$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: WmEztPheMRUFg+/vk6TtraDGLqjjdCKZNh05EQsVAWQ= Subject key identifier: 9F:1D:40:B6:4E:37:BE:E2:2E:13:B9:E5:5B:88:D5:D4:4B:03:C3:E1 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 04BE Signing time: Sat 23 Aug 2025 00:05:08 +0000 Manifest this update: Sat 23 Aug 2025 00:05:07 +0000 Manifest next update: Sat 30 Aug 2025 00:05:07 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: FGm41yPTWXzxiWYh2Q2gg8k4x3iweZQMA3XplebkSGY=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: Aug 23 00:05:07 2025 GMT Not After : Aug 30 00:05:07 2025 GMT Subject: CN=68a905b3-2d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:cd:11:d8:62:13:4f:59:d2:10:45:1a:bf: e4:a0:79:01:37:2e:ab:4a:16:43:07:2b:cd:72:52: d6:7c:7a:78:ed:fa:04:ca:dc:a9:0d:ca:fa:37:66: d8:b2:7f:5b:0e:16:bd:5f:ad:ac:3a:ab:01:1a:b6: 15:3a:b7:cc:a8:94:8f:a2:dc:c1:51:4f:84:de:5a: e6:4d:e4:a4:eb:9d:bf:4d:32:3c:81:80:e1:0f:3e: 60:c2:83:30:1a:cb:55:9b:06:45:3a:1a:79:d5:cb: 5e:cf:62:c0:de:83:51:57:d0:c5:c5:18:07:c1:bf: b9:8e:26:5a:77:f7:a1:77:9d:60:28:1b:b4:af:70: 68:83:da:73:71:31:bb:fe:85:37:92:65:63:89:56: 69:e0:61:0c:56:72:44:1f:44:23:99:08:f5:0d:a9: 61:b1:e8:6b:2b:d9:b3:cb:9a:26:72:27:ae:07:98: 43:bc:cb:b3:38:b1:ba:45:c5:7c:9f:d6:a2:bc:13: f1:a5:04:f9:c1:b2:56:59:65:2c:69:1f:9b:97:5f: 4b:db:c7:cc:a6:ff:e4:41:7a:98:30:e9:da:32:ed: ea:a7:8c:1b:69:37:e0:02:ae:22:6f:26:24:63:9e: 33:70:bc:28:f9:d3:09:99:44:1d:18:bb:1b:01:61: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:40:B6:4E:37:BE:E2:2E:13:B9:E5:5B:88:D5:D4:4B:03:C3:E1 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ba:18:ba:34:2b:ed:e5:3e:c1:1d:14:be:4a:ae:41:f9:69: 3e:82:6a:a7:c4:f5:c6:7b:df:d8:86:8f:a5:86:17:a8:3c:92: 57:ba:85:74:ac:7b:a0:10:9d:87:00:d7:39:20:4b:84:83:bb: 15:00:65:16:9c:60:83:d2:74:a2:4c:6e:23:c1:7f:0b:55:06: f0:8f:80:68:8a:31:93:29:11:6c:bb:c9:a7:c3:2b:6d:f5:45: 37:63:7b:73:74:56:1b:51:30:ca:db:8d:94:de:cc:3d:91:19: 6e:6f:09:23:8f:b2:8e:83:eb:d0:2d:c7:15:8f:8d:df:a0:0b: 7b:53:4a:fc:65:f6:f8:b8:35:e4:8c:11:86:6e:03:34:70:7f: 91:e5:1f:a8:69:d7:96:6b:88:8f:f3:83:a1:f3:e8:a8:d8:b0: 50:4c:35:42:41:77:83:a2:fa:ab:e4:6d:fa:59:e6:1b:e5:9a: f2:0e:54:64:d4:98:5c:c0:bc:23:e8:b8:f6:f0:f5:de:1b:a7: 87:55:3d:33:da:ba:71:00:37:9d:55:53:8d:14:28:86:cc:46: b1:08:ee:58:64:cb:13:16:ae:20:6e:52:17:f2:bc:89:bf:b6: 2f:48:01:a7:e7:c8:f5:3b:76:be:a1:d9:fb:bf:46:b8:66:4b: a7:41:f2:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjUwODIzMDAwNTA3WhcNMjUwODMwMDAwNTA3WjAYMRYwFAYD VQQDEw02OGE5MDViMy0yZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu47NEdhiE09Z0hBFGr/koHkBNy6rShZDByvNclLWfHp47foEytypDcr6N2bY sn9bDha9X62sOqsBGrYVOrfMqJSPotzBUU+E3lrmTeSk652/TTI8gYDhDz5gwoMw GstVmwZFOhp51ctez2LA3oNRV9DFxRgHwb+5jiZad/ehd51gKBu0r3Bog9pzcTG7 /oU3kmVjiVZp4GEMVnJEH0QjmQj1DalhsehrK9mzy5omcieuB5hDvMuzOLG6RcV8 n9aivBPxpQT5wbJWWWUsaR+bl19L28fMpv/kQXqYMOnaMu3qp4wbaTfgAq4ibyYk Y54zcLwo+dMJmUQdGLsbAWHYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8dQLZO N77iLhO55VuI1dRLA8PhMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+uhi6NCvt5T7BHRS+Sq5B+Wk+gmqnxPXGe9/Yho+lhheoPJJXuoV0 rHugEJ2HANc5IEuEg7sVAGUWnGCD0nSiTG4jwX8LVQbwj4BoijGTKRFsu8mnwytt 9UU3Y3tzdFYbUTDK242U3sw9kRlubwkjj7KOg+vQLccVj43foAt7U0r8Zfb4uDXk jBGGbgM0cH+R5R+oadeWa4iP84Oh8+io2LBQTDVCQXeDovqr5G36WeYb5ZryDlRk 1JhcwLwj6Lj28PXeG6eHVT0z2rpxADedVVONFCiGzEaxCO5YZMsTFq4gblIX8ryJ v7YvSAGn58j1O3a+odn7v0a4ZkunQfLl -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:41 2025 by rpki-client