$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: tg+ZzspovSz73RcHlH0r6XYFfaVCObIejyy5TRuuVUI= Subject key identifier: B5:EF:00:3B:E8:98:A9:A3:36:D4:54:0B:BD:8D:83:40:93:75:D5:E0 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: DB Signing time: Wed 17 Sep 2025 06:09:47 +0000 Manifest this update: Wed 17 Sep 2025 06:09:46 +0000 Manifest next update: Wed 24 Sep 2025 06:09:46 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: d9JoSHqL/5o5wUztGBBYFIx62H5ACCXx6lI4HofvH/c=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Sep 17 06:09:46 2025 GMT Not After : Sep 24 06:09:46 2025 GMT Subject: CN=68ca50aa-37c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:d3:58:df:54:ac:4a:ac:75:f0:e1:71:d5: c0:01:3b:36:1e:39:55:5f:c3:da:57:16:cc:1a:6d: 7f:dd:99:69:2c:1e:4c:a9:72:5d:f0:14:6a:18:05: 8f:b1:1c:0f:47:e4:b4:c0:45:89:1c:33:97:e3:79: 22:65:37:79:fc:cb:8e:4f:46:fd:0c:44:1e:62:44: 7c:8e:81:8e:7a:cc:6f:f8:30:2c:28:a0:ac:78:fc: 64:38:78:72:48:80:66:22:c6:0f:a6:b4:93:9e:ca: 02:9f:d4:0a:2c:2e:ea:2d:35:74:12:c9:21:a6:91: d6:0b:b2:18:4d:a8:3d:f8:f9:ec:55:04:90:38:b0: 1f:3a:6f:48:6d:51:f1:3a:56:60:c6:94:06:74:a5: 5c:af:b5:b1:ea:25:9e:79:28:89:e3:d9:ac:df:53: 19:53:e5:1f:6b:01:cc:75:79:bb:83:3a:fa:68:87: e8:31:e2:0d:e4:90:18:bf:f6:d4:02:62:8d:69:80: c2:4a:b2:0d:d8:bf:d6:c4:aa:4d:9b:88:33:f3:c8: 93:00:8b:09:6a:c4:37:6a:b3:ae:43:da:fa:81:45: 53:3a:a0:e9:d9:e4:44:f3:ab:47:d2:f0:73:61:b7: 25:21:4c:54:e1:e8:15:6a:57:fb:c8:62:d0:cf:f3: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EF:00:3B:E8:98:A9:A3:36:D4:54:0B:BD:8D:83:40:93:75:D5:E0 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:6a:f8:2f:3c:aa:fa:49:ea:76:32:3f:89:d1:be:60:09: 07:5c:7d:de:6d:50:1d:a7:d4:c0:18:31:1b:47:43:24:62:b8: a8:d6:bc:79:ab:4d:b0:2d:ac:01:51:74:23:3d:fe:c0:bb:54: 53:31:fc:04:db:88:f0:73:58:8f:dd:54:23:2a:f4:69:a5:8f: 3a:28:22:83:ff:de:ee:bb:8d:09:94:08:2f:79:fb:69:9f:1c: 11:29:03:70:2e:f2:e8:13:c4:79:06:2e:6c:a9:7b:86:e4:09: 7a:2e:3e:ca:b1:ad:75:5d:53:12:21:fa:2d:16:18:d3:07:fc: d4:dd:3d:b5:dc:67:6d:ea:9c:d8:ae:8d:e7:f0:d5:3c:22:29: 3f:48:a2:a7:ab:c7:3e:62:31:c2:db:2a:96:ff:93:d0:41:02: 5b:50:5a:07:a3:80:71:07:dd:fc:13:61:69:67:81:a9:a8:86: 2c:0c:81:71:4c:e8:a5:ca:75:27:38:07:a9:08:59:93:a1:ef: c8:cf:82:72:8d:e8:0f:d3:ff:7b:23:3b:61:7c:db:87:16:04: 32:b4:11:93:3d:d5:56:c6:f0:04:50:09:1e:a0:bb:2e:c4:d4: f6:07:d5:67:70:4e:30:13:ba:e6:0f:0c:d3:69:a7:07:3a:85: f0:52:b5:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUwOTE3MDYwOTQ2WhcNMjUwOTI0MDYwOTQ2WjAYMRYwFAYD VQQDEw02OGNhNTBhYS0zN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfbTWN9UrEqsdfDhcdXAATs2HjlVX8PaVxbMGm1/3ZlpLB5MqXJd8BRqGAWP sRwPR+S0wEWJHDOX43kiZTd5/MuOT0b9DEQeYkR8joGOesxv+DAsKKCsePxkOHhy SIBmIsYPprSTnsoCn9QKLC7qLTV0EskhppHWC7IYTag9+PnsVQSQOLAfOm9IbVHx OlZgxpQGdKVcr7Wx6iWeeSiJ49ms31MZU+UfawHMdXm7gzr6aIfoMeIN5JAYv/bU AmKNaYDCSrIN2L/WxKpNm4gz88iTAIsJasQ3arOuQ9r6gUVTOqDp2eRE86tH0vBz YbclIUxU4egValf7yGLQz/O1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXvADvo mKmjNtRUC72Ng0CTddXgMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV2Wr4Lzyq+knqdjI/idG+YAkHXH3ebVAdp9TAGDEbR0MkYrio1rx5 q02wLawBUXQjPf7Au1RTMfwE24jwc1iP3VQjKvRppY86KCKD/97uu40JlAgveftp nxwRKQNwLvLoE8R5Bi5sqXuG5Al6Lj7Ksa11XVMSIfotFhjTB/zU3T213Gdt6pzY ro3n8NU8Iik/SKKnq8c+YjHC2yqW/5PQQQJbUFoHo4BxB938E2FpZ4GpqIYsDIFx TOilynUnOAepCFmToe/Iz4JyjegP0/97IzthfNuHFgQytBGTPdVWxvAEUAkeoLsu xNT2B9VncE4wE7rmDwzTaacHOoXwUrX+ -----END CERTIFICATE-----Generated at Fri Sep 19 04:00:17 2025 by rpki-client