$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json) Hash identifier: 1K05VwDZEEdJPrtNZ4KA+sKZE6YT694VPKjeP6KPxWQ= Subject key identifier: 47:BF:89:AD:C1:0F:CA:0F:85:08:69:0C:39:A4:BC:2F:59:EB:42:8B Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft Manifest number: 88 Signing time: Sat 23 Aug 2025 06:49:22 +0000 Manifest this update: Sat 23 Aug 2025 06:49:21 +0000 Manifest next update: Sat 30 Aug 2025 06:49:21 +0000 Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: 78wPszN9l6LGgevUO0x71tXntijHi3iDK5+3N2SQi3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Validity Not Before: Aug 23 06:49:21 2025 GMT Not After : Aug 30 06:49:21 2025 GMT Subject: CN=68a96471-17c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:39:da:8b:d7:67:bc:19:22:63:63:20:b5: 41:2e:aa:9f:09:8d:9f:e1:f2:1c:84:e8:6d:d9:e9: 34:24:a3:8c:ae:3e:32:16:2c:62:be:10:41:ee:40: 85:e5:3f:da:be:15:f1:9b:e4:7c:4a:a9:98:f7:61: 07:ef:d0:4c:29:42:ac:37:e2:ce:5e:93:44:99:b1: e8:e9:3f:02:d9:89:bf:02:96:49:bd:6d:87:00:38: 2d:27:8a:96:49:a2:bb:36:1e:d7:b3:48:52:52:f6: 48:fb:8e:20:08:72:9e:40:6d:37:47:ac:81:56:2d: 7c:53:f3:fa:59:89:65:c4:bc:8b:3b:5f:76:83:4f: 7c:cb:13:5e:a7:25:cc:27:5a:9e:ae:75:a6:39:0f: 9e:78:7a:39:c6:a8:8e:ef:a1:17:f0:34:df:2a:c9: bc:ef:51:96:3d:6d:3f:a6:23:fd:bc:64:68:53:41: 87:d8:42:b5:77:3f:1e:63:6b:26:6a:9a:d7:74:0b: d5:28:c0:3a:2f:61:e8:86:fb:94:1e:c9:99:70:a4: 43:a2:81:19:57:95:a1:ac:e4:cd:ea:51:5d:92:1a: 6b:6d:dc:bc:53:c1:22:e5:af:30:46:23:e3:76:48: 03:a7:70:e8:cb:37:39:7e:0c:77:d4:c5:d7:14:3f: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:89:AD:C1:0F:CA:0F:85:08:69:0C:39:A4:BC:2F:59:EB:42:8B X509v3 Authority Key Identifier: keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:87:cd:e1:76:08:e1:c3:40:1c:4b:ba:39:4e:28:9c:ae:4f: d6:d2:22:a5:99:96:ad:43:c3:66:6c:a5:81:68:95:eb:d6:dd: 2d:4b:f5:18:98:68:f3:6a:d6:b5:10:c9:a8:5c:23:fe:39:26: 2e:7f:aa:49:f9:81:0f:3b:5e:9f:a6:38:d1:49:08:25:76:c0: 70:7e:95:81:7a:bb:48:91:d2:74:83:b8:b2:d4:f0:d4:50:6f: 73:13:10:45:7e:2c:e9:09:82:72:6f:53:67:fd:47:91:11:56: 1b:54:f6:ef:cb:85:7a:bb:3f:a3:c5:a6:78:e8:ad:d3:0e:c3: 03:ea:90:41:60:9e:8b:7e:57:71:45:d4:c4:0c:91:8e:a2:19: 17:41:09:34:50:d8:a6:95:0b:09:ee:ff:4d:33:33:e9:a2:11: ed:43:eb:dc:99:a6:23:29:ca:e2:ef:88:d0:0c:96:f3:43:ec: 8f:3b:b9:a5:b9:c3:30:0a:01:4f:04:14:bd:da:08:7f:60:d1: 76:1a:d5:96:28:b3:71:2d:88:e8:cd:6f:f9:5a:07:d6:a3:cd: 6c:bf:31:e4:04:3e:4e:0d:f7:4f:79:6b:7d:74:88:cd:36:3e: f5:7f:3d:79:92:5c:48:b7:8c:ba:0b:00:4f:dd:25:ae:84:93: 6d:90:cd:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzNjMxMTAvBgNVBAUTKDhFMUNDMURCRkFCRDQwQjY0MTRDMjNFM0RGRDg5MTQ1 NTI3REYzMjEwHhcNMjUwODIzMDY0OTIxWhcNMjUwODMwMDY0OTIxWjAYMRYwFAYD VQQDEw02OGE5NjQ3MS0xN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDo52ovXZ7wZImNjILVBLqqfCY2f4fIchOht2ek0JKOMrj4yFixivhBB7kCF 5T/avhXxm+R8SqmY92EH79BMKUKsN+LOXpNEmbHo6T8C2Ym/ApZJvW2HADgtJ4qW SaK7Nh7Xs0hSUvZI+44gCHKeQG03R6yBVi18U/P6WYllxLyLO192g098yxNepyXM J1qernWmOQ+eeHo5xqiO76EX8DTfKsm871GWPW0/piP9vGRoU0GH2EK1dz8eY2sm aprXdAvVKMA6L2HohvuUHsmZcKRDooEZV5WhrOTN6lFdkhprbdy8U8Ei5a8wRiPj dkgDp3Doyzc5fgx31MXXFD+vCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe/ia3B D8oPhQhpDDmkvC9Z60KLMB8GA1UdIwQYMBaAFI4cwdv6vUC2QUwj49/YkUVSffMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CRDg2M0Q3MkFG QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFMWkJUQ1BqMzlpUlJWSjk4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM2My9CRDg2M0Q3MkFGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFM WkJUQ1BqMzlpUlJWSjk4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/h83hdgjhw0AcS7o5Tiicrk/W0iKlmZatQ8NmbKWBaJXr1t0tS/UY mGjzata1EMmoXCP+OSYuf6pJ+YEPO16fpjjRSQgldsBwfpWBertIkdJ0g7iy1PDU UG9zExBFfizpCYJyb1Nn/UeREVYbVPbvy4V6uz+jxaZ46K3TDsMD6pBBYJ6Lfldx RdTEDJGOohkXQQk0UNimlQsJ7v9NMzPpohHtQ+vcmaYjKcri74jQDJbzQ+yPO7ml ucMwCgFPBBS92gh/YNF2GtWWKLNxLYjozW/5WgfWo81svzHkBD5ODfdPeWt9dIjN Nj71fz15klxIt4y6CwBP3SWuhJNtkM2M -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:46 2025 by rpki-client