$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: u885JmKr++PtEzvS0m251USv+ho8ZZb+ZgK7m7FqTBU= Subject key identifier: BF:BA:04:CA:94:69:9B:FC:FB:22:BC:1A:91:7B:2F:8A:30:90:C5:18 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 0155 Signing time: Sat 19 Jul 2025 04:25:45 +0000 Manifest this update: Sat 19 Jul 2025 04:25:45 +0000 Manifest next update: Sat 26 Jul 2025 04:25:45 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: yo2iKNCnJG7zWLIyjpuJeELN/g9gSTmj0KRo2GCM2Sk=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Jul 19 04:25:45 2025 GMT Not After : Jul 26 04:25:45 2025 GMT Subject: CN=687b1e49-158d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6b:c5:b3:1e:96:91:e3:b3:02:02:1d:75:ee: ec:43:d1:55:d1:45:79:54:1e:f2:99:40:c5:cb:cf: 6f:39:b0:1b:ef:7f:ec:18:60:c0:70:bc:f3:e5:80: 87:ed:33:60:95:d3:aa:91:74:df:8f:e8:53:3f:05: 92:84:d8:17:23:b6:f9:19:0a:f5:7e:3c:a7:15:f2: 48:7f:c1:c9:18:27:7f:db:8e:00:9d:d9:55:a5:d1: 3b:a4:ff:59:d2:89:39:d7:bf:72:86:93:68:ca:44: 42:dc:30:2f:f0:68:5a:2a:b7:7f:ab:b4:34:25:b5: 2a:e1:5c:63:22:1c:16:c6:ad:4a:0f:00:24:f3:01: a1:68:1c:c4:a7:18:88:f2:c8:62:17:92:e4:0a:f8: 80:0a:a9:2c:95:d1:cb:b5:a7:48:52:4d:da:5a:c7: f8:63:a3:4d:64:72:30:0b:32:de:35:87:fe:5d:bf: 65:2e:f6:e7:61:74:dc:4c:43:cc:31:f1:a9:4e:d5: 31:cd:a9:e0:f4:2c:23:d5:86:bb:7c:97:44:71:ba: 8d:b3:18:7f:f5:81:91:0e:6b:16:fc:90:56:4f:ce: ae:13:89:bd:d7:f2:ad:03:79:4d:72:ae:bc:d1:47: 01:28:b1:72:40:f8:68:a1:d4:b6:e1:4a:bc:2f:40: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:04:CA:94:69:9B:FC:FB:22:BC:1A:91:7B:2F:8A:30:90:C5:18 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7b:c1:5d:4c:c0:42:71:83:01:66:08:22:7c:3c:eb:af:74: 2f:0d:3f:82:dc:91:2f:3a:3f:a3:e5:4a:fe:1e:ff:c7:34:c4: 3e:ad:30:77:f8:a1:2d:a7:cf:96:2e:66:e3:e3:d8:cc:d8:44: ed:ee:17:41:47:50:5e:4c:94:0b:41:22:ed:01:45:5b:6c:d8: 47:cb:7e:a6:98:81:3e:10:ef:25:dc:25:c6:53:6c:4d:6f:9b: dc:55:ef:88:8b:bf:5e:ee:a9:21:46:5c:69:bc:c2:7d:db:a5: c2:02:0e:4c:e1:4c:79:50:c8:63:a1:d0:86:a5:64:3e:2e:24: 60:9f:f9:38:1b:d5:8d:4e:1e:86:62:49:59:28:1d:7e:8a:05: 78:85:f3:a3:02:7f:34:b0:9f:2d:b3:25:8e:63:f9:76:62:74: 67:02:d4:33:05:8a:72:28:26:c9:b2:86:25:0e:d6:f3:98:1a: 35:ff:3d:c8:e5:96:95:94:8c:d6:ca:b6:79:29:82:81:d9:ed: 55:4a:51:2f:71:8e:e8:fc:a9:6b:35:27:82:5b:e6:83:52:3e: 07:fd:d0:c1:20:ee:39:2c:96:9f:f7:a4:5d:07:4e:b6:61:e7: 04:d5:ae:1d:f9:84:f5:64:62:8f:a2:2c:65:4b:e0:8a:6a:18: 3e:12:b3:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUwNzE5MDQyNTQ1WhcNMjUwNzI2MDQyNTQ1WjAYMRYwFAYD VQQDEw02ODdiMWU0OS0xNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGvFsx6WkeOzAgIdde7sQ9FV0UV5VB7ymUDFy89vObAb73/sGGDAcLzz5YCH 7TNgldOqkXTfj+hTPwWShNgXI7b5GQr1fjynFfJIf8HJGCd/244AndlVpdE7pP9Z 0ok5179yhpNoykRC3DAv8GhaKrd/q7Q0JbUq4VxjIhwWxq1KDwAk8wGhaBzEpxiI 8shiF5LkCviACqksldHLtadIUk3aWsf4Y6NNZHIwCzLeNYf+Xb9lLvbnYXTcTEPM MfGpTtUxzang9Cwj1Ya7fJdEcbqNsxh/9YGRDmsW/JBWT86uE4m91/KtA3lNcq68 0UcBKLFyQPhoodS24Uq8L0BqRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+6BMqU aZv8+yK8GpF7L4owkMUYMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfe8FdTMBCcYMBZggifDzrr3QvDT+C3JEvOj+j5Ur+Hv/HNMQ+rTB3 +KEtp8+WLmbj49jM2ETt7hdBR1BeTJQLQSLtAUVbbNhHy36mmIE+EO8l3CXGU2xN b5vcVe+Ii79e7qkhRlxpvMJ926XCAg5M4Ux5UMhjodCGpWQ+LiRgn/k4G9WNTh6G YklZKB1+igV4hfOjAn80sJ8tsyWOY/l2YnRnAtQzBYpyKCbJsoYlDtbzmBo1/z3I 5ZaVlIzWyrZ5KYKB2e1VSlEvcY7o/KlrNSeCW+aDUj4H/dDBIO45LJaf96RdB062 YecE1a4d+YT1ZGKPoixlS+CKahg+ErM1 -----END CERTIFICATE-----Generated at Sun Jul 20 07:50:46 2025 by rpki-client