$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json) Hash identifier: 406KB7qC/3/PlQIceqnMn18RmAYhFO1XivsbbQJ0quQ= Subject key identifier: E3:F2:FA:52:3B:16:6F:10:6C:30:BA:20:36:8C:C1:40:5C:28:FA:7B Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft Manifest number: 057A Signing time: Thu 18 Sep 2025 23:35:30 +0000 Manifest this update: Thu 18 Sep 2025 23:35:30 +0000 Manifest next update: Thu 25 Sep 2025 23:35:30 +0000 Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: w1uyjQAXH0zTylm2PHG+DUa6MBhxXlwlfDb1x6dNilM=) 2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Validity Not Before: Sep 18 23:35:30 2025 GMT Not After : Sep 25 23:35:30 2025 GMT Subject: CN=68cc9742-8716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:8c:9b:bd:bb:fd:bb:5f:4b:bd:7b:08:0c: ce:96:9f:8e:a4:94:5b:1a:a8:d2:e7:81:45:9a:3b: 7a:b9:1c:ab:0d:b8:f8:50:bc:a2:41:eb:a9:ca:7f: b2:28:2b:bb:43:60:50:62:d9:4e:d8:13:13:f0:30: 0f:9e:e3:2f:b9:34:b8:4b:5a:58:d8:90:27:98:bc: 58:77:cd:04:3e:f4:10:70:62:6e:c9:1f:43:c4:c7: ff:ff:73:34:9b:19:d2:3d:c2:2a:97:b0:18:0f:aa: b1:47:f0:36:f6:fa:c8:a4:4e:ec:9c:6e:d5:de:45: 9d:62:f2:67:0b:64:00:a3:ee:97:83:fd:50:93:9c: 8b:8b:ae:75:32:85:87:36:6b:9a:de:2b:b8:2f:66: e3:92:ad:bc:30:91:72:3c:6b:bd:81:6d:0b:e2:1e: 69:e1:13:13:75:4b:76:b9:ff:8d:9e:8d:b0:f5:d0: e7:f5:35:25:86:8b:a1:e5:b1:d7:b5:fb:8d:31:7e: cd:12:0c:7d:6b:a0:4d:67:28:b5:34:f8:e1:66:6e: 3d:28:cd:7e:fe:47:3c:d4:e1:10:5c:c5:99:1c:c0: 0e:01:95:82:2f:41:e6:9e:32:2c:2c:36:ee:f9:11: 35:48:fa:20:8d:6a:2e:1b:20:40:d4:fa:f8:26:3f: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F2:FA:52:3B:16:6F:10:6C:30:BA:20:36:8C:C1:40:5C:28:FA:7B X509v3 Authority Key Identifier: keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f5:a0:13:5a:34:9f:52:18:49:49:ac:56:6a:8d:37:57:19: 97:8e:42:96:e4:7c:3a:f8:61:96:74:ae:39:f2:6f:73:5b:c1: bf:d2:56:52:f6:5d:22:60:e0:73:6e:b0:46:45:a9:ad:19:00: 62:0c:42:40:b4:a8:dd:6a:d9:28:ab:6c:70:7b:bd:f9:e6:8d: 23:54:ce:3a:3d:ca:14:b0:57:8c:37:39:34:53:4b:f8:95:25: 70:d1:c1:bd:58:11:9f:5c:8c:c3:25:ff:3b:90:f2:9f:71:15: ea:9b:89:0f:ab:11:b1:7f:06:ab:28:94:39:7e:21:1a:f7:0b: 6c:c4:9e:80:5d:79:d9:d1:c8:26:bb:c8:cb:70:ae:6c:7f:4a: d3:2a:04:73:be:4d:e6:65:ba:7e:e0:f9:34:86:2d:7d:29:c5: a7:46:87:76:06:c8:28:8f:72:b2:3e:dd:66:11:1e:87:d5:e1: 7c:ac:52:f7:23:73:28:74:41:0e:d3:48:fc:39:68:6e:e1:66: 10:77:21:ee:69:9c:4f:79:08:64:ef:ea:bd:31:82:25:b9:f5: 28:27:12:ce:70:ad:d3:d5:e9:88:72:b2:e3:0b:d8:4d:cb:35: 2e:67:6d:85:ba:65:98:71:81:26:d3:bb:e6:3a:13:7b:38:65: 3f:43:e4:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC MDY4MzQ0NjAwHhcNMjUwOTE4MjMzNTMwWhcNMjUwOTI1MjMzNTMwWjAYMRYwFAYD VQQDEw02OGNjOTc0Mi04NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNGMm727/btfS717CAzOlp+OpJRbGqjS54FFmjt6uRyrDbj4ULyiQeupyn+y KCu7Q2BQYtlO2BMT8DAPnuMvuTS4S1pY2JAnmLxYd80EPvQQcGJuyR9DxMf//3M0 mxnSPcIql7AYD6qxR/A29vrIpE7snG7V3kWdYvJnC2QAo+6Xg/1Qk5yLi651MoWH Nmua3iu4L2bjkq28MJFyPGu9gW0L4h5p4RMTdUt2uf+Nno2w9dDn9TUlhouh5bHX tfuNMX7NEgx9a6BNZyi1NPjhZm49KM1+/kc81OEQXMWZHMAOAZWCL0HmnjIsLDbu +RE1SPogjWouGyBA1Pr4Jj929QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPy+lI7 Fm8QbDC6IDaMwUBcKPp7MB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5 Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ9aATWjSfUhhJSaxWao03VxmXjkKW5Hw6+GGWdK458m9zW8G/0lZS 9l0iYOBzbrBGRamtGQBiDEJAtKjdatkoq2xwe7355o0jVM46PcoUsFeMNzk0U0v4 lSVw0cG9WBGfXIzDJf87kPKfcRXqm4kPqxGxfwarKJQ5fiEa9wtsxJ6AXXnZ0cgm u8jLcK5sf0rTKgRzvk3mZbp+4Pk0hi19KcWnRod2Bsgoj3KyPt1mER6H1eF8rFL3 I3ModEEO00j8OWhu4WYQdyHuaZxPeQhk7+q9MYIlufUoJxLOcK3T1emIcrLjC9hN yzUuZ22FumWYcYEm07vmOhN7OGU/Q+SV -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:56 2025 by rpki-client