$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: QrRcdi+GD3yAQwf2iz4jKOa8mAW8WTNn95rfDlPFKbg= Subject key identifier: A4:CA:C8:52:37:F7:71:59:DB:C2:A9:2D:66:41:A3:09:5A:9F:F8:C0 Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 04DD Signing time: Fri 22 Aug 2025 23:59:23 +0000 Manifest this update: Fri 22 Aug 2025 23:59:22 +0000 Manifest next update: Fri 29 Aug 2025 23:59:22 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: qNRh0hfbDjb3psIKpYKbmfJhoBuAQbQEfmz11w8qlk8=) 2: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: tVHP7vE09ih639kPT+zHjlRDQm6GDfHkbd/XlPHcK/0=) 3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: 8OgnHoASF/UsFAo8WcuH4tg18eHyDNchCEmDTI3RcYo=) 4: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: Egnw+r9qbejML3EvsCqcWRH67VrUmMQV/ILZahM9IPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Aug 22 23:59:22 2025 GMT Not After : Aug 29 23:59:22 2025 GMT Subject: CN=68a9045b-02da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:23:75:ad:44:df:24:ee:90:a7:e2:5c:62: 17:b8:be:7b:4d:76:63:72:aa:ad:77:f7:6f:5f:bd: 2e:12:00:80:70:5c:70:9a:15:50:ad:d4:5e:b3:56: b7:53:bf:34:03:6d:df:ab:62:02:52:03:15:8b:cd: 07:83:92:e4:d1:27:24:e2:68:af:1e:a6:41:6b:d6: 54:19:22:4a:bd:b7:ce:8d:f4:29:5e:7c:6a:62:ff: 44:19:9c:a2:e0:c9:c0:96:81:77:20:56:ee:e9:cc: 95:1a:21:3d:b9:5e:9a:e2:76:3e:44:d0:83:31:37: c1:e5:13:57:c0:d7:2a:e8:2c:e1:04:7e:7b:4e:18: 02:7a:f0:d9:ff:43:b1:01:dd:85:b7:c0:8f:e7:e8: d2:4a:df:56:e0:cc:92:b4:64:1a:78:ef:6d:62:7e: fd:d9:69:cf:1e:47:59:af:c2:09:29:a4:8f:84:ae: c0:0b:54:10:ad:21:f0:81:54:e0:bc:a9:09:7b:f6: 85:d7:ef:fb:c2:ef:0a:98:53:7b:dc:27:60:09:dd: d5:86:22:00:24:94:aa:69:bd:72:ea:d5:d5:22:2b: ce:55:c1:1d:cc:4e:d3:1b:9b:0b:a4:ff:d0:97:d6: a7:06:43:dd:40:1d:8a:ae:71:79:03:8c:f1:9e:9f: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CA:C8:52:37:F7:71:59:DB:C2:A9:2D:66:41:A3:09:5A:9F:F8:C0 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:be:ad:f8:e5:11:19:a4:dd:90:60:7b:7e:1a:20:1c:83:9e: b3:0e:07:7d:0d:15:8d:7e:64:f9:b0:e0:bc:82:10:60:de:60: d8:5e:58:da:f8:e8:17:c6:66:d4:bb:29:4f:18:a3:da:65:2b: e5:26:4f:75:7f:f4:47:38:22:ca:74:2a:86:9c:e1:d3:b0:9b: ab:f8:27:84:7e:f4:52:b3:d8:77:1b:af:94:8b:d7:3f:ca:2b: 1e:d6:f9:17:b8:e0:fd:1b:b9:22:7b:aa:86:13:21:25:93:0b: bc:57:c3:9d:38:78:13:f1:33:d4:c2:77:91:ee:e3:8c:00:0a: eb:a6:98:8f:b0:e2:d8:ae:29:26:bd:7b:00:c6:4b:2e:89:f4: 46:4e:3b:a9:f1:21:c6:cf:23:bd:ff:a1:8a:80:1e:84:f6:6b: f2:ee:a7:e4:f3:c6:69:99:59:2e:04:20:09:e8:ad:2d:9a:1d: f2:93:49:07:03:da:06:95:77:a9:4d:14:2f:e4:24:81:59:42: b4:5a:de:b4:dc:7f:a5:3a:12:e8:c2:9e:a4:e4:73:a1:4b:30: 48:22:bf:8d:a9:a8:95:db:8e:94:2d:c5:21:4c:9f:1b:b4:d3: db:44:c0:a6:b3:03:fa:6c:4d:ec:0d:2a:a0:61:24:70:32:43: 56:72:6a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjUwODIyMjM1OTIyWhcNMjUwODI5MjM1OTIyWjAYMRYwFAYD VQQDEw02OGE5MDQ1Yi0wMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSojda1E3yTukKfiXGIXuL57TXZjcqqtd/dvX70uEgCAcFxwmhVQrdRes1a3 U780A23fq2ICUgMVi80Hg5Lk0Sck4mivHqZBa9ZUGSJKvbfOjfQpXnxqYv9EGZyi 4MnAloF3IFbu6cyVGiE9uV6a4nY+RNCDMTfB5RNXwNcq6CzhBH57ThgCevDZ/0Ox Ad2Ft8CP5+jSSt9W4MyStGQaeO9tYn792WnPHkdZr8IJKaSPhK7AC1QQrSHwgVTg vKkJe/aF1+/7wu8KmFN73CdgCd3VhiIAJJSqab1y6tXVIivOVcEdzE7TG5sLpP/Q l9anBkPdQB2KrnF5A4zxnp9TGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTKyFI3 93FZ28KpLWZBowlan/jAMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALvq345REZpN2QYHt+GiAcg56zDgd9DRWNfmT5sOC8ghBg3mDYXlja +OgXxmbUuylPGKPaZSvlJk91f/RHOCLKdCqGnOHTsJur+CeEfvRSs9h3G6+Ui9c/ yise1vkXuOD9G7kie6qGEyElkwu8V8OdOHgT8TPUwneR7uOMAArrppiPsOLYrikm vXsAxksuifRGTjup8SHGzyO9/6GKgB6E9mvy7qfk88ZpmVkuBCAJ6K0tmh3yk0kH A9oGlXepTRQv5CSBWUK0Wt603H+lOhLowp6k5HOhSzBIIr+NqaiV246ULcUhTJ8b tNPbRMCmswP6bE3sDSqgYSRwMkNWcmo1 -----END CERTIFICATE-----Generated at Sat Aug 23 20:41:54 2025 by rpki-client