$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json) Hash identifier: HALZbrgwIHdOVZCFE99Yr0gj/3PDis45zWuNP8r+0FI= Subject key identifier: 93:CD:E2:58:E8:6A:BB:A4:92:7A:BD:96:82:7F:6F:E3:EA:69:69:77 Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft Manifest number: 98 Signing time: Sat 19 Jul 2025 06:34:48 +0000 Manifest this update: Sat 19 Jul 2025 06:34:47 +0000 Manifest next update: Sat 26 Jul 2025 06:34:47 +0000 Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: dDZtsv5yAV9QcZZt9rUjqlbVGhyltvBZaqYeWANY6S8=) 2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Validity Not Before: Jul 19 06:34:47 2025 GMT Not After : Jul 26 06:34:47 2025 GMT Subject: CN=687b3c88-7cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:ad:88:b2:65:cf:1c:ad:08:a2:32:e9:91: b4:91:fe:fe:68:50:a8:3f:92:37:66:de:64:68:2d: ee:fa:e5:f4:bb:75:f3:ef:80:8e:69:dd:8c:7d:2c: 34:c5:f3:a3:0e:b3:1b:f4:8c:c9:0a:5a:54:fa:0d: 85:f7:6f:d8:6d:d4:a6:2d:3e:ba:ed:ab:ef:7e:a8: 94:68:c1:17:ef:63:b0:a6:74:79:73:21:80:5f:ef: 5f:b1:a6:b6:18:ac:2d:50:64:54:1e:67:99:0a:12: b5:70:48:90:de:13:c7:44:b2:f6:0f:62:db:ba:f0: 02:1b:da:d2:e4:3f:64:fd:08:ff:08:9b:aa:35:5b: 4f:5b:b5:02:04:69:f4:93:0b:68:b6:0c:a0:72:4d: f7:ed:ea:48:a2:a8:fe:ef:53:53:bb:ec:a2:10:da: ab:81:c4:81:ea:0d:3d:77:88:c1:d5:f1:2d:5f:9c: 0d:44:40:61:aa:c6:bd:35:76:3a:ce:3a:89:84:e1: 90:e9:62:14:c4:40:2a:48:ed:e0:fd:76:4d:42:2f: 60:fb:4c:84:85:e7:97:f8:86:16:a0:92:86:b9:58: d7:88:a3:d9:d5:a3:16:a0:2c:7c:43:ef:60:18:14: fe:3f:5a:9a:96:b4:70:39:85:b0:72:a1:80:37:18: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CD:E2:58:E8:6A:BB:A4:92:7A:BD:96:82:7F:6F:E3:EA:69:69:77 X509v3 Authority Key Identifier: keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:47:02:af:5d:79:bd:1f:b1:a0:4d:e1:00:12:bc:d0:a2:2c: 65:8c:15:38:c8:96:e2:e6:08:b6:4c:a2:ec:ab:d7:92:6a:b4: 29:31:45:20:ae:bb:c6:c3:cf:91:59:0f:f7:51:5d:22:40:45: 3e:6b:27:0c:f4:bb:d4:66:c5:9b:9e:cc:ff:5e:9b:f1:4b:52: a2:48:32:6c:93:a6:15:a0:29:4c:29:c4:95:0c:92:f8:1e:31: 74:f4:d1:0d:77:70:2f:d7:ab:58:11:85:5e:a7:cc:92:69:37: 35:cd:2d:6b:02:1c:03:7f:01:01:5d:17:d8:10:a2:b5:18:ea: 21:75:80:3d:38:3e:09:e4:39:7d:a0:ff:fc:c6:99:c1:6f:04: d3:91:fc:59:d7:93:b4:dc:8b:ac:67:2a:66:c1:1d:b3:30:b0: 12:52:a7:30:63:5e:15:dd:28:b9:63:40:7f:8a:2c:bc:11:fe: 48:ff:b3:1f:50:8d:d3:62:c4:67:f9:15:40:65:86:5c:51:20: 3c:ea:31:cd:32:c7:fd:81:7f:04:e3:cb:22:82:d2:16:88:89: 29:be:ef:69:6f:19:ff:58:c9:ec:5f:96:77:e9:dd:57:df:2a: b8:cd:fa:73:8e:9f:ce:13:86:6b:a5:5a:a7:e6:66:00:2e:c2: 77:dd:86:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1 RjE2M0FFNDMwHhcNMjUwNzE5MDYzNDQ3WhcNMjUwNzI2MDYzNDQ3WjAYMRYwFAYD VQQDEw02ODdiM2M4OC03Y2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAStiLJlzxytCKIy6ZG0kf7+aFCoP5I3Zt5kaC3u+uX0u3Xz74COad2MfSw0 xfOjDrMb9IzJClpU+g2F92/YbdSmLT667avvfqiUaMEX72OwpnR5cyGAX+9fsaa2 GKwtUGRUHmeZChK1cEiQ3hPHRLL2D2LbuvACG9rS5D9k/Qj/CJuqNVtPW7UCBGn0 kwtotgygck337epIoqj+71NTu+yiENqrgcSB6g09d4jB1fEtX5wNREBhqsa9NXY6 zjqJhOGQ6WIUxEAqSO3g/XZNQi9g+0yEheeX+IYWoJKGuVjXiKPZ1aMWoCx8Q+9g GBT+P1qalrRwOYWwcqGANxiILQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPN4ljo arukknq9loJ/b+PqaWl3MB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm MUFiYklESTJaWnhmRmpya00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkRwKvXXm9H7GgTeEAErzQoixljBU4yJbi5gi2TKLsq9eSarQpMUUg rrvGw8+RWQ/3UV0iQEU+aycM9LvUZsWbnsz/XpvxS1KiSDJsk6YVoClMKcSVDJL4 HjF09NENd3Av16tYEYVep8ySaTc1zS1rAhwDfwEBXRfYEKK1GOohdYA9OD4J5Dl9 oP/8xpnBbwTTkfxZ15O03IusZypmwR2zMLASUqcwY14V3Si5Y0B/iiy8Ef5I/7Mf UI3TYsRn+RVAZYZcUSA86jHNMsf9gX8E48sigtIWiIkpvu9pbxn/WMnsX5Z36d1X 3yq4zfpzjp/OE4ZrpVqn5mYALsJ33YaC -----END CERTIFICATE-----Generated at Sun Jul 20 10:39:57 2025 by rpki-client