$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: dTgbjQUv4Fryvp2HdFifQ8dDM7srPZGYS/AyMGxg7TQ= Subject key identifier: 17:37:FE:74:E4:84:AC:49:FE:62:84:D5:B4:C1:5F:43:58:C9:3F:30 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0B3F Signing time: Fri 22 Aug 2025 19:24:24 +0000 Manifest this update: Fri 22 Aug 2025 19:24:23 +0000 Manifest next update: Fri 29 Aug 2025 19:24:23 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: FQ91bQnxBZFfccFcah3ki/tf0cdp6igOMRa2Ar31QGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Aug 22 19:24:23 2025 GMT Not After : Aug 29 19:24:23 2025 GMT Subject: CN=68a8c3e7-c114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:ce:92:90:2b:ce:5b:27:16:16:c4:ef:49: 46:b6:a2:3d:e3:88:bc:28:b1:4e:00:2b:b1:ea:bc: 88:3f:11:42:a0:e9:de:1d:6f:63:fd:b1:a6:be:fb: 85:44:6a:d6:92:55:32:65:76:b1:b7:6c:43:13:68: 62:5d:af:9a:77:62:30:d1:2b:ef:f2:27:da:7d:10: b6:9b:b0:ee:e5:e0:29:c2:62:5f:ec:21:0b:37:86: 87:97:b9:81:1b:b3:7b:eb:19:3f:0b:8b:1e:80:7e: 84:00:f8:c5:aa:cf:3d:e5:63:70:cb:1a:49:f1:71: 0a:5c:6e:9b:19:35:98:42:54:db:80:47:e4:17:6a: 8f:a7:06:e7:af:9b:09:6d:8e:ad:5f:01:52:3e:24: 13:aa:83:8d:d7:20:fb:12:19:b5:49:da:17:f5:e9: bc:1d:52:08:cb:5a:53:c3:7f:da:d4:38:38:ff:f9: 09:ca:a8:ea:eb:17:c3:b9:0d:1d:e7:5a:54:3d:27: aa:2d:9a:43:8e:b8:fa:5c:8b:6e:d1:05:3c:67:29: b5:8e:b0:6c:13:24:a5:b3:69:77:9a:3f:88:c6:21: 14:07:ba:ca:e0:15:2b:d3:c7:be:41:23:f5:0a:4c: 40:36:ff:84:91:c6:fe:de:c4:2d:ea:d6:3f:28:4b: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:37:FE:74:E4:84:AC:49:FE:62:84:D5:B4:C1:5F:43:58:C9:3F:30 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:17:f2:9e:9e:31:a4:4c:fc:5b:ce:34:e3:95:38:4e:6b:9d: de:6d:b8:11:32:bb:4c:69:3f:5c:b1:69:51:24:1e:46:a3:ff: df:63:0f:f5:44:0a:23:aa:f6:38:30:32:c9:c1:db:a8:66:09: f1:91:1c:26:53:b8:11:01:e4:3f:e0:71:16:25:8d:ca:7e:74: 4b:1a:64:06:a1:27:01:36:0e:d2:12:6f:22:40:a7:c4:56:6b: 83:d0:d4:c7:bb:d5:6a:7f:09:5f:2f:91:67:03:2d:7d:69:fe: 1b:9f:4d:f5:da:cc:87:7a:07:95:8c:e0:04:a4:6b:fe:59:d6: 6a:3f:b0:71:72:56:b9:96:b1:5b:e4:40:2c:3d:55:ab:be:5a: be:b9:36:d1:a2:f4:27:4b:17:55:7f:73:ea:27:90:01:17:fd: e7:0a:52:eb:4d:19:15:67:64:96:f8:7b:76:f2:21:4b:fc:66: 76:2b:00:f8:cb:bf:b1:1a:13:99:50:af:2f:22:64:06:da:f0: 6a:7d:92:a5:2b:74:7f:13:b2:52:ce:e6:72:89:e1:df:32:9f: 23:eb:17:88:10:0c:f2:06:97:ac:46:4d:1b:c3:94:0c:93:70: a2:db:b8:a9:3d:c2:66:c1:33:df:61:42:e3:41:cd:3f:fb:6c: 6f:76:64:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUwODIyMTkyNDIzWhcNMjUwODI5MTkyNDIzWjAYMRYwFAYD VQQDEw02OGE4YzNlNy1jMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lXOkpArzlsnFhbE70lGtqI944i8KLFOACux6ryIPxFCoOneHW9j/bGmvvuF RGrWklUyZXaxt2xDE2hiXa+ad2Iw0Svv8ifafRC2m7Du5eApwmJf7CELN4aHl7mB G7N76xk/C4segH6EAPjFqs895WNwyxpJ8XEKXG6bGTWYQlTbgEfkF2qPpwbnr5sJ bY6tXwFSPiQTqoON1yD7Ehm1SdoX9em8HVIIy1pTw3/a1Dg4//kJyqjq6xfDuQ0d 51pUPSeqLZpDjrj6XItu0QU8Zym1jrBsEySls2l3mj+IxiEUB7rK4BUr08e+QSP1 CkxANv+Ekcb+3sQt6tY/KEvPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc3/nTk hKxJ/mKE1bTBX0NYyT8wMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3F/KenjGkTPxbzjTjlThOa53ebbgRMrtMaT9csWlRJB5Go//fYw/1 RAojqvY4MDLJwduoZgnxkRwmU7gRAeQ/4HEWJY3KfnRLGmQGoScBNg7SEm8iQKfE VmuD0NTHu9VqfwlfL5FnAy19af4bn0312syHegeVjOAEpGv+WdZqP7Bxcla5lrFb 5EAsPVWrvlq+uTbRovQnSxdVf3PqJ5ABF/3nClLrTRkVZ2SW+Ht28iFL/GZ2KwD4 y7+xGhOZUK8vImQG2vBqfZKlK3R/E7JSzuZyieHfMp8j6xeIEAzyBpesRk0bw5QM k3Ci27ipPcJmwTPfYULjQc0/+2xvdmQi -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:01 2025 by rpki-client