WxXnwNyKgN7CP306PCZg+Ld4nCRVKIYCVY3SCwEY3 QCix7FcDLbPH5YD3+agttbpqJNUyU7tBdARI47jijgTuz8PaMOIO7X5bmOdagV+1 KjL9niTvMBDXzvjAjY9vnmiCSxK4PZ4sMjOKEHg9j8zMNZUWRjX+5YL1/+YIbA4U +x2T3w+yAUZ70wY5Hy05XqTseIuTWaeGiNyktM1KLeaKEv/ciFR6ChnQHyO6zM9O XaHtR3YYkjOZzXDMv9MrRYjX3Nj7dPfB -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:52 2025 by rpki-client