$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: EdwzuwpUkL2qq94MGiHSVRNPBh3SSbY14elffnRUUMc= Subject key identifier: 44:75:FD:68:E1:DB:05:05:39:C3:5B:5A:88:1A:3E:DA:F0:88:A0:6A Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: CE Signing time: Tue 09 Sep 2025 05:47:18 +0000 Manifest this update: Tue 09 Sep 2025 05:47:17 +0000 Manifest next update: Tue 16 Sep 2025 05:47:17 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: NJTA98StuoNdbhM/INDFzq015EGUtIYRenU8y03XPXU=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 90knoALeJRqRhXqg4j3QEDFBYbQfOayerlk2QuZaZLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Sep 9 05:47:17 2025 GMT Not After : Sep 16 05:47:17 2025 GMT Subject: CN=68bfbf66-fd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:44:10:69:3d:fe:3a:d3:49:7f:b7:f1:30: 32:09:0f:41:6d:8b:dc:66:9a:72:29:ca:e7:db:34: 10:c0:47:f7:3b:67:3c:20:90:49:aa:da:1d:6b:7b: 93:4a:48:77:f3:72:95:a5:40:9c:d6:ec:d9:6b:c9: 2c:98:12:c1:18:45:4e:0c:90:d5:f3:62:5e:6c:4b: 08:6c:ae:e2:0e:88:b2:91:0b:40:11:e6:f6:1e:74: 80:51:72:6c:c5:75:44:0a:7f:39:3d:17:50:de:5e: 06:0d:12:4f:e7:cc:c0:1c:b8:cb:99:fe:1c:1c:9f: 83:b6:a1:da:4b:ba:a4:ca:4b:c5:e5:a6:02:72:02: e1:24:e5:d8:a9:aa:03:3d:28:87:55:11:1d:7f:fb: c5:0c:f5:06:c2:c6:cd:f2:ac:15:d1:3b:69:e0:35: aa:7b:22:e6:cb:5c:bb:ef:32:d3:3c:64:aa:b9:ee: a5:57:97:38:82:1a:3c:31:d1:ff:6a:0a:1f:96:c6: 46:5b:87:75:87:81:36:98:2b:0f:8a:7e:a2:f4:20: 85:22:dc:4a:69:99:0b:83:f5:d3:ab:16:b2:e1:8a: a0:9d:a1:d4:a7:d2:9b:f7:11:08:78:2b:6c:ac:e5: 2a:d6:6e:2d:61:4a:d7:15:65:d2:3c:67:60:82:1f: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:75:FD:68:E1:DB:05:05:39:C3:5B:5A:88:1A:3E:DA:F0:88:A0:6A X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5d:64:53:67:fa:a7:eb:b4:59:17:79:85:43:57:ba:3f:f4: cb:7e:a0:2e:95:65:a9:98:3a:b3:2e:9a:45:63:82:e0:50:cf: 0f:67:dc:75:fe:2c:6a:de:11:71:9e:a0:62:18:4e:54:8f:f6: 78:0b:98:32:04:a6:60:a5:a7:b5:cd:a9:a8:25:5e:21:9c:c8: 90:f2:b6:a5:69:3c:bd:34:30:f3:2d:59:49:16:50:fb:fe:91: 72:90:db:ea:09:ae:dc:1f:92:c5:9a:0f:95:cb:82:e5:b9:3b: 1f:3c:bb:b4:cc:e9:e9:c2:47:78:ae:ed:50:85:53:c9:bb:77: e0:ee:b9:d7:1e:4d:a7:2e:18:a3:4b:b6:c6:94:fa:76:dd:5e: 6b:4a:84:20:07:9a:b0:0a:64:63:11:d0:f2:ca:8b:62:8d:33: ca:8f:b5:f5:d5:f5:e8:43:69:61:2a:07:42:2f:56:53:34:4f: fc:42:27:c8:48:c4:62:f5:00:e5:bb:47:e2:38:c2:24:ba:17: eb:fd:f5:55:8b:58:d0:78:87:36:39:29:b8:73:1f:c8:7d:73: ff:df:5f:bf:18:35:ea:ac:c5:5e:b4:99:5f:77:a3:c4:df:fb: 97:ee:5d:69:08:4e:72:d7:6d:3e:44:4a:ad:80:25:04:63:9c: d7:1a:ea:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUwOTA5MDU0NzE3WhcNMjUwOTE2MDU0NzE3WjAYMRYwFAYD VQQDEw02OGJmYmY2Ni1mZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlFEEGk9/jrTSX+38TAyCQ9BbYvcZppyKcrn2zQQwEf3O2c8IJBJqtoda3uT Skh383KVpUCc1uzZa8ksmBLBGEVODJDV82JebEsIbK7iDoiykQtAEeb2HnSAUXJs xXVECn85PRdQ3l4GDRJP58zAHLjLmf4cHJ+DtqHaS7qkykvF5aYCcgLhJOXYqaoD PSiHVREdf/vFDPUGwsbN8qwV0Ttp4DWqeyLmy1y77zLTPGSque6lV5c4gho8MdH/ agoflsZGW4d1h4E2mCsPin6i9CCFItxKaZkLg/XTqxay4YqgnaHUp9Kb9xEIeCts rOUq1m4tYUrXFWXSPGdggh/rAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER1/Wjh 2wUFOcNbWogaPtrwiKBqMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgXWRTZ/qn67RZF3mFQ1e6P/TLfqAulWWpmDqzLppFY4LgUM8PZ9x1 /ixq3hFxnqBiGE5Uj/Z4C5gyBKZgpae1zamoJV4hnMiQ8ralaTy9NDDzLVlJFlD7 /pFykNvqCa7cH5LFmg+Vy4LluTsfPLu0zOnpwkd4ru1QhVPJu3fg7rnXHk2nLhij S7bGlPp23V5rSoQgB5qwCmRjEdDyyotijTPKj7X11fXoQ2lhKgdCL1ZTNE/8QifI SMRi9QDlu0fiOMIkuhfr/fVVi1jQeIc2OSm4cx/IfXP/31+/GDXqrMVetJlfd6PE 3/uX7l1pCE5y120+REqtgCUEY5zXGupQ -----END CERTIFICATE-----Generated at Tue Sep 9 14:22:35 2025 by rpki-client