$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: 6YeYd74U9ApuGMp3/moc79aeXAh+Mvyt6LN/IKs4bvk= Subject key identifier: 01:2B:AC:90:25:AD:DC:29:F9:6E:51:44:E2:A1:08:43:ED:61:A7:D2 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 0175 Signing time: Fri 19 Sep 2025 04:25:11 +0000 Manifest this update: Fri 19 Sep 2025 04:25:11 +0000 Manifest next update: Fri 26 Sep 2025 04:25:11 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: RJq4gBXoh5PiT3i27e7GWbA7V5AbTObcssSJAFth4Co=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Sep 19 04:25:11 2025 GMT Not After : Sep 26 04:25:11 2025 GMT Subject: CN=68ccdb27-5992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:2b:26:08:ac:40:7d:87:aa:0a:7c:cc:21: d3:6c:f8:03:4c:50:1b:d0:5b:bf:bb:c7:23:be:f9: 61:6b:39:26:f9:d8:4c:91:b2:33:47:2a:ed:86:bd: 56:cf:e4:5f:54:4c:5c:ec:b5:92:09:78:a4:1f:94: 5b:e2:14:eb:9e:85:18:5c:96:60:2e:e8:e2:e6:d9: 23:24:f4:fb:25:5c:21:fe:9a:09:96:f9:86:6f:02: ec:2e:45:78:a3:6d:c1:3b:e4:9c:1a:c9:99:d6:8b: ba:b9:84:3e:da:26:f5:e0:13:e5:cd:2d:1b:74:1c: e2:99:dd:44:7e:db:eb:eb:e9:c1:93:e8:05:48:4a: 83:ec:05:b6:28:b1:39:3c:60:b0:5d:2e:cd:20:f4: 8d:4d:15:1e:ae:f0:83:25:3c:b7:06:cd:fc:e7:50: 1d:5f:9a:ea:05:04:16:a5:85:c7:10:25:ad:0c:96: cd:ab:2c:b6:9f:79:3d:db:7d:71:ef:7a:ac:d1:22: 3f:91:c3:a1:65:93:53:35:b2:56:34:9c:80:26:ca: 2d:f2:4d:5f:7f:a5:a0:1b:a2:8d:d0:6a:4e:76:40: 14:3a:aa:e6:dd:5d:65:87:ea:6b:ae:39:f1:48:a0: 57:10:ca:bf:b3:75:8b:98:75:47:68:9f:6d:f3:b4: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2B:AC:90:25:AD:DC:29:F9:6E:51:44:E2:A1:08:43:ED:61:A7:D2 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6c:3c:74:85:b3:e8:00:82:84:d8:61:41:b9:79:8d:c6:b7: 38:0b:c5:4d:30:cd:90:f0:b2:b5:76:9f:a1:f9:47:98:8a:46: 9a:5c:1d:93:61:09:26:bd:4e:54:8e:9b:2f:71:d2:15:a7:4b: ec:4b:bc:38:31:9e:7b:c5:58:f4:eb:c5:7e:87:fa:f6:28:e7: 7f:9a:61:29:89:06:81:da:92:8f:12:ab:da:a4:c1:a3:f2:39: 35:bc:80:d8:05:58:e6:81:3e:4d:92:15:71:c5:33:b5:63:60: 39:ef:57:1c:91:5b:3d:b1:cc:20:02:67:a9:e2:ad:2e:c7:14: fa:a1:5e:35:71:ec:d0:4f:50:51:7e:b6:52:f4:89:fd:83:e5: 1f:7a:f6:7f:1d:a8:1d:63:d7:5f:ac:d5:30:e2:f8:9c:60:1d: 3a:4d:46:94:b2:ba:64:41:db:ed:ab:0f:40:55:16:11:e8:e6: b3:4e:a2:cc:ec:9b:fb:81:d8:0a:8f:d1:41:02:39:06:f1:f4: 9e:a6:3f:78:73:0f:b9:7f:d1:e7:53:96:5d:05:93:f1:27:e7: 63:73:87:c1:54:b1:92:15:e0:9d:4f:80:d2:60:8d:1e:be:f5: 5b:63:08:42:6e:df:b1:7f:03:86:a6:57:1a:e4:80:4d:68:9b: 90:fb:b2:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUwOTE5MDQyNTExWhcNMjUwOTI2MDQyNTExWjAYMRYwFAYD VQQDEw02OGNjZGIyNy01OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/krJgisQH2Hqgp8zCHTbPgDTFAb0Fu/u8cjvvlhazkm+dhMkbIzRyrthr1W z+RfVExc7LWSCXikH5Rb4hTrnoUYXJZgLuji5tkjJPT7JVwh/poJlvmGbwLsLkV4 o23BO+ScGsmZ1ou6uYQ+2ib14BPlzS0bdBzimd1Eftvr6+nBk+gFSEqD7AW2KLE5 PGCwXS7NIPSNTRUervCDJTy3Bs3851AdX5rqBQQWpYXHECWtDJbNqyy2n3k9231x 73qs0SI/kcOhZZNTNbJWNJyAJsot8k1ff6WgG6KN0GpOdkAUOqrm3V1lh+prrjnx SKBXEMq/s3WLmHVHaJ9t87SQLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAErrJAl rdwp+W5RROKhCEPtYafSMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIbDx0hbPoAIKE2GFBuXmNxrc4C8VNMM2Q8LK1dp+h+UeYikaaXB2T YQkmvU5UjpsvcdIVp0vsS7w4MZ57xVj068V+h/r2KOd/mmEpiQaB2pKPEqvapMGj 8jk1vIDYBVjmgT5NkhVxxTO1Y2A571cckVs9scwgAmep4q0uxxT6oV41cezQT1BR frZS9In9g+UfevZ/HagdY9dfrNUw4vicYB06TUaUsrpkQdvtqw9AVRYR6OazTqLM 7Jv7gdgKj9FBAjkG8fSepj94cw+5f9HnU5ZdBZPxJ+djc4fBVLGSFeCdT4DSYI0e vvVbYwhCbt+xfwOGplca5IBNaJuQ+7KZ -----END CERTIFICATE-----Generated at Fri Sep 19 16:47:12 2025 by rpki-client