$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: UYUEWlhLcgcR/Pimr4nnuK05usKFedMrGNllKXgTwoY= Subject key identifier: E1:02:7E:6B:FA:81:69:43:CC:A8:8D:9E:F3:38:71:A4:D8:D6:51:19 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 04BD Signing time: Wed 20 Aug 2025 23:59:29 +0000 Manifest this update: Wed 20 Aug 2025 23:59:28 +0000 Manifest next update: Wed 27 Aug 2025 23:59:28 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: XaOlb/dqSp2zWaa9qlZ0H7EI96r7VgCckxnATQhkBFc=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: Aug 20 23:59:28 2025 GMT Not After : Aug 27 23:59:28 2025 GMT Subject: CN=68a66160-2ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:ec:6f:7e:53:70:70:06:c4:3c:fd:4f:8c: 4e:4b:59:72:d3:d5:57:e2:34:d6:e7:89:68:fc:30: e8:99:28:2c:88:99:3f:69:e8:dc:e6:f1:43:93:40: d5:9a:3b:4f:72:92:66:64:e5:01:26:2f:d3:d9:8e: 23:19:6a:4a:e7:d8:6f:26:82:53:f2:77:3e:02:0d: b5:7b:6f:e3:18:35:9e:67:d2:9f:5b:11:dc:d5:f2: 86:43:dc:1e:1f:df:1d:d4:52:c0:37:0b:ae:da:4f: 26:a8:7a:d3:9f:16:52:ae:89:dc:44:dc:28:5e:17: 6b:a2:28:d6:a2:13:80:0d:a9:67:17:bc:ea:e7:11: f0:03:d1:27:ad:da:52:41:ad:f1:91:32:10:5a:75: d4:35:48:c9:06:bf:0f:19:12:43:c2:a1:d3:d2:92: 64:48:83:d6:30:39:6d:cd:62:6f:22:f5:f3:82:91: 0b:db:3d:08:d7:c8:90:c0:2a:5a:df:e1:6a:9e:81: f4:6a:8c:5a:a5:f5:2c:01:21:ed:39:ad:24:03:2a: 3e:f6:d9:3b:7d:a4:32:f9:f7:43:0f:c5:72:dd:8a: 4b:20:3e:17:c6:d0:77:40:bd:0f:d4:fa:89:e0:f1: ba:3c:16:68:9d:a2:71:77:70:ac:b2:c3:5e:35:a9: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:02:7E:6B:FA:81:69:43:CC:A8:8D:9E:F3:38:71:A4:D8:D6:51:19 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:7e:25:a5:81:87:29:b3:8a:87:8b:f6:ba:ca:53:47:63:89: ac:04:2a:8d:b2:1f:e7:17:ec:08:3b:24:aa:6b:e4:e3:b4:09: c3:b9:1f:e0:cc:fd:08:47:2c:23:a6:4c:a1:95:4b:1f:e6:b6: d6:e6:1a:d3:25:b1:76:11:5a:34:fe:56:58:2e:17:02:fd:d6: a2:91:44:b5:e2:7c:58:61:2d:8f:b4:de:10:c1:2c:b3:cb:04: 59:32:37:53:a6:fc:71:98:f2:ce:04:f3:bc:a9:5a:47:fc:88: 9f:6c:af:dc:c6:3b:75:12:42:1d:a9:3a:aa:58:0e:db:e1:3f: be:c3:19:aa:0d:75:d1:e9:cd:49:00:13:20:e7:56:41:f3:ca: b9:ae:eb:e5:b5:33:68:bd:2f:b4:69:c1:b2:60:5c:46:d0:5d: cf:5b:9b:cf:a4:0b:07:23:b5:75:d9:49:fc:d0:f2:4a:81:f1: ff:79:0a:bc:84:73:1f:05:f3:46:3c:c0:c2:01:18:70:36:a9: 96:2b:32:2d:c6:89:18:aa:78:bf:07:ec:94:14:ed:ab:1f:88: 0d:af:0d:3c:44:a8:07:ab:d1:61:d8:13:5a:be:6b:bd:3b:b2: 21:0d:46:25:6e:e9:05:6c:51:be:95:20:83:b7:76:42:bc:b6: 5c:92:a9:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjUwODIwMjM1OTI4WhcNMjUwODI3MjM1OTI4WjAYMRYwFAYD VQQDEw02OGE2NjE2MC0yZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFnsb35TcHAGxDz9T4xOS1ly09VX4jTW54lo/DDomSgsiJk/aejc5vFDk0DV mjtPcpJmZOUBJi/T2Y4jGWpK59hvJoJT8nc+Ag21e2/jGDWeZ9KfWxHc1fKGQ9we H98d1FLANwuu2k8mqHrTnxZSroncRNwoXhdroijWohOADalnF7zq5xHwA9EnrdpS Qa3xkTIQWnXUNUjJBr8PGRJDwqHT0pJkSIPWMDltzWJvIvXzgpEL2z0I18iQwCpa 3+FqnoH0aoxapfUsASHtOa0kAyo+9tk7faQy+fdDD8Vy3YpLID4XxtB3QL0P1PqJ 4PG6PBZonaJxd3CsssNeNaljgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOECfmv6 gWlDzKiNnvM4caTY1lEZMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7fiWlgYcps4qHi/a6ylNHY4msBCqNsh/nF+wIOySqa+TjtAnDuR/g zP0IRywjpkyhlUsf5rbW5hrTJbF2EVo0/lZYLhcC/daikUS14nxYYS2PtN4QwSyz ywRZMjdTpvxxmPLOBPO8qVpH/IifbK/cxjt1EkIdqTqqWA7b4T++wxmqDXXR6c1J ABMg51ZB88q5ruvltTNovS+0acGyYFxG0F3PW5vPpAsHI7V12Un80PJKgfH/eQq8 hHMfBfNGPMDCARhwNqmWKzItxokYqni/B+yUFO2rH4gNrw08RKgHq9Fh2BNavmu9 O7IhDUYlbukFbFG+lSCDt3ZCvLZckqmu -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:09 2025 by rpki-client