$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: PB9thp8f37nGyaPW00pM3FeFW1Gztj6N1nmM/Pq48ok= Subject key identifier: AC:FF:92:AB:50:14:A4:49:BC:7E:4E:F8:B2:52:3C:19:0F:AE:07:2F Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 70 Signing time: Tue 09 Sep 2025 07:00:26 +0000 Manifest this update: Tue 09 Sep 2025 07:00:26 +0000 Manifest next update: Tue 16 Sep 2025 07:00:26 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: Bx5AbePY7COojcK5/DyH1TDoXfYqxQA8iPuG39HgMqg=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Sep 9 07:00:26 2025 GMT Not After : Sep 16 07:00:26 2025 GMT Subject: CN=68bfd08a-7773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:1c:71:b8:ab:25:50:b6:f1:20:66:eb:07: 4c:10:31:6a:ad:b0:49:73:8c:9b:89:5b:ad:df:2c: 2e:eb:21:b1:50:84:74:0b:9b:bc:fc:ef:8b:fc:4a: 19:0d:6a:cb:1e:90:29:e4:43:48:f1:28:61:96:7a: 98:9d:94:1d:87:1c:22:ed:f0:7e:09:b9:27:b1:06: 51:3c:51:d3:20:1c:d4:ab:e0:2f:a3:f5:fa:df:fd: 17:92:c4:b2:84:43:54:6f:47:36:71:d0:cd:10:55: 67:a6:39:f1:5d:d1:11:dc:35:4c:a1:cc:b6:fd:b0: 7f:c2:a1:41:d7:37:9a:9e:8a:64:fa:b1:76:b2:72: 38:4d:ff:c4:41:f3:af:f1:df:68:78:74:72:b7:c8: 8c:82:ab:2b:a9:95:0b:ca:5e:6d:4f:91:35:3f:cd: 79:b5:57:17:55:3b:3e:13:03:b6:1a:62:5b:a0:ff: 4e:38:78:ec:e3:c1:31:52:8c:88:34:98:99:e8:db: 42:d8:17:de:7b:93:af:ef:7f:ff:12:f5:5b:b1:19: ab:4b:76:10:dd:32:de:8c:59:85:0d:36:6e:95:7a: ee:98:91:4a:5f:54:9e:bf:78:9b:0c:57:15:94:64: c0:05:f8:b9:cc:ba:60:b9:46:89:e0:46:48:45:e4: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FF:92:AB:50:14:A4:49:BC:7E:4E:F8:B2:52:3C:19:0F:AE:07:2F X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fb:cf:05:18:3b:60:ac:06:4d:d9:a9:e7:3a:01:6a:5b:b1: 0b:6b:a2:37:24:c3:52:1b:66:24:cf:2b:b7:35:04:f5:bb:d6: a6:32:23:f5:1a:e4:a6:05:ae:6f:99:d0:dd:a4:f6:19:7f:0a: ce:cb:c2:13:62:2f:d6:d0:de:63:ac:2f:61:c9:ce:11:d0:f0: 8a:ac:2f:52:b5:9b:a6:8b:a6:0d:d6:8d:73:e0:33:cd:f3:31: a0:8b:3e:13:d3:f1:04:5d:b0:70:8f:ba:b7:18:48:32:02:6c: de:5e:64:8c:2a:ef:9a:3a:7a:58:45:96:ce:69:26:a2:0a:b3: 8a:47:7d:22:a7:20:5c:0d:9d:2e:ef:a5:88:ab:4d:58:fb:11: 46:f5:68:f5:c9:86:2a:b7:16:c7:96:4d:db:7d:2f:0b:fd:e0: 6c:23:d1:4b:41:93:4e:93:0e:ca:86:9b:30:b1:e7:af:31:df: 3c:51:94:75:d7:54:e2:9e:e0:d6:33:f1:5f:0a:d7:d0:dd:a7: 75:12:c1:f2:1a:14:93:e0:f9:cd:ed:01:69:80:13:03:59:e6: aa:51:6c:4d:38:02:7f:e8:ea:d2:67:2f:3b:7e:2d:9a:79:d8: 27:26:aa:e1:e2:1b:c0:7d:3b:f9:ac:a6:2f:be:55:d1:cc:4a: 08:6a:a7:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTA5MDkwNzAwMjZaFw0yNTA5MTYwNzAwMjZaMBgxFjAUBgNV BAMTDTY4YmZkMDhhLTc3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ+xxxuKslULbxIGbrB0wQMWqtsElzjJuJW63fLC7rIbFQhHQLm7z874v8ShkN assekCnkQ0jxKGGWepidlB2HHCLt8H4JuSexBlE8UdMgHNSr4C+j9frf/ReSxLKE Q1RvRzZx0M0QVWemOfFd0RHcNUyhzLb9sH/CoUHXN5qeimT6sXaycjhN/8RB86/x 32h4dHK3yIyCqyuplQvKXm1PkTU/zXm1VxdVOz4TA7YaYlug/044eOzjwTFSjIg0 mJno20LYF957k6/vf/8S9VuxGatLdhDdMt6MWYUNNm6Veu6YkUpfVJ6/eJsMVxWU ZMAF+LnMumC5RongRkhF5KX1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrP+Sq1AU pEm8fk74slI8GQ+uBy8wHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJv7zwUYO2CsBk3Zqec6AWpbsQtrojckw1IbZiTPK7c1BPW71qYyI/Ua 5KYFrm+Z0N2k9hl/Cs7LwhNiL9bQ3mOsL2HJzhHQ8IqsL1K1m6aLpg3WjXPgM83z MaCLPhPT8QRdsHCPurcYSDICbN5eZIwq75o6elhFls5pJqIKs4pHfSKnIFwNnS7v pYirTVj7EUb1aPXJhiq3FseWTdt9Lwv94Gwj0UtBk06TDsqGmzCx568x3zxRlHXX VOKe4NYz8V8K19Ddp3USwfIaFJPg+c3tAWmAEwNZ5qpRbE04An/o6tJnLzt+LZp5 2CcmquHiG8B9O/mspi++VdHMSghqp/0= -----END CERTIFICATE-----Generated at Tue Sep 9 10:17:23 2025 by rpki-client