$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json) Hash identifier: gyPAKSy7RUSbsTuz7fvKWu+COsjph4JHZcZb5KH3DJo= Subject key identifier: 10:85:7C:CB:71:BA:F3:24:47:1C:52:87:24:6E:C2:BC:1C:36:00:C9 Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft Manifest number: 68 Signing time: Wed 17 Sep 2025 07:52:11 +0000 Manifest this update: Wed 17 Sep 2025 07:52:10 +0000 Manifest next update: Wed 24 Sep 2025 07:52:10 +0000 Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: sdrQJRD4Tgxcw8GdtLovmjFNJU9Z63kPDWWnHSW5mw4=) 2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: 2g0YcwmcNYvF1yQbVU8JT3MVONcEq3Lo2nc0de/dtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Validity Not Before: Sep 17 07:52:10 2025 GMT Not After : Sep 24 07:52:10 2025 GMT Subject: CN=68ca68aa-4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:50:42:df:ca:66:24:e0:de:8c:13:ad:2b: 22:3b:b6:ba:9a:60:b2:bd:49:ae:ff:54:73:6a:23: af:a1:50:a3:ef:9e:d5:af:e8:d6:6c:0e:21:cd:07: 03:0e:3f:a5:6e:c2:ec:f9:d1:e2:d8:1b:d9:c8:8f: f1:2c:40:fe:50:3e:ce:60:6b:b1:bf:04:cc:7f:48: 26:e8:8c:f2:c9:21:38:5a:d1:00:e9:af:48:90:1e: 14:e2:ff:8c:f0:4e:a3:91:06:cf:70:3a:80:a2:3b: af:82:d9:fc:4b:79:1c:30:b0:ad:4e:68:9e:d3:83: db:49:87:29:13:f2:9a:96:90:64:49:22:21:6e:d1: 3a:26:02:51:82:81:f5:3c:1c:9c:ad:50:b7:22:b5: 86:e6:3a:d3:52:aa:aa:fb:bc:14:eb:44:a7:6f:1c: a7:3a:e8:fc:d9:d3:7f:7e:62:c9:2d:f9:eb:9e:39: e7:fa:a0:a3:03:3f:45:dc:c0:62:d3:01:ed:c2:4f: 92:d0:da:0e:46:12:09:3a:35:a3:1c:50:50:a3:63: d2:48:9c:f2:87:73:b6:37:ee:30:1e:52:71:3f:4d: c7:88:37:ee:60:57:d9:ef:e8:bd:d2:aa:13:9e:9b: 16:96:4a:1d:ae:5c:cf:cd:6a:80:43:8a:10:1b:a5: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:85:7C:CB:71:BA:F3:24:47:1C:52:87:24:6E:C2:BC:1C:36:00:C9 X509v3 Authority Key Identifier: keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:0d:72:ae:da:73:dc:a1:68:c7:b3:e7:4d:9c:5b:d3:bd:c8: 89:5b:ad:24:b7:7f:19:16:36:9a:81:d3:91:10:32:ac:9b:30: 54:c9:a2:66:d6:e2:4c:8d:c7:59:b3:b5:42:68:de:dd:16:30: 78:fb:bd:f8:c7:d0:cd:fc:5d:7f:95:57:4a:82:2f:96:43:e0: b9:ac:5c:9b:6a:fc:f7:b5:03:ca:2d:09:4c:96:f3:06:66:7a: 97:79:df:a0:54:e0:55:4e:ea:e4:9e:1a:7c:62:f0:01:80:85: d2:74:bb:41:f8:69:c2:47:17:24:09:29:62:49:69:6c:7e:a6: 8e:4b:ae:55:10:fc:12:c9:25:b1:3b:f7:b7:65:fc:27:7d:cc: ec:73:fb:57:7b:8c:f6:a8:37:8a:ec:ab:8b:47:d5:86:85:17: c6:cd:25:89:f9:3f:9e:c3:44:15:c2:5e:25:b5:e9:92:69:b4: 2e:6d:48:06:43:e3:35:e1:f8:be:ef:bd:20:e8:fa:ff:5a:c6: 92:05:28:96:b4:39:ed:d7:65:c5:c0:94:1e:4c:8c:25:5e:06: 54:dd:17:e2:89:81:20:3c:39:25:69:01:aa:7d:10:41:33:ab: 98:e9:f3:fe:bb:06:9b:9d:fe:fb:51:3c:6e:b8:c9:3d:b3:c0: b3:6b:89:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE1NzExMC8GA1UEBRMoMjYyRUMyMEQzMkJDMTMyRDdEMjA0QzM0NDgyMjI5Nzky NDIxQ0Y3MDAeFw0yNTA5MTcwNzUyMTBaFw0yNTA5MjQwNzUyMTBaMBgxFjAUBgNV BAMTDTY4Y2E2OGFhLTRhNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTC1BC38pmJODejBOtKyI7trqaYLK9Sa7/VHNqI6+hUKPvntWv6NZsDiHNBwMO P6Vuwuz50eLYG9nIj/EsQP5QPs5ga7G/BMx/SCbojPLJITha0QDpr0iQHhTi/4zw TqORBs9wOoCiO6+C2fxLeRwwsK1OaJ7Tg9tJhykT8pqWkGRJIiFu0TomAlGCgfU8 HJytULcitYbmOtNSqqr7vBTrRKdvHKc66PzZ039+Yskt+eueOef6oKMDP0XcwGLT Ae3CT5LQ2g5GEgk6NaMcUFCjY9JInPKHc7Y37jAeUnE/TceIN+5gV9nv6L3SqhOe mxaWSh2uXM/NaoBDihAbpVqhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEIV8y3G6 8yRHHFKHJG7CvBw2AMkwHwYDVR0jBBgwFoAUJi7CDTK8Ey19IEw0SCIpeSQhz3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTU3LzA2QjJCOEUyMDcy NjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkxOUlFdzBTQ0lwZVNRaHoz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmk3Q0RUSzhFeTE5SUV3MFNDSXBlU1FoejNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTU3LzA2QjJCOEUyMDcyNjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkx OUlFdzBTQ0lwZVNRaHozQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALsNcq7ac9yhaMez502cW9O9yIlbrSS3fxkWNpqB05EQMqybMFTJombW 4kyNx1mztUJo3t0WMHj7vfjH0M38XX+VV0qCL5ZD4LmsXJtq/Pe1A8otCUyW8wZm epd536BU4FVO6uSeGnxi8AGAhdJ0u0H4acJHFyQJKWJJaWx+po5LrlUQ/BLJJbE7 97dl/Cd9zOxz+1d7jPaoN4rsq4tH1YaFF8bNJYn5P57DRBXCXiW16ZJptC5tSAZD 4zXh+L7vvSDo+v9axpIFKJa0Oe3XZcXAlB5MjCVeBlTdF+KJgSA8OSVpAap9EEEz q5jp8/67Bpud/vtRPG64yT2zwLNriWY= -----END CERTIFICATE-----Generated at Thu Sep 18 20:34:48 2025 by rpki-client