$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: 6BUkVT6ClWrl8dO9EzmnTtz8enXoqL/u9Dvt9koCmvM= Subject key identifier: 68:25:B9:F7:E3:54:44:B5:C7:59:5E:4D:D0:34:66:02:9D:77:F6:FA Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 0713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 070E Signing time: Sat 06 Sep 2025 22:07:31 +0000 Manifest this update: Sat 06 Sep 2025 22:07:30 +0000 Manifest next update: Sat 13 Sep 2025 22:07:30 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: /ObMKNLq3MOEa6hbOY3P5GchtOlNW3LxKkSY7CIflqI=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Sep 6 22:07:30 2025 GMT Not After : Sep 13 22:07:30 2025 GMT Subject: CN=68bcb0a2-2b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:33:ef:df:b3:d7:01:d5:4b:29:92:85:65: 2c:ee:f7:73:86:4e:ee:43:b1:8a:c5:68:aa:71:4f: e7:77:a1:a5:88:4c:24:48:6b:40:f2:f8:60:11:dc: a7:a5:82:29:d3:06:9d:95:3a:11:c5:0f:16:bf:fa: 7e:5b:f9:11:c6:18:78:82:c3:36:7d:fe:43:ed:25: ec:b0:1c:3f:5e:8e:f3:ea:03:b2:7f:da:c6:1a:b7: 1f:26:c1:3f:fc:1d:42:02:c4:5f:9f:aa:e1:4b:61: 90:21:36:eb:a8:96:87:bf:bc:e8:10:67:c0:28:78: 70:d7:9a:c6:35:c9:6d:0d:bf:1f:b6:7e:f1:5b:3b: b6:6c:a7:93:4e:c9:a0:de:c3:13:25:f0:9c:f0:05: 01:2d:e0:04:79:0d:5a:08:33:6f:b9:dd:e1:3b:4c: 3d:0c:dd:ec:cf:ad:0b:71:04:28:5c:7d:d0:24:ae: 87:77:69:e2:27:80:a9:46:d4:2e:59:55:c5:9f:f5: f7:66:ad:80:4e:7e:be:ec:b4:36:04:e1:83:a7:f3: 64:4a:e7:97:ac:50:21:ba:01:c3:26:df:ce:a6:10: 7a:85:3d:20:bd:2e:70:2a:e9:52:82:bd:0a:e0:83: a1:2c:29:ff:94:29:bc:fd:34:94:4a:d1:19:48:54: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:25:B9:F7:E3:54:44:B5:C7:59:5E:4D:D0:34:66:02:9D:77:F6:FA X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:70:3f:ad:32:9f:6e:2e:3c:f2:c5:91:2e:9c:bf:66:6c:a5: 53:2d:f6:6f:3e:b3:df:04:3c:93:99:15:fd:6f:d1:e3:c8:4a: 88:92:80:a6:1e:84:96:dd:8d:7a:bc:8b:73:bf:b6:cc:61:df: d1:9c:2e:81:31:16:42:c4:63:8d:90:1a:a2:ea:0d:2c:ca:69: d5:d2:0b:6b:31:3c:b9:50:c8:0f:8a:32:fc:d8:35:92:86:c4: cd:af:aa:d6:90:5a:31:9c:bb:e0:fb:06:9a:9f:95:68:79:67: 9c:f7:db:ba:e0:4c:4d:d7:91:58:06:03:3a:ec:ad:84:02:b7: ec:44:6c:7a:49:35:fc:41:c6:2f:f5:3e:77:1d:75:dd:94:08: 82:54:8b:1a:66:06:3a:19:97:e9:d3:04:6b:a9:94:1f:c8:fe: c7:d0:22:32:8a:a8:de:21:be:d4:23:c9:60:7a:28:9c:be:57: 89:c0:05:c3:de:33:f4:06:ef:e4:97:e1:5e:f8:d3:97:fa:15: ce:d7:62:48:73:95:ce:e4:5f:c2:cf:d3:43:6a:a4:5d:1f:df: f7:07:3d:1d:63:87:0a:b9:03:4e:0c:17:2e:26:4b:c5:54:9f: 04:9c:38:70:87:11:16:92:95:25:0f:3d:5f:59:8b:99:a4:5f: a6:38:28:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjUwOTA2MjIwNzMwWhcNMjUwOTEzMjIwNzMwWjAYMRYwFAYD VQQDEw02OGJjYjBhMi0yYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFUz79+z1wHVSymShWUs7vdzhk7uQ7GKxWiqcU/nd6GliEwkSGtA8vhgEdyn pYIp0wadlToRxQ8Wv/p+W/kRxhh4gsM2ff5D7SXssBw/Xo7z6gOyf9rGGrcfJsE/ /B1CAsRfn6rhS2GQITbrqJaHv7zoEGfAKHhw15rGNcltDb8ftn7xWzu2bKeTTsmg 3sMTJfCc8AUBLeAEeQ1aCDNvud3hO0w9DN3sz60LcQQoXH3QJK6Hd2niJ4CpRtQu WVXFn/X3Zq2ATn6+7LQ2BOGDp/NkSueXrFAhugHDJt/OphB6hT0gvS5wKulSgr0K 4IOhLCn/lCm8/TSUStEZSFRPiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgluffj VES1x1leTdA0ZgKdd/b6MB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBscD+tMp9uLjzyxZEunL9mbKVTLfZvPrPfBDyTmRX9b9HjyEqIkoCm HoSW3Y16vItzv7bMYd/RnC6BMRZCxGONkBqi6g0symnV0gtrMTy5UMgPijL82DWS hsTNr6rWkFoxnLvg+waan5VoeWec99u64ExN15FYBgM67K2EArfsRGx6STX8QcYv 9T53HXXdlAiCVIsaZgY6GZfp0wRrqZQfyP7H0CIyiqjeIb7UI8lgeiicvleJwAXD 3jP0Bu/kl+Fe+NOX+hXO12JIc5XO5F/Cz9NDaqRdH9/3Bz0dY4cKuQNODBcuJkvF VJ8EnDhwhxEWkpUlDz1fWYuZpF+mOCja -----END CERTIFICATE-----Generated at Mon Sep 8 21:38:35 2025 by rpki-client