$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: JuXB4bKcIGABNihuAQYh1u6nsN/fY5/zf2f5gw2hC9A= Subject key identifier: 34:96:53:8D:66:DD:69:25:23:86:E5:93:6D:74:23:7F:A5:93:6D:1A Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: CE Signing time: Sat 23 Aug 2025 05:50:30 +0000 Manifest this update: Sat 23 Aug 2025 05:50:30 +0000 Manifest next update: Sat 30 Aug 2025 05:50:30 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: PLyxkCLwr9ZuZq639GzK1Rz6mchSZL+ahvGpxcOwQ4k=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Aug 23 05:50:30 2025 GMT Not After : Aug 30 05:50:30 2025 GMT Subject: CN=68a956a6-5084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:69:4a:6b:da:60:e5:32:db:39:69:ba:dc: 31:32:09:80:9a:cb:30:f0:1c:f2:fb:45:b1:f5:8d: 82:75:c0:c8:06:dd:40:7a:4e:9f:32:15:2f:da:a9: df:cb:07:6d:bd:d2:4c:43:ba:53:c4:cf:f4:e4:84: 96:d0:d6:d3:1b:75:9c:b1:ba:b4:5f:f4:76:81:e5: ca:6b:df:4a:0e:16:9b:4e:b8:db:1f:46:7c:9c:28: e2:d3:71:1c:8a:b4:24:38:d0:12:7b:de:f5:dc:b3: a4:13:59:8d:73:f9:af:c7:ef:fc:f2:19:d5:65:dc: a3:d7:5b:49:e1:b2:9c:bf:c1:36:ec:70:a1:52:29: bb:c3:2e:01:73:34:b8:7f:81:d0:70:7b:a9:db:c8: 53:02:d8:b6:45:83:c8:be:40:66:79:c6:83:23:cc: 58:e9:ac:21:20:fc:56:c6:71:1e:18:7c:45:6b:cf: bb:33:11:93:89:ff:04:3f:3b:71:10:4c:32:c4:93: d5:ef:07:e8:06:13:13:a9:4f:76:f0:15:3a:ae:b8: 21:38:05:13:23:ed:ea:2b:7a:43:92:a9:88:e4:ed: b6:55:e9:74:6c:49:7e:84:00:2a:af:db:e3:ae:4a: cd:67:6a:4c:43:7a:bd:81:64:97:72:88:5d:01:30: ca:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:96:53:8D:66:DD:69:25:23:86:E5:93:6D:74:23:7F:A5:93:6D:1A X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2c:93:bd:83:85:3a:56:19:58:d3:d2:3e:92:94:40:8c:1b: 5f:c3:4a:dc:0c:2c:a5:76:25:33:53:87:da:8b:ac:4f:9a:c4: 78:a8:b3:4d:58:76:78:12:6b:9a:07:44:39:17:53:77:0c:96: 15:fa:cc:d1:ae:9d:b6:08:57:7e:77:6d:f6:52:4a:a8:30:28: 69:e5:de:b4:14:eb:8f:61:40:1a:a3:a9:5e:81:84:aa:c3:2c: b4:4e:b1:2c:e2:fe:15:5f:82:07:b0:03:46:9b:50:90:bf:01: 36:ec:9c:e6:04:28:11:3b:57:82:2b:f8:c4:4e:b4:ee:c4:be: 53:ab:13:93:e1:d1:6e:0a:04:22:91:7a:00:f6:83:8f:7a:d4: e1:3c:11:34:8e:f5:86:4a:28:21:a6:b5:ed:ac:ac:ff:03:b1: a2:d9:87:f7:90:fa:df:b6:29:ba:47:fd:46:65:b9:9f:d5:51: 42:15:b5:95:d3:e3:2f:41:2c:2e:c5:bb:43:3b:62:71:1a:9e: e3:ab:77:12:81:e2:dc:67:14:61:7c:91:04:3d:5d:63:e5:f4: b5:92:6a:75:01:e4:31:61:8a:a6:60:88:96:5a:7d:f1:dc:c5: a3:f3:aa:ac:0f:30:57:e6:14:eb:ad:0d:88:5b:bb:70:ff:ef: 73:aa:c7:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUwODIzMDU1MDMwWhcNMjUwODMwMDU1MDMwWjAYMRYwFAYD VQQDEw02OGE5NTZhNi01MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv69pSmvaYOUy2zlputwxMgmAmssw8Bzy+0Wx9Y2CdcDIBt1Aek6fMhUv2qnf ywdtvdJMQ7pTxM/05ISW0NbTG3Wcsbq0X/R2geXKa99KDhabTrjbH0Z8nCji03Ec irQkONASe9713LOkE1mNc/mvx+/88hnVZdyj11tJ4bKcv8E27HChUim7wy4BczS4 f4HQcHup28hTAti2RYPIvkBmecaDI8xY6awhIPxWxnEeGHxFa8+7MxGTif8EPztx EEwyxJPV7wfoBhMTqU928BU6rrghOAUTI+3qK3pDkqmI5O22Vel0bEl+hAAqr9vj rkrNZ2pMQ3q9gWSXcohdATDK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSWU41m 3WklI4blk210I3+lk20aMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtLJO9g4U6VhlY09I+kpRAjBtfw0rcDCyldiUzU4fai6xPmsR4qLNN WHZ4EmuaB0Q5F1N3DJYV+szRrp22CFd+d232UkqoMChp5d60FOuPYUAao6legYSq wyy0TrEs4v4VX4IHsANGm1CQvwE27JzmBCgRO1eCK/jETrTuxL5TqxOT4dFuCgQi kXoA9oOPetThPBE0jvWGSighprXtrKz/A7Gi2Yf3kPrftim6R/1GZbmf1VFCFbWV 0+MvQSwuxbtDO2JxGp7jq3cSgeLcZxRhfJEEPV1j5fS1kmp1AeQxYYqmYIiWWn3x 3MWj86qsDzBX5hTrrQ2IW7tw/+9zqscy -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:12 2025 by rpki-client