$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: oqTet9HOkEUBpwmFUdkQpA0ehG2UorxHLvKNCn+FhTU= Subject key identifier: 74:7A:9E:D2:D7:B1:A6:24:93:0C:53:AF:05:AD:11:20:99:E2:D9:50 Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 02AA Signing time: Sat 23 Aug 2025 01:45:34 +0000 Manifest this update: Sat 23 Aug 2025 01:45:34 +0000 Manifest next update: Sat 30 Aug 2025 01:45:34 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: dFnepS69FQFDLSisj3gtzRAD7Wj2+MSq2ma4ttYkWC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Aug 23 01:45:34 2025 GMT Not After : Aug 30 01:45:34 2025 GMT Subject: CN=68a91d3e-c075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:0a:b1:b1:45:df:c1:ad:10:d4:8d:e8:05: bb:33:28:db:3a:56:d0:1f:8d:c4:55:d7:ad:46:f6: ba:30:46:bf:78:b8:7e:e3:cb:78:93:a2:0f:f7:4f: 22:0f:fd:6f:8c:7c:ad:48:a7:86:b5:40:fc:a9:86: 71:fc:4b:06:74:87:64:d4:e7:4d:84:c7:25:38:b5: 2c:fb:19:20:82:7f:0e:c8:23:9c:59:84:26:38:11: 2d:b5:d7:2c:cc:3f:b9:ea:76:2f:a5:e1:cc:b7:de: 57:5d:9b:1a:1e:55:d9:b2:45:96:df:5f:42:76:c2: a8:99:ff:e2:d1:33:54:84:93:a5:b3:17:27:02:ac: 1b:76:af:7e:81:92:ef:70:87:63:4a:34:cc:9a:30: 47:47:15:a9:10:cf:8f:8d:70:34:50:fd:1f:c9:e0: 93:2b:39:b9:e3:03:64:07:74:a6:47:16:be:61:65: 33:6b:e0:24:4a:25:bf:60:8a:d9:2d:a8:35:54:2b: 9d:31:7f:14:6a:55:43:4a:3a:5a:3c:43:77:78:7e: 1f:a4:b6:66:a3:b2:ef:8e:59:d2:e0:6c:33:f3:5e: 95:14:bd:15:14:a2:93:ea:a3:17:7a:25:09:59:0d: fa:cd:ec:14:c2:1b:20:6a:99:41:32:06:ce:0d:b8: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7A:9E:D2:D7:B1:A6:24:93:0C:53:AF:05:AD:11:20:99:E2:D9:50 X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fa:d2:d6:2f:8a:41:3e:1c:58:03:f1:29:f7:86:be:ac:7c: 37:4d:d4:31:8d:61:c6:2e:d2:7a:d5:77:ea:0d:7f:34:af:ef: 65:ca:b8:9f:46:03:d4:10:26:10:5e:93:05:e8:19:68:a6:7c: 3e:20:7b:71:f5:9b:b5:bc:85:c2:e2:3f:26:be:7e:cc:65:c9: 44:55:5e:09:ea:dd:70:17:02:6d:93:27:95:f8:1c:f1:b3:3a: ca:5b:a0:92:3d:34:ce:61:4e:82:ee:97:cc:b2:5c:41:cb:24: 20:b3:85:53:c7:e0:a4:d9:15:12:76:58:2c:d4:76:3e:e6:26: 81:2a:f5:8f:69:9f:b2:bc:3b:fa:41:1d:80:b1:40:47:3d:5f: 57:cc:08:3d:86:39:6c:f1:29:fa:0d:ba:6c:50:2c:7d:1f:d8: 0d:e2:49:18:71:aa:ca:c6:84:f5:88:b8:8c:25:0c:d9:9b:91: b6:05:be:17:e6:7c:e5:61:ad:d2:21:ed:71:ee:91:47:9d:6c: d8:41:42:70:1c:0c:30:3c:0a:d6:f1:7a:a6:9e:42:8b:d5:74: 83:50:c2:48:79:e0:de:ba:54:70:40:79:d1:8c:67:bf:ba:0a: 61:96:4a:f6:8d:83:1d:81:87:fe:02:bc:9c:50:2a:7a:eb:2a: af:86:2c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUwODIzMDE0NTM0WhcNMjUwODMwMDE0NTM0WjAYMRYwFAYD VQQDEw02OGE5MWQzZS1jMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3b4KsbFF38GtENSN6AW7MyjbOlbQH43EVdetRva6MEa/eLh+48t4k6IP908i D/1vjHytSKeGtUD8qYZx/EsGdIdk1OdNhMclOLUs+xkggn8OyCOcWYQmOBEttdcs zD+56nYvpeHMt95XXZsaHlXZskWW319CdsKomf/i0TNUhJOlsxcnAqwbdq9+gZLv cIdjSjTMmjBHRxWpEM+PjXA0UP0fyeCTKzm54wNkB3SmRxa+YWUza+AkSiW/YIrZ Lag1VCudMX8UalVDSjpaPEN3eH4fpLZmo7LvjlnS4Gwz816VFL0VFKKT6qMXeiUJ WQ36zewUwhsgaplBMgbODbhSawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR6ntLX saYkkwxTrwWtESCZ4tlQMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ+tLWL4pBPhxYA/Ep94a+rHw3TdQxjWHGLtJ61XfqDX80r+9lyrif RgPUECYQXpMF6Blopnw+IHtx9Zu1vIXC4j8mvn7MZclEVV4J6t1wFwJtkyeV+Bzx szrKW6CSPTTOYU6C7pfMslxByyQgs4VTx+Ck2RUSdlgs1HY+5iaBKvWPaZ+yvDv6 QR2AsUBHPV9XzAg9hjls8Sn6DbpsUCx9H9gN4kkYcarKxoT1iLiMJQzZm5G2Bb4X 5nzlYa3SIe1x7pFHnWzYQUJwHAwwPArW8XqmnkKL1XSDUMJIeeDeulRwQHnRjGe/ ugphlkr2jYMdgYf+ArycUCp66yqvhixU -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:58 2025 by rpki-client