$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: e6Aiy6AXdfBO/2mUCTnLahMLnnbi9Y+C+QeIajTNeOI= Subject key identifier: 8A:29:F8:40:7B:49:EE:3E:01:13:3D:C8:F6:85:72:1E:E1:91:96:30 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 01E1 Signing time: Fri 05 Sep 2025 03:02:52 +0000 Manifest this update: Fri 05 Sep 2025 03:02:51 +0000 Manifest next update: Fri 12 Sep 2025 03:02:51 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: VT89Bu6AbivTE+G45mRfqUFJN8dCgGwC7juz7J5wFD8=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: jmqDKa5arq4fgvLtUOSSDm4TPSp4JnFMPE58CkrLpbg=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: DgdiiCMEKe93Jsgcn1AG1optizE0ES0MbtD24A2hP+4=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: RaeRinKNGLed6XLJqu8FU+BHOJQNHJHt8FZoOYMBImQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Sep 5 03:02:51 2025 GMT Not After : Sep 12 03:02:51 2025 GMT Subject: CN=68ba52db-8a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:d8:6c:cb:b0:e1:2a:d6:f5:5b:ce:18:08: 47:90:69:5d:a0:b9:16:23:1f:5f:26:3a:08:03:67: 49:6c:a5:85:e4:b6:f5:1b:c5:39:12:14:ad:e3:ac: 43:63:a5:c0:63:d8:e6:ea:bd:ad:0a:bf:7f:b7:c8: d4:6b:88:0f:68:93:84:c8:25:00:00:de:00:24:bc: 3e:de:e1:c3:07:fa:1a:5a:3a:38:b3:26:a1:72:44: 6e:36:04:46:6d:87:c7:56:1b:47:db:4c:12:d6:e8: 38:38:aa:07:16:9d:2e:9b:f4:bb:f4:8a:cf:2f:5b: a8:61:34:d2:59:34:09:10:4d:14:83:50:e7:08:91: 87:23:93:06:40:41:35:e0:22:9b:42:6e:7f:01:c3: e4:d1:b8:8e:24:7a:6d:de:63:79:ef:99:74:cc:68: 90:ca:cb:c9:75:64:9e:72:06:2f:cd:03:16:8d:30: 8b:23:d3:ce:8b:87:ef:dd:0a:8d:1b:51:71:48:59: 44:64:59:09:4a:b2:2f:71:2c:74:ba:24:cb:d4:44: f1:53:56:7f:4d:fe:bb:90:2c:81:89:b2:0d:3c:0a: 45:76:56:74:e3:ec:0f:b2:41:a5:9e:d8:8e:f1:83: 67:0d:97:4e:6d:c1:c6:1e:03:03:59:c2:35:48:77: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:F8:40:7B:49:EE:3E:01:13:3D:C8:F6:85:72:1E:E1:91:96:30 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d1:df:ca:a1:b3:82:81:00:18:40:ff:e9:08:f5:91:a3:41: 02:05:37:cd:6e:be:5f:43:18:58:a0:5e:5f:b7:68:fb:a5:d1: ee:de:50:92:2c:0f:d5:31:2a:58:86:f6:7c:f0:ae:ef:08:fa: 45:2c:ff:16:4a:d3:6b:87:fd:1b:ea:35:10:13:87:d7:3f:38: ce:23:79:78:59:f5:8d:41:81:3d:e6:52:8b:e2:54:b4:82:bd: bb:0a:52:37:4f:8c:7f:60:cb:d4:29:28:a5:31:ac:81:de:e0: b0:87:fa:13:a3:e1:4b:d5:30:7d:c2:31:8a:78:28:cc:3c:53: 27:63:cf:83:08:23:be:7e:e5:d1:a2:fb:df:38:4b:f6:a5:89: 4f:c0:e2:52:64:c3:c7:5f:40:0c:f3:b9:9e:e5:91:05:df:d8: ff:17:af:ba:dc:fd:fb:e5:55:f3:2d:cd:19:b2:ba:32:1c:08: 05:db:22:ae:21:18:88:1a:3c:16:78:37:ab:0f:ac:8c:05:9a: d7:8a:41:e5:73:0f:f5:94:16:73:1e:af:ad:32:0c:0c:57:00: 3f:06:a1:ea:ec:63:16:d5:e4:b3:a0:d6:49:3d:1c:b3:20:6a: 91:d6:f0:4f:56:5d:ec:42:d4:0f:61:65:5d:ce:a5:a4:6e:e9: 00:07:a3:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUwOTA1MDMwMjUxWhcNMjUwOTEyMDMwMjUxWjAYMRYwFAYD VQQDEw02OGJhNTJkYi04YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNbYbMuw4SrW9VvOGAhHkGldoLkWIx9fJjoIA2dJbKWF5Lb1G8U5EhSt46xD Y6XAY9jm6r2tCr9/t8jUa4gPaJOEyCUAAN4AJLw+3uHDB/oaWjo4syahckRuNgRG bYfHVhtH20wS1ug4OKoHFp0um/S79IrPL1uoYTTSWTQJEE0Ug1DnCJGHI5MGQEE1 4CKbQm5/AcPk0biOJHpt3mN575l0zGiQysvJdWSecgYvzQMWjTCLI9POi4fv3QqN G1FxSFlEZFkJSrIvcSx0uiTL1ETxU1Z/Tf67kCyBibINPApFdlZ04+wPskGlntiO 8YNnDZdObcHGHgMDWcI1SHfIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIop+EB7 Se4+ARM9yPaFch7hkZYwMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS0d/KobOCgQAYQP/pCPWRo0ECBTfNbr5fQxhYoF5ft2j7pdHu3lCS LA/VMSpYhvZ88K7vCPpFLP8WStNrh/0b6jUQE4fXPzjOI3l4WfWNQYE95lKL4lS0 gr27ClI3T4x/YMvUKSilMayB3uCwh/oTo+FL1TB9wjGKeCjMPFMnY8+DCCO+fuXR ovvfOEv2pYlPwOJSZMPHX0AM87me5ZEF39j/F6+63P375VXzLc0ZsroyHAgF2yKu IRiIGjwWeDerD6yMBZrXikHlcw/1lBZzHq+tMgwMVwA/BqHq7GMW1eSzoNZJPRyz IGqR1vBPVl3sQtQPYWVdzqWkbukAB6Pb -----END CERTIFICATE-----Generated at Sat Sep 6 16:33:53 2025 by rpki-client