$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: WQKBlRJw6tAtcmtveaoJlinHX01H7rkkYynnhk5RkMk= Subject key identifier: 96:BB:9E:A7:7B:F0:4C:D6:65:8B:79:F3:7B:68:39:CC:96:38:C7:18 Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 34C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 34BA Signing time: Sun 24 Aug 2025 15:07:15 +0000 Manifest this update: Sun 24 Aug 2025 15:07:14 +0000 Manifest next update: Sun 31 Aug 2025 15:07:14 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: 10tGEJD2gU+SVtR4XSeuQHSmxSCvoHFQG3/ZKhyEUxM=) 2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Aug 24 15:07:14 2025 GMT Not After : Aug 31 15:07:14 2025 GMT Subject: CN=68ab2aa3-ce7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:8f:36:d3:7a:d4:37:fc:1a:4f:09:70:23: a0:c8:cc:f1:40:a4:ec:40:19:7c:dd:30:05:da:1f: 40:2e:b9:03:83:7f:cd:dc:91:c3:17:e1:c0:d2:0a: 73:82:11:6c:7f:43:08:a1:64:d4:21:f1:0b:07:79: 8e:50:87:6a:5c:9b:46:11:a2:27:9a:36:a2:8b:e6: fa:00:e4:c1:ac:70:5a:04:ef:a4:b1:14:b3:d9:c8: 6c:02:c4:98:b8:7c:0c:2a:b9:e9:37:d3:fe:21:61: d0:1a:20:7e:50:54:ff:ee:23:f0:f7:c3:d4:ba:ea: 18:d9:e7:c7:ce:00:b7:aa:93:30:84:f9:f5:d1:f2: 2a:3f:1c:8b:47:c6:2d:69:16:2f:8b:3a:65:f7:db: f5:8a:db:16:e3:da:5c:de:f3:88:79:aa:8c:99:53: ef:0e:89:a8:29:53:26:16:b9:60:b3:8e:d6:07:9f: 69:2b:b8:96:8e:46:0d:bb:8d:48:88:ed:b3:83:4b: bb:0a:bb:44:c5:03:b3:82:f1:32:05:52:3a:25:1b: 85:c4:17:9a:43:e9:c4:6e:86:fa:6f:26:d9:3e:36: 0c:b4:94:eb:7f:18:91:57:ca:0b:34:29:54:77:92: 62:39:46:56:9c:f0:c6:a6:d1:ec:37:2d:6a:51:0f: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BB:9E:A7:7B:F0:4C:D6:65:8B:79:F3:7B:68:39:CC:96:38:C7:18 X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d3:fc:c9:23:9f:3f:dc:72:04:00:27:9b:ed:cf:d3:6a:e0: 95:c9:b2:98:0f:1a:c0:16:7f:5f:11:67:e2:91:fc:30:c7:36: 65:d7:63:85:64:85:9c:69:08:d3:e6:e8:bf:e9:8e:c4:c1:59: 9a:10:83:8c:f4:e2:4e:f2:61:e5:e2:80:f3:07:39:14:2a:d3: d2:51:f2:48:f9:12:27:6f:a4:0d:52:2b:2b:a2:99:44:26:ae: e5:dc:71:02:87:23:cb:f1:ce:d9:ac:b3:15:9e:df:50:e8:df: db:44:38:18:fa:28:5b:8f:d5:73:c4:63:51:a0:f7:3a:f8:4a: cc:99:85:47:91:05:26:ae:2e:d7:14:85:f7:57:89:47:01:22: 57:ad:9d:18:74:29:9f:d0:6a:ba:04:9a:0c:0f:a5:a8:10:2e: f5:a0:17:68:d5:fe:ac:48:1b:0f:8c:40:f5:00:98:65:8e:e0: e5:b8:ad:f3:fb:84:69:4d:57:fa:ee:6a:23:1f:aa:d5:c7:7e: f2:9a:f2:32:00:31:7b:9b:f8:bb:ec:88:23:86:1a:9c:a9:a0: 4e:13:67:88:dd:23:cf:4e:ac:de:f4:fd:59:2e:84:16:22:a2: 1d:00:d1:3a:61:bc:04:7f:7e:4d:8b:ab:c0:3b:7d:41:f1:50: e2:01:ea:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjUwODI0MTUwNzE0WhcNMjUwODMxMTUwNzE0WjAYMRYwFAYD VQQDEw02OGFiMmFhMy1jZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf2PNtN61Df8Gk8JcCOgyMzxQKTsQBl83TAF2h9ALrkDg3/N3JHDF+HA0gpz ghFsf0MIoWTUIfELB3mOUIdqXJtGEaInmjaii+b6AOTBrHBaBO+ksRSz2chsAsSY uHwMKrnpN9P+IWHQGiB+UFT/7iPw98PUuuoY2efHzgC3qpMwhPn10fIqPxyLR8Yt aRYvizpl99v1itsW49pc3vOIeaqMmVPvDomoKVMmFrlgs47WB59pK7iWjkYNu41I iO2zg0u7CrtExQOzgvEyBVI6JRuFxBeaQ+nEbob6bybZPjYMtJTrfxiRV8oLNClU d5JiOUZWnPDGptHsNy1qUQ+vYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJa7nqd7 8EzWZYt583toOcyWOMcYMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv0/zJI58/3HIEACeb7c/TauCVybKYDxrAFn9fEWfikfwwxzZl12OF ZIWcaQjT5ui/6Y7EwVmaEIOM9OJO8mHl4oDzBzkUKtPSUfJI+RInb6QNUisroplE Jq7l3HEChyPL8c7ZrLMVnt9Q6N/bRDgY+ihbj9VzxGNRoPc6+ErMmYVHkQUmri7X FIX3V4lHASJXrZ0YdCmf0Gq6BJoMD6WoEC71oBdo1f6sSBsPjED1AJhljuDluK3z +4RpTVf67mojH6rVx37ymvIyADF7m/i77IgjhhqcqaBOE2eI3SPPTqze9P1ZLoQW IqIdANE6YbwEf35Ni6vAO31B8VDiAerI -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:32 2025 by rpki-client