$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: L8LPwcbn5B7MPwXMP2iab7mvobGeytW0GuCviynohZs= Subject key identifier: ED:8D:F8:45:AB:35:2C:A4:64:D4:83:1F:A4:8A:F1:AF:67:ED:4D:50 Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 012E Signing time: Sat 23 Aug 2025 04:44:29 +0000 Manifest this update: Sat 23 Aug 2025 04:44:29 +0000 Manifest next update: Sat 30 Aug 2025 04:44:29 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: PkHINGhsyp4npZ78nyGvj59jPVkuWoOwf8g6Rhy1LZQ=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: Aug 23 04:44:29 2025 GMT Not After : Aug 30 04:44:29 2025 GMT Subject: CN=68a9472d-35ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:82:12:f4:99:b1:ab:91:b0:cd:8e:2b:47: 26:5c:cc:5e:ef:80:3c:13:d1:d3:be:af:1a:6d:3d: c5:7c:33:ca:15:e6:de:c6:87:68:8b:95:73:fd:e2: 53:d3:c9:1e:6d:c6:54:40:37:53:22:89:c6:75:5e: 0f:c6:21:ad:ee:da:3f:08:73:4a:74:48:6a:00:75: 3e:4e:b4:9a:d1:ef:de:48:59:ad:97:15:b8:b7:93: 82:65:f4:72:fc:d5:d2:1b:7e:b9:51:80:85:d5:28: e6:ee:ad:61:7f:c3:81:c2:00:9e:a9:ed:c7:c9:dd: e1:af:3c:62:66:df:4b:6e:e0:f2:b8:54:f7:dc:bd: d4:ea:97:e7:46:22:25:a8:2e:cc:05:af:01:f0:77: 4d:d2:b1:ef:3b:29:24:e8:93:42:65:7a:3a:6a:62: 17:c0:b7:49:ff:45:1c:8e:c3:89:6b:57:c2:02:3f: b5:67:ab:6e:7e:19:40:a4:3f:a7:da:02:93:e2:1e: 4c:f2:47:55:14:d8:35:4f:ee:8a:8b:5a:ce:af:30: cb:01:63:4f:60:c7:45:00:2d:2a:88:63:bc:7e:ab: c5:98:8e:d4:93:f6:2e:d2:41:c1:f4:93:f0:4f:50: e3:51:49:f2:24:d5:0e:9f:75:ab:b8:7e:6a:90:72: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8D:F8:45:AB:35:2C:A4:64:D4:83:1F:A4:8A:F1:AF:67:ED:4D:50 X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:58:e1:e0:33:50:a5:80:31:4b:33:81:c6:74:df:4c:ae:e9: 80:ed:0b:77:5f:ef:1b:75:04:00:60:8c:89:0b:4c:2b:e7:54: 95:6f:91:9e:c5:a2:33:11:4c:6a:80:19:35:7f:0d:23:1e:43: ea:91:0e:e0:bf:f4:6f:e5:67:58:ef:0d:f8:0d:03:83:a7:23: 63:8e:91:2e:9e:f1:89:f4:28:85:8c:64:4f:2f:0e:81:8a:88: 07:85:17:5b:3f:83:be:66:ad:a2:c4:fb:cd:7d:95:20:e4:b3: 67:ef:49:ac:f0:0c:a8:7d:e7:4e:d5:02:a2:10:e9:99:ff:94: d4:bf:b6:bb:8e:51:b9:24:14:0c:9e:2b:2e:79:9d:c2:b3:70: 81:9a:d2:32:6b:62:61:9d:30:a1:60:f2:c9:31:3b:8a:91:0e: eb:88:75:91:e7:11:70:cb:f5:de:ad:e0:20:81:81:43:4a:67: c6:a9:ae:6f:73:4c:90:f8:df:6c:c1:a6:1a:56:5c:b8:c7:bd: 65:78:07:dc:30:d4:c8:74:8b:bd:83:15:8f:61:dd:8e:38:ea: c6:3c:fe:b3:f4:7e:16:6e:5a:f2:dc:61:ab:54:4c:a0:cd:f3: e7:0d:06:fb:52:8a:94:2c:1d:d3:10:b6:89:34:ee:d0:89:e6: c8:6c:21:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjUwODIzMDQ0NDI5WhcNMjUwODMwMDQ0NDI5WjAYMRYwFAYD VQQDEw02OGE5NDcyZC0zNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLGCEvSZsauRsM2OK0cmXMxe74A8E9HTvq8abT3FfDPKFebexodoi5Vz/eJT 08kebcZUQDdTIonGdV4PxiGt7to/CHNKdEhqAHU+TrSa0e/eSFmtlxW4t5OCZfRy /NXSG365UYCF1Sjm7q1hf8OBwgCeqe3Hyd3hrzxiZt9LbuDyuFT33L3U6pfnRiIl qC7MBa8B8HdN0rHvOykk6JNCZXo6amIXwLdJ/0UcjsOJa1fCAj+1Z6tufhlApD+n 2gKT4h5M8kdVFNg1T+6Ki1rOrzDLAWNPYMdFAC0qiGO8fqvFmI7Uk/Yu0kHB9JPw T1DjUUnyJNUOn3WruH5qkHIhdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2N+EWr NSykZNSDH6SK8a9n7U1QMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9WOHgM1ClgDFLM4HGdN9MrumA7Qt3X+8bdQQAYIyJC0wr51SVb5Ge xaIzEUxqgBk1fw0jHkPqkQ7gv/Rv5WdY7w34DQODpyNjjpEunvGJ9CiFjGRPLw6B iogHhRdbP4O+Zq2ixPvNfZUg5LNn70ms8AyofedO1QKiEOmZ/5TUv7a7jlG5JBQM nisueZ3Cs3CBmtIya2JhnTChYPLJMTuKkQ7riHWR5xFwy/XereAggYFDSmfGqa5v c0yQ+N9swaYaVly4x71leAfcMNTIdIu9gxWPYd2OOOrGPP6z9H4Wblry3GGrVEyg zfPnDQb7UoqULB3TELaJNO7QiebIbCGi -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:21 2025 by rpki-client