$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: FYYq1y8/IWeBBZ8ZokTx6rdU7mFEzH1tLT97SFnvQ/8= Subject key identifier: 95:40:25:69:97:1E:F1:AA:6C:1C:F3:D4:8D:D0:C4:38:21:96:76:03 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0B3D Signing time: Wed 20 Aug 2025 19:21:32 +0000 Manifest this update: Wed 20 Aug 2025 19:21:31 +0000 Manifest next update: Wed 27 Aug 2025 19:21:31 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: DpsXAQFiKQKr5pVN6uqw8qEv7KiAb9mDNed9LLlsD/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Aug 20 19:21:31 2025 GMT Not After : Aug 27 19:21:31 2025 GMT Subject: CN=68a6203c-3f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:4f:d5:d0:01:8f:6a:e3:20:fc:22:4d:52: a8:1f:87:f8:2c:b1:9b:44:b6:90:59:b0:ef:79:19: 2f:7e:81:a2:77:22:60:df:35:1d:83:0c:21:a6:c4: db:92:ce:57:3e:ac:87:2e:ef:4c:64:28:46:ce:83: 09:fe:2e:ec:9b:c4:e2:79:18:68:1b:65:cf:d4:44: a9:17:c8:76:2b:a7:ba:5c:8d:f9:28:d5:83:81:0a: 6f:64:f5:d8:f0:89:ea:30:54:3e:23:77:42:8f:df: b2:95:52:f6:78:18:a0:3e:d1:1c:04:05:09:18:96: e9:7a:4d:fe:45:d0:94:18:ba:31:13:93:09:40:d3: 3c:69:ec:d9:67:a9:ce:79:4a:7c:2d:b1:c3:fd:5e: 63:4f:73:58:f8:d6:ba:ab:35:90:4f:37:98:cf:e2: d2:6c:34:26:69:72:f1:89:03:e4:fa:97:cb:fb:26: 18:1a:3a:13:5e:d5:54:4d:65:fc:ed:9b:86:8e:ed: 9c:61:27:ac:34:6c:6a:b2:ab:8c:e1:a7:5d:06:0d: a1:37:ea:f3:c5:e9:99:52:3d:67:74:a8:97:74:87: b5:62:b1:3c:b6:a2:d7:a6:29:9a:0f:5d:d4:3d:82: 42:b6:3a:a3:af:78:a7:84:a2:15:42:46:e7:62:03: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:40:25:69:97:1E:F1:AA:6C:1C:F3:D4:8D:D0:C4:38:21:96:76:03 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a7:cd:1b:ba:68:ba:d6:5c:3d:78:45:b4:90:eb:57:01:b4: e4:51:7d:04:b0:80:63:bf:15:6b:93:4e:68:b0:cd:0f:f0:90: ab:f0:64:8e:f0:a5:14:37:26:64:82:2b:91:f9:06:9d:b2:b9: fb:e7:be:43:15:8b:80:ae:ce:79:2a:8d:d9:28:b9:59:dc:97: bd:69:e2:a9:db:6b:fa:e4:27:28:10:21:d0:2e:31:f6:1d:3a: 43:e4:8d:6d:9b:36:ef:b0:e8:b7:1c:b0:d9:8c:3e:06:0a:5f: b8:04:49:5f:2b:62:bc:dc:b2:66:86:1c:8a:a5:45:c4:6f:17: 69:bd:11:cc:c9:25:57:5e:01:4f:e2:9f:f3:65:98:ab:b1:9e: aa:fd:70:a7:9f:be:f1:79:48:e1:c4:9c:1d:96:a8:cc:8a:9f: c2:7b:1f:6e:6e:11:e5:77:46:63:c7:fc:ff:33:94:5b:1d:00: b6:18:a0:fd:ae:b7:cb:46:b7:dd:7b:eb:f1:6f:fc:7c:09:74: 44:e6:1f:85:ca:50:3b:a1:af:d3:74:e3:d2:d4:38:0e:36:85: 30:c3:bf:3d:a9:4c:ad:b7:86:c8:1d:44:9c:66:99:46:91:5c: 39:6f:a4:40:c4:6a:23:93:02:92:50:94:e7:63:98:14:bb:30: 36:07:f8:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUwODIwMTkyMTMxWhcNMjUwODI3MTkyMTMxWjAYMRYwFAYD VQQDEw02OGE2MjAzYy0zZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlxP1dABj2rjIPwiTVKoH4f4LLGbRLaQWbDveRkvfoGidyJg3zUdgwwhpsTb ks5XPqyHLu9MZChGzoMJ/i7sm8TieRhoG2XP1ESpF8h2K6e6XI35KNWDgQpvZPXY 8InqMFQ+I3dCj9+ylVL2eBigPtEcBAUJGJbpek3+RdCUGLoxE5MJQNM8aezZZ6nO eUp8LbHD/V5jT3NY+Na6qzWQTzeYz+LSbDQmaXLxiQPk+pfL+yYYGjoTXtVUTWX8 7ZuGju2cYSesNGxqsquM4addBg2hN+rzxemZUj1ndKiXdIe1YrE8tqLXpimaD13U PYJCtjqjr3inhKIVQkbnYgNHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVAJWmX HvGqbBzz1I3QxDghlnYDMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIp80bumi61lw9eEW0kOtXAbTkUX0EsIBjvxVrk05osM0P8JCr8GSO 8KUUNyZkgiuR+Qadsrn7575DFYuArs55Ko3ZKLlZ3Je9aeKp22v65CcoECHQLjH2 HTpD5I1tmzbvsOi3HLDZjD4GCl+4BElfK2K83LJmhhyKpUXEbxdpvRHMySVXXgFP 4p/zZZirsZ6q/XCnn77xeUjhxJwdlqjMip/Cex9ubhHld0Zjx/z/M5RbHQC2GKD9 rrfLRrfde+vxb/x8CXRE5h+FylA7oa/TdOPS1DgONoUww789qUytt4bIHUScZplG kVw5b6RAxGojkwKSUJTnY5gUuzA2B/jZ -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:35 2025 by rpki-client