$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: GA3sEppu7QHJ44C36iWuzlpPsZEFhqtlff9AiUI9nLk= Subject key identifier: DC:37:6E:C4:14:E5:FB:A0:60:FD:ED:9D:43:44:99:82:A5:D2:FA:72 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 0900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 08F7 Signing time: Thu 18 Sep 2025 20:36:08 +0000 Manifest this update: Thu 18 Sep 2025 20:36:07 +0000 Manifest next update: Thu 25 Sep 2025 20:36:07 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: B7GcT19XWxwtYt+07omHuI3TeLAMvpEm8ceEI8lHk1w=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Sep 18 20:36:07 2025 GMT Not After : Sep 25 20:36:07 2025 GMT Subject: CN=68cc6d37-79dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:67:61:57:42:a1:21:63:5d:71:d8:4c:96: a6:f1:cc:7a:2b:76:bf:57:d0:db:46:18:de:fd:6a: 23:a6:e2:3b:8a:42:99:60:9d:f7:80:d0:6b:e3:d3: b0:13:e7:25:35:9a:46:16:f8:10:9b:9b:e8:98:b2: 92:f3:84:9d:e6:60:1e:7a:3e:fd:ce:00:8f:46:ef: 4c:00:d9:17:76:62:3e:e1:f4:b6:08:56:eb:a0:09: f4:83:27:6f:16:c0:02:56:76:88:e1:0f:2b:97:29: 86:3e:a3:8d:ce:af:c9:86:5e:30:ee:9b:3d:4e:a7: 12:34:e3:88:15:7c:3d:82:7a:fa:7e:19:7b:ad:d8: ff:f7:ff:ec:78:21:61:73:5b:b6:9b:fb:65:5b:bc: 9f:43:37:76:39:86:ee:25:4e:bd:56:22:68:b3:95: 8a:56:68:1a:e3:bd:c8:72:26:af:e0:29:98:60:b4: 0d:5c:11:d5:22:61:1b:36:3d:6d:c4:30:28:c7:44: 51:4f:e7:cf:19:0b:74:93:f8:54:c4:ee:47:2c:fc: 3d:14:f5:64:e7:73:ec:c7:5e:e6:bc:8d:7a:c4:e9: 1e:02:50:8e:78:11:a2:e8:2e:1c:d2:7c:5a:df:51: d1:12:c8:bc:b5:08:c5:e0:15:45:4c:15:98:09:c8: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:6E:C4:14:E5:FB:A0:60:FD:ED:9D:43:44:99:82:A5:D2:FA:72 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b2:a9:ae:a7:11:2c:53:8d:ab:fe:11:ed:32:33:0b:01:81: 3e:0d:dd:e6:60:5b:ed:65:2c:b5:e1:c0:a3:62:85:cd:f4:43: 20:e7:6f:0d:fc:26:b4:ee:fe:34:5a:c9:87:01:af:01:19:c9: 14:ac:0d:d9:4f:b4:84:fb:70:69:1a:bd:49:47:eb:aa:31:f5: 6a:66:33:c1:e7:38:0f:96:01:e9:14:4a:48:50:a5:df:a5:b2: 1e:85:2c:07:de:4d:2e:ee:1b:d2:12:2d:f9:5a:0c:43:54:7a: a1:35:68:6d:2e:57:8b:07:44:19:d8:cd:7a:fa:6a:05:0e:75: 5e:08:d9:c6:0f:ae:32:d2:0f:c0:05:46:5f:7a:5b:d5:38:42: 43:53:9d:bc:27:aa:94:4d:ab:54:28:55:16:72:f3:e7:d1:32: ae:ba:a2:3f:8f:ec:74:48:d0:2d:70:1d:a9:ca:1a:83:6b:81: b5:1c:e9:77:f3:93:94:7f:94:22:70:8d:06:68:dc:6e:fd:0c: 2e:e3:42:3d:17:11:21:cd:86:e2:55:b2:ca:0d:04:79:f5:02: f9:53:c4:2a:e4:39:d2:bb:bf:b5:e9:98:ca:8e:70:60:d3:df: 33:b0:08:70:fa:88:3c:53:97:12:3f:7e:80:19:c2:ef:b4:63: 8a:b7:19:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUwOTE4MjAzNjA3WhcNMjUwOTI1MjAzNjA3WjAYMRYwFAYD VQQDEw02OGNjNmQzNy03OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNdnYVdCoSFjXXHYTJam8cx6K3a/V9DbRhje/WojpuI7ikKZYJ33gNBr49Ow E+clNZpGFvgQm5vomLKS84Sd5mAeej79zgCPRu9MANkXdmI+4fS2CFbroAn0gydv FsACVnaI4Q8rlymGPqONzq/Jhl4w7ps9TqcSNOOIFXw9gnr6fhl7rdj/9//seCFh c1u2m/tlW7yfQzd2OYbuJU69ViJos5WKVmga473Iciav4CmYYLQNXBHVImEbNj1t xDAox0RRT+fPGQt0k/hUxO5HLPw9FPVk53Psx17mvI16xOkeAlCOeBGi6C4c0nxa 31HREsi8tQjF4BVFTBWYCchYswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw3bsQU 5fugYP3tnUNEmYKl0vpyMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBsqmupxEsU42r/hHtMjMLAYE+Dd3mYFvtZSy14cCjYoXN9EMg528N /Ca07v40WsmHAa8BGckUrA3ZT7SE+3BpGr1JR+uqMfVqZjPB5zgPlgHpFEpIUKXf pbIehSwH3k0u7hvSEi35WgxDVHqhNWhtLleLB0QZ2M16+moFDnVeCNnGD64y0g/A BUZfelvVOEJDU528J6qUTatUKFUWcvPn0TKuuqI/j+x0SNAtcB2pyhqDa4G1HOl3 85OUf5QicI0GaNxu/Qwu40I9FxEhzYbiVbLKDQR59QL5U8Qq5DnSu7+16ZjKjnBg 098zsAhw+og8U5cSP36AGcLvtGOKtxm0 -----END CERTIFICATE-----Generated at Thu Sep 18 21:53:09 2025 by rpki-client