$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json) Hash identifier: l1etbYY53Zij5yU8c+ZxugdDudaRje7g2OfDHMc0ges= Subject key identifier: 2F:4D:71:B4:1C:70:15:19:7E:06:4C:98:43:32:3F:91:DF:07:9F:6E Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Certificate serial: 1795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft Manifest number: 1785 Signing time: Fri 18 Jul 2025 16:42:41 +0000 Manifest this update: Fri 18 Jul 2025 16:42:40 +0000 Manifest next update: Fri 25 Jul 2025 16:42:40 +0000 Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: CMJM/MZ9yPwnoLLVFzkbkdimeP1/1tH0FJvhhxJ5K6s=) 2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: AFv3+8G4+14cWKdLCa3SvwGQd6CuiEszUkutLoyR7bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6037 (0x1795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Validity Not Before: Jul 18 16:42:40 2025 GMT Not After : Jul 25 16:42:40 2025 GMT Subject: CN=687a7981-1b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:23:ce:63:47:97:35:61:1e:0b:54:cc:f8: ab:5f:ae:79:d0:9d:f2:4d:f1:36:b9:81:75:91:62: 8e:9d:b6:f0:29:10:5c:69:bc:90:62:f0:8b:c5:ab: 95:f8:d8:43:01:32:93:18:6e:bd:b9:d9:5c:73:3a: 5d:34:e9:ee:04:d6:41:47:82:d8:87:84:48:b1:56: d6:02:2d:ea:10:03:78:f8:56:79:3b:54:02:52:bb: 03:3e:27:9f:b1:fb:fa:32:7c:b8:09:08:2a:82:e7: 79:68:e0:df:06:e3:fc:1b:7b:d9:8a:a5:d9:da:7a: 1f:27:25:04:83:f0:83:91:9c:e4:4a:a8:9d:a3:43: 3a:ea:e8:49:6c:29:c4:05:9d:d0:92:c1:f4:01:48: 9b:12:4d:14:98:6b:85:28:42:32:01:d3:f7:48:dc: 65:c9:6c:dc:e5:d7:a4:4f:22:cf:51:c7:32:35:6a: e9:38:de:0f:ef:7c:0f:50:cd:d2:b6:c8:33:1a:ae: 32:87:f1:e3:b0:44:55:ea:6c:5d:2f:fc:cd:3b:f1: 66:a3:42:ca:09:df:9e:56:d9:cc:c4:e2:f7:3e:b0: 8a:a9:2e:cd:69:98:8b:9b:26:82:af:30:ff:fa:f3: 7a:15:01:5d:e4:8d:71:1b:9f:44:d5:ee:e8:00:cd: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:71:B4:1C:70:15:19:7E:06:4C:98:43:32:3F:91:DF:07:9F:6E X509v3 Authority Key Identifier: keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8c:87:e3:53:51:da:85:37:78:18:00:d7:6e:aa:7b:10:b6: 74:53:5e:af:52:62:64:d9:9e:6a:83:fb:ce:0a:13:39:8e:fc: b7:5c:42:bc:4b:7e:ac:d6:fd:9d:28:33:5a:d8:71:47:0e:77: fe:7c:eb:52:83:8f:de:71:b7:b9:16:ae:a7:e1:d8:52:5e:cf: af:15:04:c2:ef:f1:9f:0e:d1:08:ff:de:5d:50:52:fa:3d:94: dc:a4:83:ac:39:4f:6a:29:07:d6:31:52:bc:2d:a3:d0:77:52: 6f:49:ce:4f:46:1b:71:03:06:52:df:23:8c:ba:98:53:a7:39: 2a:a5:fa:58:c1:7a:bc:8b:e2:26:3f:02:98:f3:a4:83:a2:55: 29:40:82:93:e3:22:96:bc:21:e3:d4:cf:ca:8d:6d:12:e9:55: 6b:64:91:a2:ea:01:f4:fe:01:6a:68:1f:d5:7e:33:f1:2e:ab: 82:9e:1a:f4:bd:9c:20:cd:1c:bc:5a:b9:14:5a:89:b8:7b:9c: f5:1e:05:22:3f:8b:24:3c:1a:77:e7:03:94:be:1e:bb:01:fb: 44:86:9c:22:b7:74:38:0b:8b:76:d5:ed:67:96:79:08:fd:56: b7:8b:ac:ec:a9:fa:47:f4:7a:c8:1f:29:ce:cd:d0:7b:fe:82: 24:83:e6:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy MjdGNEU4N0IwHhcNMjUwNzE4MTY0MjQwWhcNMjUwNzI1MTY0MjQwWjAYMRYwFAYD VQQDEw02ODdhNzk4MS0xYjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLgjzmNHlzVhHgtUzPirX6550J3yTfE2uYF1kWKOnbbwKRBcabyQYvCLxauV +NhDATKTGG69udlcczpdNOnuBNZBR4LYh4RIsVbWAi3qEAN4+FZ5O1QCUrsDPief sfv6Mny4CQgqgud5aODfBuP8G3vZiqXZ2nofJyUEg/CDkZzkSqido0M66uhJbCnE BZ3QksH0AUibEk0UmGuFKEIyAdP3SNxlyWzc5dekTyLPUccyNWrpON4P73wPUM3S tsgzGq4yh/HjsERV6mxdL/zNO/Fmo0LKCd+eVtnMxOL3PrCKqS7NaZiLmyaCrzD/ +vN6FQFd5I1xG59E1e7oAM3gSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9NcbQc cBUZfgZMmEMyP5HfB59uMB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1 RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5 aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsjIfjU1HahTd4GADXbqp7ELZ0U16vUmJk2Z5qg/vOChM5jvy3XEK8 S36s1v2dKDNa2HFHDnf+fOtSg4/ecbe5Fq6n4dhSXs+vFQTC7/GfDtEI/95dUFL6 PZTcpIOsOU9qKQfWMVK8LaPQd1JvSc5PRhtxAwZS3yOMuphTpzkqpfpYwXq8i+Im PwKY86SDolUpQIKT4yKWvCHj1M/KjW0S6VVrZJGi6gH0/gFqaB/VfjPxLquCnhr0 vZwgzRy8WrkUWom4e5z1HgUiP4skPBp35wOUvh67AftEhpwit3Q4C4t21e1nlnkI /Va3i6zsqfpH9HrIHynOzdB7/oIkg+bZ -----END CERTIFICATE-----Generated at Sun Jul 20 10:34:27 2025 by rpki-client