$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: CnN9miO6fzS/ZaMyl6S708cq3AaJs/c5lJkXt2KMeBY= Subject key identifier: 4B:20:2F:4B:ED:EB:8E:0A:D8:1A:E5:96:23:67:8A:C0:EA:CF:55:B3 Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 08C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 08C2 Signing time: Thu 18 Sep 2025 20:42:19 +0000 Manifest this update: Thu 18 Sep 2025 20:42:19 +0000 Manifest next update: Thu 25 Sep 2025 20:42:19 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: WVfZgHLljcFl8/CBQP3Wrf4Ffhpe23K5V4p2XzETgdY=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 455pSZuKbmJ74DtLJhv6Pu72i25WA9DRuhrIcycnTSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: Sep 18 20:42:19 2025 GMT Not After : Sep 25 20:42:19 2025 GMT Subject: CN=68cc6eab-d50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:0f:92:fb:fe:d7:57:bd:1b:15:70:96:67: 17:95:b9:c7:2a:a4:3d:c1:6d:c2:b6:e6:56:54:47: d8:bd:19:21:1e:ce:b9:00:7a:32:52:c6:41:86:77: 8a:93:d8:4d:93:15:9a:57:a2:ee:7d:d1:74:53:72: 6a:f2:a4:0b:ab:4b:ea:87:c4:bb:7b:65:05:e7:d4: 27:5c:79:a8:02:af:2f:2e:2d:cf:f4:c4:5d:0f:73: 7d:89:30:b2:cb:a3:e3:f4:57:bc:12:13:44:92:80: dc:62:1c:f0:51:cf:0a:00:d0:bc:2a:f7:73:83:e8: ac:46:3c:4c:4b:87:2d:89:61:f6:57:27:b3:8a:20: 47:f2:8f:59:c9:b0:c9:ef:32:24:1c:88:a3:a0:24: c1:f2:66:d5:b5:60:6a:b7:13:c1:02:5e:b2:38:6c: 95:43:13:43:59:e1:74:7a:b7:a6:59:08:a5:ba:bf: a5:45:55:7d:56:da:97:1c:55:f9:9a:e6:67:d5:ef: d5:7d:70:81:67:83:e0:31:a3:a4:9e:d2:9e:e2:9a: 5b:0c:29:ba:30:8b:f4:3a:62:d6:12:24:ec:fc:eb: 98:a9:88:07:e6:44:8d:ca:7c:ed:0b:bf:e6:2e:95: d0:5c:18:94:06:e6:c9:0c:9a:09:07:6f:7d:1f:f1: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:20:2F:4B:ED:EB:8E:0A:D8:1A:E5:96:23:67:8A:C0:EA:CF:55:B3 X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a8:68:1e:ee:1e:b2:f3:f9:80:d6:0e:b8:da:23:dc:7a:d2: ed:50:9e:c8:b4:84:ed:dd:7b:51:f0:e9:1d:a7:b6:34:66:bd: 67:0a:fd:ec:4d:b1:a8:a1:54:a5:70:d1:99:c4:e9:ca:da:56: ab:36:d1:1e:07:f8:36:28:02:39:27:e6:d3:5a:6d:10:09:34: 9b:2c:92:d7:13:5a:21:e0:c6:90:3a:7c:da:30:dc:b8:f3:da: 37:31:30:60:69:2c:70:a5:8b:32:41:53:3b:03:6c:8f:df:4b: 39:9f:b0:f7:3a:3f:48:40:56:24:c9:a1:ea:55:16:ca:76:a0: 16:36:fc:85:80:e3:77:4b:88:75:50:47:d4:4a:b8:2c:e4:f5: fd:4c:86:eb:02:b7:03:5e:cc:07:09:b4:84:4b:a8:7f:2b:37: 0b:dd:df:1c:34:d9:49:7d:51:82:8d:14:f0:88:03:e0:ef:29: 02:6c:f6:93:c1:ab:37:1a:b2:1d:a9:4c:06:b1:44:e4:84:ed: 7e:e1:eb:86:bf:f2:93:31:f0:cb:91:d5:90:7c:4a:9f:b7:28: 9b:18:d5:71:9c:64:a8:8b:f7:4c:43:9d:b9:9c:56:47:03:ad: dd:23:10:30:a1:3e:bc:9f:39:40:4a:d5:8d:d0:a0:7c:43:ef: b9:97:65:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjUwOTE4MjA0MjE5WhcNMjUwOTI1MjA0MjE5WjAYMRYwFAYD VQQDEw02OGNjNmVhYi1kNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQMPkvv+11e9GxVwlmcXlbnHKqQ9wW3CtuZWVEfYvRkhHs65AHoyUsZBhneK k9hNkxWaV6LufdF0U3Jq8qQLq0vqh8S7e2UF59QnXHmoAq8vLi3P9MRdD3N9iTCy y6Pj9Fe8EhNEkoDcYhzwUc8KANC8Kvdzg+isRjxMS4ctiWH2VyeziiBH8o9ZybDJ 7zIkHIijoCTB8mbVtWBqtxPBAl6yOGyVQxNDWeF0eremWQilur+lRVV9VtqXHFX5 muZn1e/VfXCBZ4PgMaOkntKe4ppbDCm6MIv0OmLWEiTs/OuYqYgH5kSNynztC7/m LpXQXBiUBubJDJoJB299H/GkHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsgL0vt 644K2BrlliNnisDqz1WzMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLqGge7h6y8/mA1g642iPcetLtUJ7ItITt3XtR8Okdp7Y0Zr1nCv3s TbGooVSlcNGZxOnK2larNtEeB/g2KAI5J+bTWm0QCTSbLJLXE1oh4MaQOnzaMNy4 89o3MTBgaSxwpYsyQVM7A2yP30s5n7D3Oj9IQFYkyaHqVRbKdqAWNvyFgON3S4h1 UEfUSrgs5PX9TIbrArcDXswHCbSES6h/KzcL3d8cNNlJfVGCjRTwiAPg7ykCbPaT was3GrIdqUwGsUTkhO1+4euGv/KTMfDLkdWQfEqftyibGNVxnGSoi/dMQ525nFZH A63dIxAwoT68nzlAStWN0KB8Q++5l2Wj -----END CERTIFICATE-----Generated at Fri Sep 19 02:33:14 2025 by rpki-client