$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json) Hash identifier: Lw+qx+vofLa236Dne4FJBLtOfmbKFIVERhXLC0Jxvl8= Subject key identifier: EA:8C:35:86:40:CE:82:AB:D0:04:A9:D7:1E:5C:0A:92:C2:DE:B9:9C Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft Manifest number: 0167 Signing time: Sat 23 Aug 2025 04:02:36 +0000 Manifest this update: Sat 23 Aug 2025 04:02:36 +0000 Manifest next update: Sat 30 Aug 2025 04:02:36 +0000 Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: nG5rNPB9NrNQ8Hx6fIwQkF9mARHlC1SdCjA5NM6xPsU=) 2: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: gKjXag0sfARiLyE6YNWzcV2bYu/wNp5XI3N1jUN8tAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Validity Not Before: Aug 23 04:02:36 2025 GMT Not After : Aug 30 04:02:36 2025 GMT Subject: CN=68a93d5c-cea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:fb:e9:db:a1:61:eb:b9:9c:7c:b4:59:65: e5:a5:d3:90:3a:89:06:68:cd:03:bc:ba:69:4f:10: 83:fe:64:66:9c:82:a2:c7:38:fb:0d:d0:eb:5c:9e: 7f:11:d0:87:a7:f9:17:72:9f:6f:2f:f3:22:8e:09: d3:3e:f3:c9:17:f9:ba:42:57:31:b2:5a:ac:90:73: 38:c7:6f:af:38:38:be:bd:c7:67:cf:7a:7d:0d:d9: fe:2a:ad:ff:b0:fc:86:cd:83:e8:b5:24:7d:4a:05: 39:fc:b8:32:47:a9:28:96:08:de:65:1f:86:fa:18: 6e:81:47:bc:9f:77:91:b7:61:37:83:a9:3d:e6:c5: 91:d8:b6:f8:96:e6:24:2c:29:58:2d:7f:1e:83:56: ed:ce:78:94:f8:16:91:f1:4c:f5:dd:bb:3c:6f:09: 0d:bb:50:5f:8d:84:1d:93:bf:66:88:29:5d:cf:9e: 7f:d4:e2:61:44:3e:10:87:df:c2:ad:4a:d8:76:f1: 30:6f:8d:4e:5f:fa:c3:3f:bc:80:0c:f9:de:69:19: 3a:4c:bb:eb:c1:98:ca:8c:6a:da:04:7d:93:7b:60: 31:35:65:ff:91:e3:bf:7a:ed:be:c7:8f:cd:f0:37: 1e:a5:8d:1f:a1:88:89:9b:b4:91:5a:ec:32:0d:cc: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8C:35:86:40:CE:82:AB:D0:04:A9:D7:1E:5C:0A:92:C2:DE:B9:9C X509v3 Authority Key Identifier: keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:cf:3c:7b:76:c7:f3:5d:ec:33:4e:e5:4a:bd:3a:d0:02:71: 68:32:1b:1b:fb:86:85:bd:53:9d:46:9f:20:85:06:36:7d:35: 4f:3f:04:1f:68:eb:71:0f:af:4e:20:79:01:a1:67:ca:24:0b: 69:bd:74:c5:ab:04:2e:43:a1:f2:55:e1:a0:d2:b4:1d:7b:44: bb:0b:37:da:96:be:80:29:89:8f:b7:1f:e5:a4:1d:a7:af:7b: 5e:23:7c:bb:28:90:70:9f:a3:c8:67:61:8f:c2:e9:50:95:68: 82:5c:24:5a:a2:5a:ea:96:8e:44:db:61:01:a7:18:95:c4:c5: ac:f7:3f:4f:09:9a:2e:d3:a7:65:f6:59:cf:c0:86:97:65:f7: 14:60:df:1c:2d:d8:b0:65:16:c5:f0:62:f6:8f:7f:2c:0a:c3: 50:47:36:c9:8e:49:6d:2f:1f:c8:40:2d:7b:43:5c:82:d6:e4: f7:6b:5d:58:53:3e:49:06:b0:ea:52:9d:33:d8:d9:74:7d:10: 79:c4:cd:b6:48:de:7d:2c:70:6c:ed:59:2a:59:1c:4a:ce:82: a1:35:88:55:47:2a:8c:6e:ab:87:7b:ef:db:43:87:c1:91:fe: be:f3:45:47:c6:8f:1a:ae:46:5e:a1:c4:a5:3b:ec:9c:cb:66: 97:a2:16:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MTExMTAvBgNVBAUTKDI1OTY5RTczQTk4RDk5RjQyRUFDODk0MjZDNkI5NDkz Qzg1RDMzMUEwHhcNMjUwODIzMDQwMjM2WhcNMjUwODMwMDQwMjM2WjAYMRYwFAYD VQQDEw02OGE5M2Q1Yy1jZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9H76duhYeu5nHy0WWXlpdOQOokGaM0DvLppTxCD/mRmnIKixzj7DdDrXJ5/ EdCHp/kXcp9vL/MijgnTPvPJF/m6QlcxslqskHM4x2+vODi+vcdnz3p9Ddn+Kq3/ sPyGzYPotSR9SgU5/LgyR6kolgjeZR+G+hhugUe8n3eRt2E3g6k95sWR2Lb4luYk LClYLX8eg1btzniU+BaR8Uz13bs8bwkNu1BfjYQdk79miCldz55/1OJhRD4Qh9/C rUrYdvEwb41OX/rDP7yADPneaRk6TLvrwZjKjGraBH2Te2AxNWX/keO/eu2+x4/N 8DcepY0foYiJm7SRWuwyDcwucQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqMNYZA zoKr0ASp1x5cCpLC3rmcMB8GA1UdIwQYMBaAFCWWnnOpjZn0LqyJQmxrlJPIXTMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkxMS9CQzA5NTNBNjU5 NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1mUXVySWxDYkd1VWs4aGRN eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYWVjNm1ObWZRdXJJbENiR3VVazhoZE14by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkxMS9CQzA5NTNBNjU5NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1m UXVySWxDYkd1VWs4aGRNeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByzzx7dsfzXewzTuVKvTrQAnFoMhsb+4aFvVOdRp8ghQY2fTVPPwQf aOtxD69OIHkBoWfKJAtpvXTFqwQuQ6HyVeGg0rQde0S7Czfalr6AKYmPtx/lpB2n r3teI3y7KJBwn6PIZ2GPwulQlWiCXCRaolrqlo5E22EBpxiVxMWs9z9PCZou06dl 9lnPwIaXZfcUYN8cLdiwZRbF8GL2j38sCsNQRzbJjkltLx/IQC17Q1yC1uT3a11Y Uz5JBrDqUp0z2Nl0fRB5xM22SN59LHBs7VkqWRxKzoKhNYhVRyqMbquHe+/bQ4fB kf6+80VHxo8arkZeocSlO+ycy2aXoha9 -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:06 2025 by rpki-client