$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: XRlyEMii3G2YTqQgAlv5fz2sHQub2wDZg4drdpteWUY= Subject key identifier: C2:7B:1B:BA:39:F4:8A:1C:1B:EF:2F:A3:A7:CE:D3:B7:78:8D:DB:84 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 0167 Signing time: Sat 23 Aug 2025 04:10:00 +0000 Manifest this update: Sat 23 Aug 2025 04:09:59 +0000 Manifest next update: Sat 30 Aug 2025 04:09:59 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: 5ZolNEn4o/s/ytJ2g+NyQrKq1NMx65U1g/G5+yq7Sqk=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Aug 23 04:09:59 2025 GMT Not After : Aug 30 04:09:59 2025 GMT Subject: CN=68a93f17-c847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:8b:87:0d:96:ec:9e:0d:e6:0e:ca:63:22: 8b:1c:76:5d:60:38:1a:19:66:f0:8d:a6:a1:38:5f: ac:66:ee:e5:6e:bb:86:bd:5c:35:ef:6a:c3:b9:54: 23:5e:61:9c:6b:53:5d:61:59:ac:58:40:fc:a9:a7: 73:92:df:b5:f9:a4:44:97:7f:83:e6:8e:c2:de:73: 07:4c:1b:04:0f:f5:bb:83:1a:f7:bb:68:c5:20:aa: db:a4:c7:64:a0:79:b0:fc:6b:3e:0d:d0:25:ce:ce: c5:8e:00:8f:c8:51:02:d3:2c:6d:a4:9c:8d:29:d6: b4:21:3b:0c:86:38:61:49:4a:7e:64:98:8c:4e:d3: 3a:d9:eb:6d:aa:a9:72:7f:0e:d8:8f:6b:b4:d0:b5: c8:be:c1:96:48:29:f6:67:b7:f3:ad:dc:51:19:e2: d5:37:da:3b:e9:14:df:fd:2b:de:e7:05:c7:19:1e: ef:11:b7:1e:37:ba:00:c6:51:ef:fb:1b:f0:88:40: b1:2a:48:07:a2:fe:bc:78:92:b7:b8:ef:d3:62:5e: e2:c0:26:4c:24:e9:07:e3:14:b1:0b:c2:93:de:70: f6:58:64:e9:8d:0a:6c:a4:00:99:eb:3a:5b:52:f8: 20:8d:a5:23:aa:aa:73:27:d5:db:e8:ee:46:84:50: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7B:1B:BA:39:F4:8A:1C:1B:EF:2F:A3:A7:CE:D3:B7:78:8D:DB:84 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:33:33:dd:28:a3:2c:0c:a2:b6:16:ab:d6:0b:58:bb:5e:9b: 9f:37:09:e5:f1:da:01:93:85:43:da:d5:83:71:be:80:f6:6f: 47:f0:99:53:34:c7:46:93:dd:42:c2:84:bf:b6:5b:40:b1:07: 8c:f2:f3:fd:35:98:ae:1e:2b:3e:11:d6:ac:44:95:23:95:8e: 89:3b:0f:76:c4:df:8e:af:3f:6a:32:9c:70:de:81:67:cf:79: 50:ef:9c:fd:82:75:6d:9c:3b:b6:69:41:dd:0c:f1:fb:3e:43: ea:38:ec:e7:8f:e1:62:83:b5:f2:9d:d9:20:3d:2d:a1:fb:c1: 27:78:86:db:68:49:63:0b:72:23:d5:12:72:12:15:b6:69:40: db:b1:c8:30:99:08:ef:73:b5:27:c6:5d:9c:2b:93:fc:c3:a0: a8:ee:9d:fe:95:ca:1d:8a:b2:44:95:6c:54:c1:66:7e:6a:bd: ea:5a:2c:58:f4:54:3d:3e:a5:1e:68:5d:d2:7e:1e:ba:d6:d2: bf:a8:19:bf:e2:d5:14:ff:35:d1:08:90:5b:74:37:00:af:16: b7:a6:c4:87:0e:7c:9e:c2:7a:bd:6c:9c:4e:0c:4d:df:68:72: d9:dc:c6:96:23:46:ba:e1:b0:90:40:d8:5a:44:87:c5:35:f0: ab:1e:72:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUwODIzMDQwOTU5WhcNMjUwODMwMDQwOTU5WjAYMRYwFAYD VQQDEw02OGE5M2YxNy1jODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIeLhw2W7J4N5g7KYyKLHHZdYDgaGWbwjaahOF+sZu7lbruGvVw172rDuVQj XmGca1NdYVmsWED8qadzkt+1+aREl3+D5o7C3nMHTBsED/W7gxr3u2jFIKrbpMdk oHmw/Gs+DdAlzs7FjgCPyFEC0yxtpJyNKda0ITsMhjhhSUp+ZJiMTtM62ettqqly fw7Yj2u00LXIvsGWSCn2Z7fzrdxRGeLVN9o76RTf/Sve5wXHGR7vEbceN7oAxlHv +xvwiECxKkgHov68eJK3uO/TYl7iwCZMJOkH4xSxC8KT3nD2WGTpjQpspACZ6zpb UvggjaUjqqpzJ9Xb6O5GhFCPFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ7G7o5 9IocG+8vo6fO07d4jduEMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCMzPdKKMsDKK2FqvWC1i7XpufNwnl8doBk4VD2tWDcb6A9m9H8JlT NMdGk91CwoS/tltAsQeM8vP9NZiuHis+EdasRJUjlY6JOw92xN+Orz9qMpxw3oFn z3lQ75z9gnVtnDu2aUHdDPH7PkPqOOznj+Fig7XyndkgPS2h+8EneIbbaEljC3Ij 1RJyEhW2aUDbscgwmQjvc7Unxl2cK5P8w6Co7p3+lcodirJElWxUwWZ+ar3qWixY 9FQ9PqUeaF3Sfh661tK/qBm/4tUU/zXRCJBbdDcArxa3psSHDnyewnq9bJxODE3f aHLZ3MaWI0a64bCQQNhaRIfFNfCrHnJ2 -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:56 2025 by rpki-client