$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: 07hwPdC7k7M/1fE5t0SJ9m9Y+GgR7XB5K+QFfBMyU/k= Subject key identifier: DF:62:8A:14:DE:31:4C:A3:FB:90:BF:F9:B6:2B:9D:69:B9:01:85:2C Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 02B8 Signing time: Fri 19 Sep 2025 01:54:19 +0000 Manifest this update: Fri 19 Sep 2025 01:54:19 +0000 Manifest next update: Fri 26 Sep 2025 01:54:19 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: /CmjahY32Lf6n/jL8kdgeAVP4CE4iCpp2m+AXFhXqrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Sep 19 01:54:19 2025 GMT Not After : Sep 26 01:54:19 2025 GMT Subject: CN=68ccb7cb-5d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:e3:5d:67:0d:62:78:cc:19:a7:ae:d8:e6: 8b:a2:dc:b1:64:2f:dd:be:cb:00:e5:17:c8:bd:27: 02:8a:38:00:ef:4b:de:b7:e5:bb:f0:0c:24:2a:ef: 6c:6e:c0:9c:97:de:e9:62:93:d1:00:03:2a:56:2b: 5d:c9:a7:8c:18:c7:1c:6f:22:2c:54:e7:fa:40:77: 29:8e:16:56:2a:c9:66:6f:d4:ab:6c:f2:8c:23:7f: 5f:c5:97:3c:40:51:e1:42:88:50:ce:8a:cd:1f:bb: bd:bd:ec:0d:48:4f:40:1d:80:5e:7f:05:75:8e:f5: 02:53:ed:25:c4:8c:e4:57:9e:f3:a9:ff:e3:fb:4b: 43:4b:91:b3:79:cf:ea:b2:51:68:1b:db:f9:63:0b: 87:71:19:76:58:56:a4:23:c4:27:b4:2d:46:1d:d0: e0:02:ab:a8:e2:e9:13:ad:48:b4:f1:d9:05:6b:46: d4:26:67:5f:c3:0e:1f:50:e8:62:88:21:2b:a5:d5: 05:ed:0b:ff:aa:94:91:8b:04:f6:4a:c8:a3:d9:9f: ed:81:1c:95:31:d7:67:7a:6a:dc:f5:c6:46:02:48: d8:41:9b:b1:9a:e6:97:ed:12:bb:99:79:6f:d2:e8: 41:e2:12:77:fe:3e:6f:56:68:34:d8:85:7c:42:13: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:62:8A:14:DE:31:4C:A3:FB:90:BF:F9:B6:2B:9D:69:B9:01:85:2C X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:3a:eb:65:c2:bd:3c:b0:45:c4:ec:b1:ff:66:9a:08:57: d5:3d:06:c5:89:38:c2:28:af:b5:39:5b:fa:01:23:88:a2:ec: ee:d1:88:b5:82:b8:68:27:3c:87:c1:6e:2e:f5:a8:19:76:c2: 84:30:24:6c:52:5d:0d:43:30:cb:dc:c2:0e:1d:65:89:5f:5e: 4f:bb:95:97:5e:4a:5e:31:63:c0:c8:cd:67:ec:31:85:26:1e: 7c:16:cf:cf:3d:ef:75:b4:88:e4:ad:27:58:72:fc:07:dd:77: 63:6f:1e:df:fa:2a:d0:91:8a:ba:b6:9d:f0:45:17:21:d9:ab: 43:4f:40:89:56:90:ae:cb:f1:ff:2b:c8:7e:c8:04:50:dd:93: 2a:88:b7:bc:0d:0e:09:ca:39:3b:a3:61:1d:e9:13:f8:cd:83: 6a:51:b7:32:09:86:e1:3d:ea:b6:95:6c:75:e4:a3:62:38:9d: c4:41:54:8c:15:97:17:3b:87:19:2e:6c:45:45:38:72:ad:c9: 3b:8e:fa:50:de:31:29:27:7b:1f:20:9f:a3:3e:bf:0e:7b:d5: c7:87:b8:08:e1:b9:85:a3:25:74:98:62:0e:1c:59:d2:cd:aa: d9:bc:d4:02:db:d0:bb:89:0a:38:e3:02:f4:39:fe:5f:b9:dc: 1c:9e:d7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUwOTE5MDE1NDE5WhcNMjUwOTI2MDE1NDE5WjAYMRYwFAYD VQQDEw02OGNjYjdjYi01ZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOHjXWcNYnjMGaeu2OaLotyxZC/dvssA5RfIvScCijgA70vet+W78AwkKu9s bsCcl97pYpPRAAMqVitdyaeMGMccbyIsVOf6QHcpjhZWKslmb9SrbPKMI39fxZc8 QFHhQohQzorNH7u9vewNSE9AHYBefwV1jvUCU+0lxIzkV57zqf/j+0tDS5Gzec/q slFoG9v5YwuHcRl2WFakI8QntC1GHdDgAquo4ukTrUi08dkFa0bUJmdfww4fUOhi iCErpdUF7Qv/qpSRiwT2Ssij2Z/tgRyVMddnemrc9cZGAkjYQZuxmuaX7RK7mXlv 0uhB4hJ3/j5vVmg02IV8QhPX2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9iihTe MUyj+5C/+bYrnWm5AYUsMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GjrrZcK9PLBFxOyx/2aaCFfVPQbFiTjCKK+1OVv6ASOIouzu0Yi1 grhoJzyHwW4u9agZdsKEMCRsUl0NQzDL3MIOHWWJX15Pu5WXXkpeMWPAyM1n7DGF Jh58Fs/PPe91tIjkrSdYcvwH3Xdjbx7f+irQkYq6tp3wRRch2atDT0CJVpCuy/H/ K8h+yARQ3ZMqiLe8DQ4Jyjk7o2Ed6RP4zYNqUbcyCYbhPeq2lWx15KNiOJ3EQVSM FZcXO4cZLmxFRThyrck7jvpQ3jEpJ3sfIJ+jPr8Oe9XHh7gI4bmFoyV0mGIOHFnS zarZvNQC29C7iQo44wL0Of5fudwcnteZ -----END CERTIFICATE-----Generated at Fri Sep 19 07:45:44 2025 by rpki-client