$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: 4Q4r/QzKX3NnSro3u1W9yENT1VeRRqYliE4g5c4/h0U= Subject key identifier: 68:1E:69:E9:1A:E3:F5:55:7C:F0:B2:6D:E7:6C:77:71:78:96:35:85 Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 08A2 Signing time: Fri 18 Jul 2025 20:46:27 +0000 Manifest this update: Fri 18 Jul 2025 20:46:26 +0000 Manifest next update: Fri 25 Jul 2025 20:46:26 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: zrOm1IsV4mNBALJloxBULKJjpOjZ7vd9lFjlZlfAzYI=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 455pSZuKbmJ74DtLJhv6Pu72i25WA9DRuhrIcycnTSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: Jul 18 20:46:26 2025 GMT Not After : Jul 25 20:46:26 2025 GMT Subject: CN=687ab2a2-a091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:ce:9f:a7:34:d2:d6:41:c2:ee:2a:e9:df: 36:fb:fa:50:a1:74:1d:bf:2a:c7:51:0d:5d:d7:d1: 31:39:44:3d:57:2a:2f:e0:e7:2e:e5:3f:ec:da:12: 3e:bd:00:dd:8b:16:4e:f1:2d:0b:ff:ce:ca:0d:60: ae:e8:74:f4:ba:95:94:7f:b3:b0:82:83:8e:14:04: d3:cf:19:ba:27:a3:f7:f3:50:60:d5:98:21:22:8d: fd:dd:2c:1f:cb:ed:83:0f:f3:15:00:4a:70:48:2b: 31:18:a0:70:13:d7:7f:77:81:8e:3b:04:c8:2c:9f: 3b:97:73:47:1d:ff:c3:c6:a0:d4:18:05:ac:09:c8: 6e:dc:55:d0:63:c8:b2:71:a6:09:eb:9f:b7:24:6f: f3:87:1a:ca:c4:e8:f8:c3:8a:a3:95:be:b6:d1:a1: 40:42:47:3e:08:62:ef:fe:c3:b8:b1:9d:4d:54:dc: 1a:0f:39:b7:9c:f9:0d:52:6f:a3:fa:c2:bd:73:a6: cb:48:6d:db:4f:30:f9:ed:8a:51:a4:ef:f6:ff:94: 62:b3:09:c1:e2:ec:cf:17:f1:4a:3e:41:23:a7:25: 2d:6b:09:b5:98:13:9c:ff:af:c1:20:04:16:0a:9d: 50:64:b2:39:4a:a8:fa:88:5c:a0:8c:62:83:f5:79: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1E:69:E9:1A:E3:F5:55:7C:F0:B2:6D:E7:6C:77:71:78:96:35:85 X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9d:97:f3:42:c4:94:9e:91:ee:68:33:f9:4e:ae:bf:91:51: 63:a8:96:cd:3c:d6:69:d0:12:48:6b:ec:6c:b5:2b:26:f7:30: 98:b5:36:09:69:c2:92:4f:53:78:f2:05:1c:82:a1:16:d9:dd: 91:db:74:26:89:fd:28:57:12:0c:e6:7e:c4:c5:c8:35:1d:83: c4:b5:d2:5a:e0:4e:b8:f6:6c:14:ef:75:4e:64:84:f1:86:2f: ba:bb:1c:72:f2:5f:2e:1e:bd:a0:d3:83:28:79:c2:0f:6f:d2: 74:c1:04:1a:53:4a:b1:2d:83:2a:9c:61:89:35:af:6e:85:82: c7:56:c3:d7:ab:36:d6:92:32:1e:ef:c0:e9:10:29:dd:d5:30: d5:a8:e2:23:46:4c:1b:33:c0:52:27:7a:e2:b1:f7:2c:51:5b: b0:4b:3d:3c:96:ae:f6:1a:97:b7:be:c1:59:af:ee:ca:07:04: 04:8e:d1:89:da:33:54:60:d5:07:88:22:4f:48:d8:e5:99:da: fa:57:a0:54:5f:6e:79:c9:e0:d2:94:db:82:e3:8d:e8:c5:60: 55:bb:bc:10:ec:00:4e:3e:d7:72:71:fe:45:3b:b6:46:8d:fe: 99:8a:d2:73:88:20:a1:ea:77:78:90:38:76:86:c5:18:e8:44: 44:a5:3c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjUwNzE4MjA0NjI2WhcNMjUwNzI1MjA0NjI2WjAYMRYwFAYD VQQDEw02ODdhYjJhMi1hMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5knOn6c00tZBwu4q6d82+/pQoXQdvyrHUQ1d19ExOUQ9Vyov4Ocu5T/s2hI+ vQDdixZO8S0L/87KDWCu6HT0upWUf7OwgoOOFATTzxm6J6P381Bg1ZghIo393Swf y+2DD/MVAEpwSCsxGKBwE9d/d4GOOwTILJ87l3NHHf/DxqDUGAWsCchu3FXQY8iy caYJ65+3JG/zhxrKxOj4w4qjlb620aFAQkc+CGLv/sO4sZ1NVNwaDzm3nPkNUm+j +sK9c6bLSG3bTzD57YpRpO/2/5RiswnB4uzPF/FKPkEjpyUtawm1mBOc/6/BIAQW Cp1QZLI5Sqj6iFygjGKD9XmnMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgeaeka 4/VVfPCybedsd3F4ljWFMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGnZfzQsSUnpHuaDP5Tq6/kVFjqJbNPNZp0BJIa+xstSsm9zCYtTYJ acKST1N48gUcgqEW2d2R23Qmif0oVxIM5n7Excg1HYPEtdJa4E649mwU73VOZITx hi+6uxxy8l8uHr2g04MoecIPb9J0wQQaU0qxLYMqnGGJNa9uhYLHVsPXqzbWkjIe 78DpECnd1TDVqOIjRkwbM8BSJ3risfcsUVuwSz08lq72Gpe3vsFZr+7KBwQEjtGJ 2jNUYNUHiCJPSNjlmdr6V6BUX255yeDSlNuC443oxWBVu7wQ7ABOPtdycf5FO7ZG jf6ZitJziCCh6nd4kDh2hsUY6EREpTwT -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:20 2025 by rpki-client