$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: zCDRbIGjgIlTLH8FSIFPdtTyNLI8A4Xsdpc3RStL6lg= Subject key identifier: DA:40:60:AD:FD:1A:9A:A6:83:25:3F:5D:FE:7D:1B:65:39:4C:89:B6 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 08E9 Signing time: Fri 22 Aug 2025 20:31:11 +0000 Manifest this update: Fri 22 Aug 2025 20:31:10 +0000 Manifest next update: Fri 29 Aug 2025 20:31:10 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: vK8w1Q63uqovspAGXnLxE7g95bokwCrxi5C5ZqH/BJU=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Aug 22 20:31:10 2025 GMT Not After : Aug 29 20:31:10 2025 GMT Subject: CN=68a8d38e-7ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:c2:4f:a0:09:5c:62:ae:f1:c7:22:85:69: ef:97:a5:e1:02:70:72:f2:e7:35:17:02:d4:55:9d: 6e:0b:9f:95:8c:89:ab:d5:39:03:30:2c:5c:3c:21: f6:42:c1:e2:05:ac:9e:cf:c3:23:5a:b6:f1:df:8b: 8c:48:7c:c0:89:d8:29:b7:f3:b6:6f:d4:61:aa:1a: 28:48:18:47:55:ea:4a:95:6c:c7:f9:77:81:cf:4c: 97:fb:ea:00:b7:21:61:b0:b3:7a:a8:ac:5d:03:61: df:6c:dd:c9:0d:35:45:d7:9a:31:d2:35:7b:47:dc: 91:ab:f1:18:06:ed:49:e0:51:9b:b4:28:3a:a4:fa: 3d:a9:b4:ef:e6:90:5e:1a:6a:fc:ca:03:ca:97:e6: 20:57:3b:76:bd:f9:d0:7e:52:bd:02:cc:6f:d5:44: 8a:19:51:1c:5e:a2:f9:5b:e5:65:f7:54:e6:55:55: f6:e7:51:a3:b2:dc:23:9d:f1:4d:77:22:e1:1d:23: 0e:28:15:d4:5f:dd:52:cd:43:32:81:9b:dc:a4:d5: 57:5c:1c:de:95:2f:fa:36:6a:55:99:e5:28:47:13: 27:68:82:14:b4:55:16:0b:5e:2c:e4:f2:19:4e:c2: 0b:ec:7b:1b:39:6b:84:dd:6c:8a:b9:d2:f0:e9:5d: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:60:AD:FD:1A:9A:A6:83:25:3F:5D:FE:7D:1B:65:39:4C:89:B6 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fb:78:07:22:e5:5b:74:17:2f:58:5e:62:c7:20:03:db:56: 7b:0b:22:ad:a9:e9:4d:57:fd:a1:97:f7:d4:71:97:58:87:43: 11:c0:9d:14:ed:9b:33:7e:6d:89:81:2d:83:4f:f3:f8:0d:ff: b0:2f:31:ec:e4:91:c5:50:db:1d:19:0f:02:89:70:90:c5:d5: 43:de:29:da:ee:6d:55:a0:30:70:f8:f0:fb:46:eb:90:81:8e: 8b:d7:0a:88:b9:dd:98:cd:23:dd:75:7c:e4:88:89:26:a3:bb: 81:7e:dd:8a:ed:aa:ec:4f:ec:19:e2:fc:9e:82:42:c2:5c:b5: 5f:55:ba:12:24:dd:09:34:55:1c:00:9e:c3:6d:d3:75:5a:85: 76:ef:d3:ab:15:00:d0:f8:7b:1e:02:d1:bd:0e:a6:cb:46:d0: 84:8f:7b:96:68:8a:1d:b4:a1:d7:ec:3e:ce:66:72:dc:7d:3f: 77:cb:91:02:75:bd:59:66:e0:1d:f8:f1:bf:ac:c9:9f:b7:38: 99:71:66:e3:3d:66:86:44:9e:19:4d:10:a0:1f:a6:74:92:61: e2:49:e4:d9:e1:08:a9:53:02:4b:ea:92:b4:6e:57:4c:4d:b1: f0:40:d1:3c:c4:43:f1:94:0c:44:c5:4f:6c:62:47:f2:07:e8: 67:bd:ed:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUwODIyMjAzMTEwWhcNMjUwODI5MjAzMTEwWjAYMRYwFAYD VQQDEw02OGE4ZDM4ZS03ZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApU3CT6AJXGKu8ccihWnvl6XhAnBy8uc1FwLUVZ1uC5+VjImr1TkDMCxcPCH2 QsHiBayez8MjWrbx34uMSHzAidgpt/O2b9RhqhooSBhHVepKlWzH+XeBz0yX++oA tyFhsLN6qKxdA2HfbN3JDTVF15ox0jV7R9yRq/EYBu1J4FGbtCg6pPo9qbTv5pBe Gmr8ygPKl+YgVzt2vfnQflK9Asxv1USKGVEcXqL5W+Vl91TmVVX251GjstwjnfFN dyLhHSMOKBXUX91SzUMygZvcpNVXXBzelS/6NmpVmeUoRxMnaIIUtFUWC14s5PIZ TsIL7HsbOWuE3WyKudLw6V2LOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpAYK39 GpqmgyU/Xf59G2U5TIm2MB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8+3gHIuVbdBcvWF5ixyAD21Z7CyKtqelNV/2hl/fUcZdYh0MRwJ0U 7Zszfm2JgS2DT/P4Df+wLzHs5JHFUNsdGQ8CiXCQxdVD3ina7m1VoDBw+PD7RuuQ gY6L1wqIud2YzSPddXzkiIkmo7uBft2K7arsT+wZ4vyegkLCXLVfVboSJN0JNFUc AJ7DbdN1WoV279OrFQDQ+HseAtG9DqbLRtCEj3uWaIodtKHX7D7OZnLcfT93y5EC db1ZZuAd+PG/rMmftziZcWbjPWaGRJ4ZTRCgH6Z0kmHiSeTZ4QipUwJL6pK0bldM TbHwQNE8xEPxlAxExU9sYkfyB+hnve2u -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:03 2025 by rpki-client