$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: YZVxeSwrUK5NnjddpmVGCohO47Okt5a6aap0qWEhzL8= Subject key identifier: 34:9C:39:47:DE:C3:56:4C:7E:0A:57:59:3D:2A:1D:41:0F:97:6B:FC Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 1710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 1706 Signing time: Fri 22 Aug 2025 16:44:57 +0000 Manifest this update: Fri 22 Aug 2025 16:44:56 +0000 Manifest next update: Fri 29 Aug 2025 16:44:56 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: hK8NYnt6X3XFqUSF+EA63yujsuTJ1p7TsHsrby8n3y4=) 2: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (hash: 995PegsL3ZUwg9uvRMBU899Zay98EopTGO6qSEJefks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5904 (0x1710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Aug 22 16:44:56 2025 GMT Not After : Aug 29 16:44:56 2025 GMT Subject: CN=68a89e88-a374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:4d:b3:47:d5:5b:b7:9b:8e:0a:41:43:ec: 1b:ce:93:fe:69:63:08:04:4b:09:9a:13:ae:9a:e1: 5a:10:d0:22:e0:8f:9f:d3:f3:9c:05:ba:0c:d4:51: 5b:0b:9a:3b:7a:0b:03:e5:49:76:7e:c4:9f:c1:a3: cb:65:4c:c1:ea:98:6d:5b:ce:50:0d:1d:34:28:99: f2:2a:3f:62:52:fe:42:e5:0c:b5:d0:41:dd:5d:47: 27:e9:16:35:de:18:42:c4:1d:45:ea:16:9c:4a:a1: 98:24:99:58:fb:69:d0:fa:8d:44:a3:26:d7:8d:ca: 25:60:0a:05:a3:8b:9e:c6:91:d3:8a:6f:ad:ba:8b: 04:e7:c5:28:39:af:a3:18:38:32:8e:8f:4b:c2:f2: e7:f9:c5:68:80:d4:13:ad:fb:7b:68:16:7a:ab:d8: 97:eb:0f:36:19:2c:56:99:6d:8a:f8:76:53:f3:58: 71:41:b3:5e:99:a4:f9:39:8c:f5:80:bf:d9:30:dc: b2:ce:e6:dc:0b:07:60:4d:a0:7b:d2:3e:49:14:0e: 9b:34:e3:21:48:02:c8:28:7f:5c:b7:b1:22:08:14: 74:ee:53:f1:81:60:9f:7c:ef:4a:e6:64:f7:ff:11: 1b:83:f6:e5:a1:50:a9:c3:ab:b6:76:d5:cd:68:26: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9C:39:47:DE:C3:56:4C:7E:0A:57:59:3D:2A:1D:41:0F:97:6B:FC X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:14:40:60:a8:8f:80:a0:f9:96:3b:86:9e:f2:a8:95:43:0f: ba:79:5a:dd:04:11:37:7c:0a:de:ca:42:d9:a8:82:3d:62:37: 58:e2:9f:4c:b3:66:ba:e7:b6:20:95:79:c5:7b:d3:8c:7d:21: 70:6d:ab:c2:5c:78:e4:03:42:34:e6:26:64:6f:9d:31:a2:e4: 19:c0:27:d0:8e:6d:09:89:50:c3:39:4f:08:41:f6:80:e3:98: 5c:97:92:98:b0:d9:3e:37:b1:1f:5a:3b:b4:fd:8e:98:fb:81: 3c:1f:6b:fd:03:99:90:34:1a:14:b1:83:50:d7:6a:fd:c1:b5: 67:8f:9d:e5:ea:a5:f5:d5:1a:d2:15:e1:5b:b1:4d:8c:c2:ce: 96:f2:d3:33:15:48:92:8c:45:ee:f1:1f:b9:12:ff:34:c0:87: b9:99:01:ae:bb:a2:e4:8a:a2:59:09:10:86:7e:79:f9:08:1b: 12:cb:b1:36:0e:62:e7:9d:64:79:d4:46:85:e8:16:c9:ee:43: 6c:3d:8e:45:11:bb:f7:66:0b:64:21:94:31:7d:6c:12:f1:3d: d7:88:d9:7f:a1:5b:fa:ba:e5:1c:64:14:1c:38:61:bb:bf:03: 3b:db:0f:67:d5:b3:9a:98:bb:84:7d:3e:dd:ef:4b:df:c6:e4: b1:02:8e:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUwODIyMTY0NDU2WhcNMjUwODI5MTY0NDU2WjAYMRYwFAYD VQQDEw02OGE4OWU4OC1hMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4x1Ns0fVW7ebjgpBQ+wbzpP+aWMIBEsJmhOumuFaENAi4I+f0/OcBboM1FFb C5o7egsD5Ul2fsSfwaPLZUzB6phtW85QDR00KJnyKj9iUv5C5Qy10EHdXUcn6RY1 3hhCxB1F6hacSqGYJJlY+2nQ+o1EoybXjcolYAoFo4uexpHTim+tuosE58UoOa+j GDgyjo9LwvLn+cVogNQTrft7aBZ6q9iX6w82GSxWmW2K+HZT81hxQbNemaT5OYz1 gL/ZMNyyzubcCwdgTaB70j5JFA6bNOMhSALIKH9ct7EiCBR07lPxgWCffO9K5mT3 /xEbg/bloVCpw6u2dtXNaCauFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDScOUfe w1ZMfgpXWT0qHUEPl2v8MB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANFEBgqI+AoPmWO4ae8qiVQw+6eVrdBBE3fAreykLZqII9YjdY4p9M s2a657YglXnFe9OMfSFwbavCXHjkA0I05iZkb50xouQZwCfQjm0JiVDDOU8IQfaA 45hcl5KYsNk+N7EfWju0/Y6Y+4E8H2v9A5mQNBoUsYNQ12r9wbVnj53l6qX11RrS FeFbsU2Mws6W8tMzFUiSjEXu8R+5Ev80wIe5mQGuu6LkiqJZCRCGfnn5CBsSy7E2 DmLnnWR51EaF6BbJ7kNsPY5FEbv3ZgtkIZQxfWwS8T3XiNl/oVv6uuUcZBQcOGG7 vwM72w9n1bOamLuEfT7d70vfxuSxAo6E -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:17 2025 by rpki-client