$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json) Hash identifier: uj2xKqxGZRhp1BPzwiGijWpDverV2w/llqeXQ2NarCc= Subject key identifier: 11:AC:CD:35:1C:F3:9C:EA:3D:C6:DF:35:94:F5:32:45:AE:90:EF:ED Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft Manifest number: 01B7 Signing time: Sat 23 Aug 2025 03:19:01 +0000 Manifest this update: Sat 23 Aug 2025 03:19:00 +0000 Manifest next update: Sat 30 Aug 2025 03:19:00 +0000 Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: RAjBeJ0nh8afZP3JZJ3A/G98cGGnCsALvvPLBEc1djc=) 2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: y2CRuE70MquHCIr0B6b6CP/AdGdh0+ETsyjf8zknJdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: Aug 23 03:19:00 2025 GMT Not After : Aug 30 03:19:00 2025 GMT Subject: CN=68a93325-1ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:3e:15:16:4f:83:ce:7d:6e:fe:f0:23:92: f8:ba:5f:a8:cf:72:9c:cf:95:9a:5e:a8:36:d2:4c: 84:06:04:79:84:25:ae:3c:8f:cb:dd:2f:7a:09:6b: 85:e0:7f:64:91:c2:90:19:45:e0:60:4a:c3:c1:9a: b8:91:28:87:71:19:a9:d0:65:9a:bd:f7:ea:fa:57: 5e:c7:b0:ea:29:eb:2c:72:5a:ee:af:4c:f6:18:70: 84:a0:06:af:a6:3f:91:24:9b:38:db:ea:e6:3d:1e: de:61:b1:86:ae:3f:72:5f:f8:24:78:a6:25:de:b4: 2e:ae:f3:ce:65:f1:2e:f3:a7:44:43:a9:31:41:63: 76:3b:69:65:45:e5:a6:a2:bb:fc:6d:80:3d:8f:03: 15:87:df:90:22:2d:ba:08:16:c8:77:fb:5e:86:91: 75:c1:95:0a:e7:b0:9e:94:ec:1b:1d:da:1a:eb:54: f4:c3:15:b4:58:39:9b:db:44:41:d2:b2:4c:c4:bc: b4:dd:b4:91:f3:12:f1:e9:53:4e:65:d6:48:d0:b4: d0:ca:3d:c6:a5:ce:85:b8:0e:c7:55:62:b2:d0:8c: 91:92:8a:ce:bd:ca:8d:12:99:c6:12:1d:3c:a9:db: 2e:4c:2b:61:df:fd:6b:06:57:95:3d:8c:f5:60:d1: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AC:CD:35:1C:F3:9C:EA:3D:C6:DF:35:94:F5:32:45:AE:90:EF:ED X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:47:83:d6:b3:3c:8f:e3:80:e8:5d:64:2f:7e:f7:9a:a8:89: 14:77:44:62:6f:38:64:7f:7a:39:58:f0:de:2a:1a:da:8a:ff: 64:09:5b:73:b2:6a:ba:46:b8:c3:fe:ee:c2:6b:74:a7:ac:0b: 17:da:e8:5e:99:fe:e0:61:e6:39:34:29:5a:c5:51:54:24:af: 0d:ac:0b:f6:cc:01:20:af:bd:17:92:10:1d:cb:7a:60:ec:e4: 7c:a6:78:9c:ae:8c:b0:05:8f:1d:2d:93:fa:ef:bb:8b:31:ca: d5:49:a7:00:0f:f1:cc:6a:97:1d:6f:0d:99:f9:86:71:18:5f: dd:f2:98:01:d4:45:da:de:5c:95:39:03:d0:d0:c4:01:cc:ab: a8:70:f8:ed:41:24:d3:87:6f:59:89:53:99:13:aa:a9:f2:8d: b6:38:0d:ad:b7:d5:d8:d3:b3:b1:6e:68:39:10:ba:72:e2:1b: 0a:36:db:f0:37:e6:1a:49:5b:c8:21:41:9e:93:17:1a:5a:83: 6b:36:ac:b2:cc:63:4c:1f:b5:5d:ae:bc:34:b6:a8:20:3b:f3: 90:3d:69:9e:2b:f7:28:bd:46:88:5f:c7:c4:94:a9:c7:08:b5: c4:d7:b7:79:35:b7:25:63:96:e6:7d:59:f9:b8:b5:e2:c1:3c: 20:e4:18:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFMjQxMTAvBgNVBAUTKDI0MjIzRDBDN0QxMDFEQjdBRDdFM0NCOEREQjE3MDYy OTM2NUNBRUUwHhcNMjUwODIzMDMxOTAwWhcNMjUwODMwMDMxOTAwWjAYMRYwFAYD VQQDEw02OGE5MzMyNS0xY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGQ+FRZPg859bv7wI5L4ul+oz3Kcz5WaXqg20kyEBgR5hCWuPI/L3S96CWuF 4H9kkcKQGUXgYErDwZq4kSiHcRmp0GWavffq+ldex7DqKessclrur0z2GHCEoAav pj+RJJs42+rmPR7eYbGGrj9yX/gkeKYl3rQurvPOZfEu86dEQ6kxQWN2O2llReWm orv8bYA9jwMVh9+QIi26CBbId/tehpF1wZUK57CelOwbHdoa61T0wxW0WDmb20RB 0rJMxLy03bSR8xLx6VNOZdZI0LTQyj3Gpc6FuA7HVWKy0IyRkorOvcqNEpnGEh08 qdsuTCth3/1rBleVPYz1YNHfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGszTUc 85zqPcbfNZT1MkWukO/tMB8GA1UdIwQYMBaAFCQiPQx9EB23rX48uN2xcGKTZcru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUUyNC9GMkY2NzVGRUYz RkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhiZXRmank0M2JGd1lwTmx5 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhi ZXRmank0M2JGd1lwTmx5dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYR4PWszyP44DoXWQvfveaqIkUd0Ribzhkf3o5WPDeKhraiv9kCVtz smq6RrjD/u7Ca3SnrAsX2uhemf7gYeY5NClaxVFUJK8NrAv2zAEgr70XkhAdy3pg 7OR8pnicroywBY8dLZP677uLMcrVSacAD/HMapcdbw2Z+YZxGF/d8pgB1EXa3lyV OQPQ0MQBzKuocPjtQSTTh29ZiVOZE6qp8o22OA2tt9XY07Oxbmg5ELpy4hsKNtvw N+YaSVvIIUGekxcaWoNrNqyyzGNMH7Vdrrw0tqggO/OQPWmeK/covUaIX8fElKnH CLXE17d5NbclY5bmfVn5uLXiwTwg5Bi0 -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:24 2025 by rpki-client