$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: AtKWW0wNwd2/oQfvCQmh8qQoWAhfz2kkI3WBm7q1u6Q= Subject key identifier: 4E:BC:E7:EE:B1:81:1E:AE:EB:F0:3B:07:E3:5B:05:96:EB:63:89:AA Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 05D9 Signing time: Sun 07 Sep 2025 00:35:55 +0000 Manifest this update: Sun 07 Sep 2025 00:35:55 +0000 Manifest next update: Sun 14 Sep 2025 00:35:55 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: dToX70RC9jqSyK07nasPktZneFjZyM04cgM3WNOgdH8=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: h7NQdBf7/WACdOSa/nz3xaJMmARVVv7RYZRpaElBghA=) 3: C55784DE584111EE85E40820C4F9AE02.roa (hash: 6joZNeakIUjEpd+YMt0FiTiaFqDSbAMcOBqVVrqw5x4=) 4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: nlYpAXZDAkP9jxeYqTWJb2nQcc7Mu88sU4gd4loVu3I=) 5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: iJ4zqOfhJNhHuoAZdvWWzKmADnr0nYywfMeTT9vEa3M=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: iwHI+lWhCkdLiN75C3FH0nP3GqiBf7AEpFh/Xx5uzNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Sep 7 00:35:55 2025 GMT Not After : Sep 14 00:35:55 2025 GMT Subject: CN=68bcd36b-7830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:cd:60:57:a5:68:86:be:5a:65:19:5c:1e: 9c:fb:de:bd:88:f5:e3:c3:4d:ab:1a:24:f6:4a:9a: bb:3d:08:ec:86:11:85:9a:b6:b5:42:2a:28:e2:80: 36:66:bf:68:07:0e:72:a1:8f:09:04:3b:63:1e:ed: fc:8d:e8:4f:58:0e:97:c8:39:28:49:68:f5:85:99: 4d:9c:39:24:cd:5e:13:3f:f8:9b:46:ba:ec:30:e5: c5:55:b3:ce:8b:79:78:94:93:b4:fc:db:b3:87:50: 55:13:4e:24:2f:14:53:e1:5a:ae:00:4a:5e:5a:22: b5:8a:b1:ef:98:ea:3c:3e:5b:6d:5e:c8:03:2d:09: 4a:c0:65:67:ba:b1:28:19:e1:12:ab:d8:a5:a2:54: 4d:d5:89:8f:6b:81:f2:c4:ff:fa:69:6a:67:06:59: a1:3a:b4:b4:c7:40:bb:4b:25:ee:d9:15:c4:9d:b4: 3f:69:fe:03:23:30:49:fa:4c:a1:f2:59:f8:41:3c: 27:3e:34:9b:1c:eb:19:2d:20:72:05:07:e4:3c:e3: 21:d8:fb:e1:10:41:c0:8d:0a:c2:22:b2:a6:2a:d4: 5e:f1:4f:55:85:30:8d:c5:e6:de:b9:4b:6f:82:eb: aa:7e:89:95:54:a1:d4:64:24:bf:16:81:40:e8:96: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BC:E7:EE:B1:81:1E:AE:EB:F0:3B:07:E3:5B:05:96:EB:63:89:AA X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9f:95:c9:86:9c:54:be:2d:d7:24:c9:20:c1:59:39:cd:c5: d5:3e:ba:ef:17:78:4b:29:43:10:37:52:a6:d5:5d:ac:87:35: 92:40:1c:9d:26:ff:02:8c:05:dc:80:98:af:b9:bb:d3:b7:bd: 77:04:0a:ee:0e:ef:e8:47:29:c4:50:54:e1:2b:2f:1f:ad:bb: 61:ec:b3:17:0d:9a:4c:9e:04:75:a5:a8:92:3e:43:a4:9a:4c: 3e:54:20:51:48:5a:6a:04:29:91:c7:5f:07:77:12:ba:e7:cd: 03:e2:ee:6d:ce:44:6a:d9:db:fd:95:5a:94:e4:0b:8c:b7:95: d4:ff:94:d0:bc:87:cd:54:37:63:a2:59:93:ac:97:e4:9f:73: 9c:a4:3e:6c:3e:b3:97:ba:de:f7:68:a2:5d:5f:76:76:bf:44: b3:dc:50:29:43:9f:78:97:3b:70:9a:94:80:d0:59:94:fc:f7: a5:45:3f:87:1e:c6:5b:d8:ad:5f:72:66:b2:cb:4e:54:a8:6c: 3c:97:40:f8:eb:fb:43:ab:07:a2:4c:4a:20:e1:ce:fb:eb:f0: 5a:d8:ad:c6:84:a5:ee:a3:d2:77:ec:3f:14:7e:97:ff:b3:3f: 20:57:07:cb:1e:fd:5f:ca:8a:13:33:56:72:1b:21:20:f1:ed: db:f8:7a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjUwOTA3MDAzNTU1WhcNMjUwOTE0MDAzNTU1WjAYMRYwFAYD VQQDEw02OGJjZDM2Yi03ODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzULNYFelaIa+WmUZXB6c+969iPXjw02rGiT2Spq7PQjshhGFmra1Qioo4oA2 Zr9oBw5yoY8JBDtjHu38jehPWA6XyDkoSWj1hZlNnDkkzV4TP/ibRrrsMOXFVbPO i3l4lJO0/Nuzh1BVE04kLxRT4VquAEpeWiK1irHvmOo8PlttXsgDLQlKwGVnurEo GeESq9ilolRN1YmPa4HyxP/6aWpnBlmhOrS0x0C7SyXu2RXEnbQ/af4DIzBJ+kyh 8ln4QTwnPjSbHOsZLSByBQfkPOMh2PvhEEHAjQrCIrKmKtRe8U9VhTCNxebeuUtv guuqfomVVKHUZCS/FoFA6JZ3vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE685+6x gR6u6/A7B+NbBZbrY4mqMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2n5XJhpxUvi3XJMkgwVk5zcXVPrrvF3hLKUMQN1Km1V2shzWSQByd Jv8CjAXcgJivubvTt713BAruDu/oRynEUFThKy8frbth7LMXDZpMngR1paiSPkOk mkw+VCBRSFpqBCmRx18HdxK6580D4u5tzkRq2dv9lVqU5AuMt5XU/5TQvIfNVDdj olmTrJfkn3OcpD5sPrOXut73aKJdX3Z2v0Sz3FApQ594lztwmpSA0FmU/PelRT+H HsZb2K1fcmayy05UqGw8l0D46/tDqweiTEog4c776/Ba2K3GhKXuo9J37D8Ufpf/ sz8gVwfLHv1fyooTM1ZyGyEg8e3b+HoV -----END CERTIFICATE-----Generated at Mon Sep 8 02:25:50 2025 by rpki-client