$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft File: JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json) Hash identifier: Dq4uHra+zMkc0lJkJh9jTNZrVbBp0fwaK1fguMzg+XY= Subject key identifier: B6:40:37:AD:9B:43:6D:C7:0A:FF:3E:9D:56:8C:7F:95:84:1C:75:96 Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA Certificate issuer: /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft Manifest number: 7F Signing time: Wed 17 Sep 2025 07:24:00 +0000 Manifest this update: Wed 17 Sep 2025 07:24:00 +0000 Manifest next update: Wed 24 Sep 2025 07:24:00 +0000 Files and hashes: 1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: 9EoW/2mFONB8B7U1v8KRybhk5BRJ/ZcWI3MBoSoDEAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Validity Not Before: Sep 17 07:24:00 2025 GMT Not After : Sep 24 07:24:00 2025 GMT Subject: CN=68ca6210-3554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:b6:5c:3a:02:11:1c:f5:d4:db:11:1b:a0: 84:3f:97:56:14:9c:3c:62:25:a5:24:0e:cf:90:4f: 6d:ff:18:ff:6c:f1:60:30:ca:4e:f1:4b:00:86:2c: 58:d5:ee:5f:40:4a:f0:31:ed:5f:01:48:01:08:d2: dd:b7:5a:f8:ce:29:c5:2d:eb:64:ee:03:65:dd:36: 73:b5:cf:a6:89:b8:02:43:1d:d0:bf:11:30:f6:02: 1e:12:76:8f:54:bb:e1:1b:a9:70:dd:32:12:30:94: 39:ae:c6:85:d9:ec:82:08:fe:4c:48:78:fd:86:9c: 2f:54:b2:53:e9:bb:51:45:97:2d:11:70:d5:91:b6: aa:06:ea:8f:59:04:61:d8:08:69:b6:98:51:47:87: 57:0d:fc:7d:46:ec:6c:27:a9:9c:7f:d5:08:4c:9e: 8b:d9:93:eb:54:47:5d:fa:74:0d:ea:fc:b3:d5:bd: 26:de:c2:41:54:b5:e2:58:17:0e:80:de:c3:fa:76: d1:d5:10:9e:be:dc:f3:c5:b4:d7:8a:e3:f4:a5:3f: fb:33:0b:e9:39:60:4f:6c:fb:24:e7:7f:ff:92:33: bb:ea:58:7d:ad:df:6c:2c:8f:03:3a:b3:94:eb:82: 2e:19:85:b3:32:d5:1d:90:6c:33:34:e9:21:ed:11: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:37:AD:9B:43:6D:C7:0A:FF:3E:9D:56:8C:7F:95:84:1C:75:96 X509v3 Authority Key Identifier: keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e6:6f:49:3f:d9:98:c5:bb:fa:26:91:89:27:c6:53:cc:96: 1b:80:a8:a2:fa:9f:e1:34:b1:25:20:c9:ee:15:1c:af:88:77: 74:e6:b6:7a:b2:58:df:57:3a:e3:3b:b6:5e:67:43:5d:a0:c6: a7:7f:0a:e9:63:41:a9:58:db:66:19:c6:50:3b:78:4d:03:05: 16:c8:ee:d5:5a:11:ce:e3:a3:7e:34:7d:98:12:6d:73:1c:ad: 04:b8:67:85:22:70:66:ae:d7:cc:bd:3d:a6:9c:8e:e2:57:fa: 6b:f4:59:32:ed:cf:7c:56:eb:65:30:54:da:4f:f7:34:75:b6: 69:d8:72:3e:81:31:e2:12:5f:7d:ee:46:ef:62:d5:ee:b4:5a: 6e:6c:44:64:b4:0c:08:a9:30:9b:fb:d8:09:8d:3b:69:25:9b: 5a:2c:95:d3:94:b8:87:42:0f:ed:63:92:b6:33:77:49:ca:4b: e8:36:81:cd:7b:1a:1f:51:30:9a:34:97:3c:76:21:c3:ad:60: 51:54:cf:74:f2:54:59:8d:b5:7b:72:ab:cc:37:23:c4:48:7f: 98:bb:90:0d:d6:3a:78:84:f4:1a:c8:a8:0a:34:35:d9:f9:cc: 76:d0:66:5d:e6:4f:1f:a3:1e:ea:d4:c4:49:f7:20:d3:f6:56: 53:e1:cc:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODZDMjExMC8GA1UEBRMoMjQ3MjJEMzFDMjUxM0U0RTdGODdFREI3MERGRTlEQzk0 Rjg0NjhCQTAeFw0yNTA5MTcwNzI0MDBaFw0yNTA5MjQwNzI0MDBaMBgxFjAUBgNV BAMTDTY4Y2E2MjEwLTM1NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBPrZcOgIRHPXU2xEboIQ/l1YUnDxiJaUkDs+QT23/GP9s8WAwyk7xSwCGLFjV 7l9ASvAx7V8BSAEI0t23WvjOKcUt62TuA2XdNnO1z6aJuAJDHdC/ETD2Ah4Sdo9U u+EbqXDdMhIwlDmuxoXZ7III/kxIeP2GnC9UslPpu1FFly0RcNWRtqoG6o9ZBGHY CGm2mFFHh1cN/H1G7GwnqZx/1QhMnovZk+tUR136dA3q/LPVvSbewkFUteJYFw6A 3sP6dtHVEJ6+3PPFtNeK4/SlP/szC+k5YE9s+yTnf/+SM7vqWH2t32wsjwM6s5Tr gi4ZhbMy1R2QbDM06SHtEXbRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtkA3rZtD bccK/z6dVox/lYQcdZYwHwYDVR0jBBgwFoAUJHItMcJRPk5/h+23Df6dyU+EaLow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NkMyLzI1NTVCRjA2RDE3 RjExRUZCMzg0NjkyOEM0RjlBRTAyL0pISXRNY0pSUGs1X2gtMjNEZjZkeVUtRWFM by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkhJdE1jSlJQazVfaC0yM0RmNmR5VS1FYUxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NkMyLzI1NTVCRjA2RDE3RjExRUZCMzg0NjkyOEM0RjlBRTAyL0pISXRNY0pSUGs1 X2gtMjNEZjZkeVUtRWFMby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHnmb0k/2ZjFu/omkYknxlPMlhuAqKL6n+E0sSUgye4VHK+Id3Tmtnqy WN9XOuM7tl5nQ12gxqd/CuljQalY22YZxlA7eE0DBRbI7tVaEc7jo340fZgSbXMc rQS4Z4UicGau18y9PaacjuJX+mv0WTLtz3xW62UwVNpP9zR1tmnYcj6BMeISX33u Ru9i1e60Wm5sRGS0DAipMJv72AmNO2klm1osldOUuIdCD+1jkrYzd0nKS+g2gc17 Gh9RMJo0lzx2IcOtYFFUz3TyVFmNtXtyq8w3I8RIf5i7kA3WOniE9BrIqAo0Ndn5 zHbQZl3mTx+jHurUxEn3INP2VlPhzMA= -----END CERTIFICATE-----Generated at Fri Sep 19 05:26:07 2025 by rpki-client