$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json) Hash identifier: SfeyU2wP4uaoyXKhYJs+0/o5VN4qy5WYkBthUlIHfmk= Subject key identifier: 64:8E:A7:CC:11:66:5E:F9:4E:9C:F9:AC:D5:AF:9E:9B:14:D1:1C:C5 Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft Manifest number: 256A Signing time: Sun 24 Aug 2025 16:18:45 +0000 Manifest this update: Sun 24 Aug 2025 16:18:45 +0000 Manifest next update: Sun 31 Aug 2025 16:18:45 +0000 Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: HzXUw/Tg4nUMVkabxWhcB9Rx3YFvxH0MJvyB9HQqRWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Validity Not Before: Aug 24 16:18:45 2025 GMT Not After : Aug 31 16:18:45 2025 GMT Subject: CN=68ab3b65-f040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:2f:28:27:1a:4b:7a:84:d6:f5:07:7e:5d: b5:6c:05:6c:a0:c8:ee:38:2e:54:4f:36:c0:4c:ad: 1a:97:18:53:77:77:d0:8a:48:e9:65:a8:c5:ce:6b: be:85:80:f4:47:69:fe:be:2a:42:d0:cc:8c:92:fc: cd:73:2b:1f:30:3b:75:69:fd:2e:db:c7:21:5f:1c: 95:18:b2:f6:f9:d2:61:d3:63:9c:07:f4:02:fb:fa: 6d:a4:22:97:6b:07:72:e3:37:7e:be:47:dc:23:b9: cb:12:53:66:8d:b9:d6:cb:2e:7b:93:de:00:70:85: f0:9f:c2:19:c4:49:2e:88:82:0f:97:ee:6f:a3:14: 67:34:61:8a:2f:15:d6:ad:61:99:a2:6a:ed:d8:bf: 61:48:b2:cf:ef:52:aa:0e:e7:82:82:8f:53:01:be: af:01:8a:a3:82:5a:9f:43:14:68:1e:59:10:11:17: d6:c4:17:85:d9:de:b7:00:00:89:3d:ab:89:63:62: c0:d3:97:41:34:de:04:54:f7:15:d8:2d:56:0f:eb: c1:65:b1:d2:43:1a:2e:1a:e8:b2:cb:6e:58:a4:c3: db:4a:69:76:98:1c:a3:68:ea:8f:f5:0d:dc:4f:8f: 98:29:8a:7f:2c:16:7f:df:56:8e:dc:a1:d3:52:59: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:A7:CC:11:66:5E:F9:4E:9C:F9:AC:D5:AF:9E:9B:14:D1:1C:C5 X509v3 Authority Key Identifier: keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:19:d6:03:9b:5b:aa:17:7c:7d:3c:2b:5e:b7:c3:d5:13:66: 5f:45:7f:ec:de:14:9a:36:ef:22:19:b6:e8:b4:de:52:bd:e1: 99:c1:f3:b6:95:0b:8c:47:31:cc:1d:e3:ef:38:e1:5d:a7:bd: 2b:08:b0:43:f4:36:8e:af:82:df:17:b6:58:2c:53:da:3c:63: 16:67:fe:f5:a8:5a:10:9a:fe:0f:43:07:b4:40:40:f5:5b:b1: 52:7d:e8:b1:a4:61:a3:8d:8f:d8:d2:e9:fd:6e:40:06:8c:32: b4:05:ef:57:a4:a0:d0:50:e6:3e:16:97:e1:ac:91:98:04:9a: 74:7c:f8:9e:c1:08:d9:72:f8:5f:90:7e:de:d0:27:44:4d:aa: 16:73:f6:f2:a5:ce:b3:a1:6a:6c:ab:a4:17:2c:fb:78:35:ae: 26:11:98:e3:4b:38:b2:48:15:43:59:49:09:1f:dd:e9:f4:81: 1a:90:aa:f3:9c:21:3c:e5:fe:6f:6e:15:45:bf:a2:3e:5b:13: ef:27:4d:1d:26:78:fa:92:49:45:49:a1:b3:e7:0a:ef:eb:85: b4:1d:4c:11:24:05:ee:eb:9f:e4:4f:a6:36:fa:39:1b:e6:4b: d6:db:38:67:e3:f7:9e:1d:0f:3c:dd:29:4a:b3:84:5c:94:cd: 45:9c:dc:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDhEQzlDRjI2RjlENEZEREMxMTE0NUQzM0MzQkQwNzk2 MkQ2MjdCQjgwHhcNMjUwODI0MTYxODQ1WhcNMjUwODMxMTYxODQ1WjAYMRYwFAYD VQQDEw02OGFiM2I2NS1mMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+kvKCcaS3qE1vUHfl21bAVsoMjuOC5UTzbATK0alxhTd3fQikjpZajFzmu+ hYD0R2n+vipC0MyMkvzNcysfMDt1af0u28chXxyVGLL2+dJh02OcB/QC+/ptpCKX awdy4zd+vkfcI7nLElNmjbnWyy57k94AcIXwn8IZxEkuiIIPl+5voxRnNGGKLxXW rWGZomrt2L9hSLLP71KqDueCgo9TAb6vAYqjglqfQxRoHlkQERfWxBeF2d63AACJ PauJY2LA05dBNN4EVPcV2C1WD+vBZbHSQxouGuiyy25YpMPbSml2mByjaOqP9Q3c T4+YKYp/LBZ/31aO3KHTUlmU7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSOp8wR Zl75Tpz5rNWvnpsU0RzFMB8GA1UdIwQYMBaAFI3Jzyb51P3cERRdM8O9B5YtYnu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9qY25QSnZuVV9kd1JGRjB6dzcwSGxpMWll N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9qY25QSnZuVV9k d1JGRjB6dzcwSGxpMWllN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmGdYDm1uqF3x9PCtet8PVE2ZfRX/s3hSaNu8iGbbotN5SveGZwfO2 lQuMRzHMHePvOOFdp70rCLBD9DaOr4LfF7ZYLFPaPGMWZ/71qFoQmv4PQwe0QED1 W7FSfeixpGGjjY/Y0un9bkAGjDK0Be9XpKDQUOY+FpfhrJGYBJp0fPiewQjZcvhf kH7e0CdETaoWc/bypc6zoWpsq6QXLPt4Na4mEZjjSziySBVDWUkJH93p9IEakKrz nCE85f5vbhVFv6I+WxPvJ00dJnj6kklFSaGz5wrv64W0HUwRJAXu65/kT6Y2+jkb 5kvW2zhn4/eeHQ883SlKs4RclM1FnNya -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:12 2025 by rpki-client