$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: Hqx/g5ku+VS9hzkDzsXpS6DvKotIdDpK8X8ctZOylB0= Subject key identifier: 6D:D6:93:D1:99:AF:AD:96:29:0D:BC:F6:1F:2C:84:23:A5:AD:6C:F2 Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 0299 Signing time: Mon 21 Jul 2025 01:52:07 +0000 Manifest this update: Mon 21 Jul 2025 01:52:06 +0000 Manifest next update: Mon 28 Jul 2025 01:52:06 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: FOOhAzFnQId/X9nLGs445iBuShKO6vHBhsMPpVBA+KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Jul 21 01:52:06 2025 GMT Not After : Jul 28 01:52:06 2025 GMT Subject: CN=687d9d46-f7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:39:1d:c6:77:71:98:85:be:09:26:64:ce: ab:ee:d8:fc:73:1f:24:28:a7:7a:71:ee:7e:cb:26: 35:09:06:2e:a5:ec:9e:d5:f5:bf:23:b6:40:e7:2f: 7c:c0:a8:2f:ad:12:e2:d9:83:fa:2b:c6:72:01:0f: ad:c7:46:98:1d:b1:0d:b9:4e:3e:a1:41:19:0f:93: 1e:25:e2:e9:7c:58:be:4d:d3:48:5e:3c:fe:d2:0b: 31:e6:8b:ad:a8:3f:28:58:9b:7b:de:6d:f7:4e:0e: 33:3a:10:c5:2b:8e:86:bb:ac:ea:fe:22:b4:4c:d6: 6b:b1:74:fa:cb:68:b6:54:47:2c:8a:06:41:6b:0a: 3a:95:16:55:e5:a5:dc:3a:9f:80:e5:ef:c1:f7:20: 31:2f:d5:c8:33:47:1a:2f:52:83:cd:6e:12:80:7d: dc:5c:18:35:7c:08:3d:e5:a7:17:5f:0c:95:bb:ef: 2d:2f:42:19:a1:b8:e1:6a:6a:85:b3:eb:82:5e:2e: 2c:eb:7e:15:7e:62:54:9e:16:95:29:36:af:06:05: 42:4e:93:23:27:c3:18:11:34:17:c1:cb:fe:9c:25: 39:dd:4e:4e:93:de:d6:48:e2:4c:35:31:03:79:99: 81:d4:08:93:e1:49:42:37:bc:3c:75:ae:85:4e:c2: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:93:D1:99:AF:AD:96:29:0D:BC:F6:1F:2C:84:23:A5:AD:6C:F2 X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:86:44:55:cc:b0:9f:15:66:32:96:7d:c7:66:97:a4:ec:2d: 2c:f4:a8:9d:1c:f4:ce:c3:71:26:c5:2f:f0:e5:78:80:b4:cd: d2:5b:92:ba:85:ea:b8:35:b9:ec:69:3f:95:9e:88:e6:6e:87: fe:93:c2:14:be:51:da:8f:2b:de:78:cf:9e:b0:0b:f6:64:20: 6f:e5:03:70:53:37:94:19:55:46:28:79:c6:1c:ed:2c:89:0f: c0:1a:b1:b3:ec:ae:d1:e6:16:42:e8:06:3c:92:3a:5b:98:96: ba:76:cb:e9:91:d6:8a:22:87:b6:0e:a7:c5:fc:9c:38:72:f2: a3:10:fa:f5:29:aa:c6:59:84:08:37:57:cf:6b:e9:3b:28:29: 48:16:76:a6:09:c9:6b:0d:ca:f6:24:e8:67:cb:e5:44:06:16: a1:80:b2:50:2d:5a:3b:4c:30:7b:f5:b7:6e:d8:18:87:25:b9: 66:55:da:22:44:35:02:72:ee:3d:0f:7e:41:42:6d:8a:54:f5: af:06:c9:7b:83:14:d0:2b:e5:cf:e4:63:b0:3c:5f:89:10:d6: 52:2f:90:c9:fc:4b:33:17:f3:6c:a6:a9:30:a7:2e:6d:91:71: 7e:42:88:59:bb:7a:bf:05:2e:bb:59:f8:e1:a9:5a:51:4e:f8: 76:c9:fa:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUwNzIxMDE1MjA2WhcNMjUwNzI4MDE1MjA2WjAYMRYwFAYD VQQDEw02ODdkOWQ0Ni1mN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSo5HcZ3cZiFvgkmZM6r7tj8cx8kKKd6ce5+yyY1CQYupeye1fW/I7ZA5y98 wKgvrRLi2YP6K8ZyAQ+tx0aYHbENuU4+oUEZD5MeJeLpfFi+TdNIXjz+0gsx5out qD8oWJt73m33Tg4zOhDFK46Gu6zq/iK0TNZrsXT6y2i2VEcsigZBawo6lRZV5aXc Op+A5e/B9yAxL9XIM0caL1KDzW4SgH3cXBg1fAg95acXXwyVu+8tL0IZobjhamqF s+uCXi4s634VfmJUnhaVKTavBgVCTpMjJ8MYETQXwcv+nCU53U5Ok97WSOJMNTED eZmB1AiT4UlCN7w8da6FTsJhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3Wk9GZ r62WKQ289h8shCOlrWzyMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEhkRVzLCfFWYyln3HZpek7C0s9KidHPTOw3EmxS/w5XiAtM3SW5K6 heq4NbnsaT+Vnojmbof+k8IUvlHajyveeM+esAv2ZCBv5QNwUzeUGVVGKHnGHO0s iQ/AGrGz7K7R5hZC6AY8kjpbmJa6dsvpkdaKIoe2DqfF/Jw4cvKjEPr1KarGWYQI N1fPa+k7KClIFnamCclrDcr2JOhny+VEBhahgLJQLVo7TDB79bdu2BiHJblmVdoi RDUCcu49D35BQm2KVPWvBsl7gxTQK+XP5GOwPF+JENZSL5DJ/EszF/Nspqkwpy5t kXF+QohZu3q/BS67WfjhqVpRTvh2yfry -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:23 2025 by rpki-client