$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json) Hash identifier: IQjiJevBwJE4WwNg7Kmwk3sy8XmDEUnDMB9nIWoeEQE= Subject key identifier: E4:9A:16:F0:28:00:9C:3D:D9:B4:32:49:E8:4A:FE:7C:0D:24:34:EF Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft Manifest number: D8 Signing time: Fri 05 Sep 2025 06:16:18 +0000 Manifest this update: Fri 05 Sep 2025 06:16:18 +0000 Manifest next update: Fri 12 Sep 2025 06:16:18 +0000 Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: FlCy9EVBsnL+3SbrboYxn6rtbXi+VXRwMH3QIjveKZg=) 2: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: qKo5GDm+NdH2Wkh9LsU4Ek55hvJRGlW/WsdLjpxnbHU=) 3: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: 8/Hd/HSfsJzaFCQ02un66M2YDgdginFixcaFn5JQidY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Validity Not Before: Sep 5 06:16:18 2025 GMT Not After : Sep 12 06:16:18 2025 GMT Subject: CN=68ba8032-1535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:06:16:cf:8a:0f:79:01:12:ca:34:79:eb: 19:50:c2:11:83:1d:03:a1:f1:03:6b:28:e8:34:1a: d6:3c:2b:f0:c2:5e:0b:7c:cd:d3:09:99:d2:94:af: db:4c:cd:32:62:dd:3c:1d:13:a8:62:dc:e4:72:3c: b1:b2:1e:cf:2f:94:db:ea:37:65:d3:55:ad:d2:f9: f0:76:d5:f4:aa:df:5f:eb:84:77:3f:5b:b9:2f:6b: 4c:c9:ab:1f:8e:ca:9f:d7:07:36:54:b3:35:3d:7c: 7d:18:1c:1f:1c:2e:86:f4:f5:80:96:c7:48:10:2a: 21:9e:de:50:8e:e0:2b:4d:32:ff:36:80:8b:77:80: 3b:01:3e:a9:12:ce:97:5e:be:52:53:3c:bb:b0:a4: fd:0e:75:67:b2:a9:65:37:5f:6e:97:62:ca:3b:c6: 0b:ae:3a:0d:33:17:32:c1:9b:d2:ba:e2:d4:a6:6a: 1e:87:e1:8f:90:17:72:45:42:d8:b4:f4:89:09:4c: ba:4e:d8:95:0d:8a:c8:a5:39:29:ef:76:ef:3f:68: 9c:f2:1a:91:fa:f1:ac:33:f5:0a:96:3c:7e:c0:68: 7f:4a:dc:d8:5b:dd:42:ae:49:8e:45:4e:e6:a7:9d: 04:39:e4:72:fd:37:1c:05:64:33:1a:60:ca:f0:73: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9A:16:F0:28:00:9C:3D:D9:B4:32:49:E8:4A:FE:7C:0D:24:34:EF X509v3 Authority Key Identifier: keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:37:8f:80:95:0d:e9:26:b4:73:25:13:1c:ed:bc:b3:28:36: 1b:5e:9b:2c:3d:ce:43:a8:3f:eb:82:35:ea:3a:70:07:e7:6e: 4d:d0:ed:93:fd:29:59:56:b6:58:9a:10:e8:ae:92:bc:c3:46: 14:64:c9:4b:06:79:33:1d:98:4d:8d:07:ff:87:fc:cb:72:b2: 1f:93:02:26:86:ca:58:93:18:b7:5d:c0:e9:f8:7e:b5:8a:7a: a3:b6:48:df:51:38:e1:9e:af:ec:70:7d:25:f7:be:21:86:75: 42:2b:90:d7:03:19:da:47:83:ac:0c:fc:ac:94:be:f4:bd:fd: 62:22:53:e5:83:96:e9:eb:10:5e:52:fe:15:d4:c6:f2:a6:ac: 9a:9d:5b:92:ac:b2:5a:25:b7:59:1c:64:a1:2c:0f:4c:c3:19: 16:ec:ad:72:41:8b:0b:c7:c7:ce:97:bd:c6:72:b5:bf:2c:2e: 84:2e:1c:bd:7d:c2:8a:53:fe:79:af:ca:47:19:8e:f7:99:d8: be:de:88:81:cd:9b:1b:b0:7b:b2:79:b9:82:29:57:6d:22:fc: 8a:2f:1e:7c:8c:10:ad:2b:2a:a1:9f:bd:19:a7:eb:0b:03:f5: 07:39:43:fa:0f:67:9d:0d:82:61:ee:c3:c2:69:86:0d:c1:dc: f1:94:b8:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD MTRDQ0ZFM0IwHhcNMjUwOTA1MDYxNjE4WhcNMjUwOTEyMDYxNjE4WjAYMRYwFAYD VQQDEw02OGJhODAzMi0xNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIgGFs+KD3kBEso0eesZUMIRgx0DofEDayjoNBrWPCvwwl4LfM3TCZnSlK/b TM0yYt08HROoYtzkcjyxsh7PL5Tb6jdl01Wt0vnwdtX0qt9f64R3P1u5L2tMyasf jsqf1wc2VLM1PXx9GBwfHC6G9PWAlsdIECohnt5QjuArTTL/NoCLd4A7AT6pEs6X Xr5SUzy7sKT9DnVnsqllN19ul2LKO8YLrjoNMxcywZvSuuLUpmoeh+GPkBdyRULY tPSJCUy6TtiVDYrIpTkp73bvP2ic8hqR+vGsM/UKljx+wGh/StzYW91CrkmORU7m p50EOeRy/TccBWQzGmDK8HMIQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSaFvAo AJw92bQySehK/nwNJDTvMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2 Q09sN0l1VzJDYXZCVE1fanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrN4+AlQ3pJrRzJRMc7byzKDYbXpssPc5DqD/rgjXqOnAH525N0O2T /SlZVrZYmhDorpK8w0YUZMlLBnkzHZhNjQf/h/zLcrIfkwImhspYkxi3XcDp+H61 inqjtkjfUTjhnq/scH0l974hhnVCK5DXAxnaR4OsDPyslL70vf1iIlPlg5bp6xBe Uv4V1MbypqyanVuSrLJaJbdZHGShLA9MwxkW7K1yQYsLx8fOl73GcrW/LC6ELhy9 fcKKU/55r8pHGY73mdi+3oiBzZsbsHuyebmCKVdtIvyKLx58jBCtKyqhn70Zp+sL A/UHOUP6D2edDYJh7sPCaYYNwdzxlLiO -----END CERTIFICATE-----Generated at Sat Sep 6 20:59:09 2025 by rpki-client