$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: 1V88cMaW8HIrox2sC5lSbmVTZgNdk2JPjUz3I4KstF4= Subject key identifier: 15:1A:6C:1F:27:70:3E:6C:5D:BC:F0:85:A7:55:10:83:F6:47:E8:B5 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 0A80 Signing time: Sat 06 Sep 2025 19:54:05 +0000 Manifest this update: Sat 06 Sep 2025 19:54:04 +0000 Manifest next update: Sat 13 Sep 2025 19:54:04 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: bPWUzVn7sVlkgDjipnLaYVZCFmCsDCzMkt2Pg6VkjXY=) 2: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: b3ZidVfWkTt6ioxr0D3dYupdLSIHA7zzegm4k2vHAhg=) 3: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: dEffCY7fMmHqBACumT+VtpUV2ruL8bGytpwrvOpu3fA=) 4: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: QY75bn2FpCm933c7BJHENiGJk3bqrxV/W2Gk/lgzSMw=) 5: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: XgjqZYH4U9nk0j196scEhvI3pYKJdtTuXtN3qA3DTBM=) 6: F4FCC41E648311EC88370386C4F9AE02.roa (hash: uk6OgnE8kYMPxv30SaMJe+3Z+6TjbuZqXinPmLVzBz4=) 7: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: hjPul7VLqhdi8PZzdDbz70lQUDpboMCrky5Ufnmsb9I=) 8: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: Ede0tVdlNPWVCUW//GzdQMyLfS63PzDBePoDy9bu10o=) 9: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: 7InexGpqjfpY1zx4d2o4amaHpqKo5vNs1Tcg2kMqADg=) 10: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: waq7u2amPlnFKwWjT+6dAT9ZZAhtaKLpmCv+Q5Cjtpo=) 11: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: V8yBbFfZIBKjw3+SFiGyRaOs5FvmhOj17ktK8YLwfLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2781 (0xadd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Sep 6 19:54:04 2025 GMT Not After : Sep 13 19:54:04 2025 GMT Subject: CN=68bc915d-018b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c2:fb:7c:f8:42:22:67:a7:33:fd:2a:3b:32: 95:ab:46:e8:25:3b:81:de:d8:b3:55:2c:86:fb:9d: 51:9d:c7:95:23:8c:60:51:6a:0d:1e:f2:cc:9e:43: 95:2d:bd:6d:96:29:c8:d4:0e:dd:0f:c4:b1:56:34: 20:23:b0:a2:3a:13:13:d0:e6:95:a0:b3:41:be:50: 38:e0:bf:58:80:19:5c:5d:19:c9:47:71:6e:ec:f9: 7a:a4:cd:22:55:63:88:f1:60:f3:9c:f9:21:8b:9b: af:bb:a8:32:c5:08:b5:2e:b4:38:c5:a5:e4:a7:2f: a2:f2:28:bc:62:5f:8e:05:3f:cc:73:73:b5:30:16: 23:df:8f:95:58:c9:54:a3:c5:0c:3a:f0:96:ce:f3: 8a:61:97:12:92:bb:3c:e6:12:b0:cc:25:33:a2:69: 92:c1:5e:d0:89:8c:b2:4c:0c:9c:8f:c0:ae:e6:e7: d3:84:f2:84:e4:41:27:95:1f:44:d4:d7:fc:ad:48: 2e:ee:aa:2f:71:59:e9:e6:5c:ea:d4:ee:f2:23:0c: 1c:3c:4d:79:4e:a1:e3:d3:97:07:25:b1:9f:38:2e: 8f:74:71:a9:ef:bd:c6:2e:e1:13:6f:08:0b:9c:05: 0b:07:9b:d4:ec:da:b5:36:d1:e5:ed:ff:4e:1b:1f: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1A:6C:1F:27:70:3E:6C:5D:BC:F0:85:A7:55:10:83:F6:47:E8:B5 X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:68:0c:6d:8f:4b:e4:56:6e:1c:c4:1e:ae:03:bc:70:47:3c: cc:c3:90:5a:62:81:8a:00:e0:e2:1a:8a:ef:93:bb:c1:be:e1: ec:bf:d7:19:56:25:49:06:ff:bf:32:ee:59:3a:39:48:18:bc: d7:e7:28:4c:8e:2c:23:09:01:ff:41:ab:70:89:da:6d:9f:64: f2:d2:7a:e8:67:9f:30:4c:2a:5b:d5:76:d1:5e:5b:2f:bf:5e: a9:eb:7c:25:7e:dd:8c:73:53:24:81:f8:e2:c7:1a:68:bd:97: e8:e4:3f:c3:6e:26:68:bf:a3:8d:9f:a0:a6:ba:6b:a5:5d:c9: de:61:40:a0:bc:92:68:c5:91:7d:f1:b6:fc:f0:be:a9:21:b5: dd:52:e5:9c:cc:73:05:44:19:64:7d:43:8f:77:97:b1:c9:54: 2d:30:b8:0a:f8:7f:ab:6b:70:28:ff:c0:94:48:6c:14:fa:f2: 97:d9:5f:35:22:2b:94:16:7e:4d:ac:38:6b:cd:b9:66:c5:c7: 48:10:d5:b4:1b:7e:99:33:22:ce:bc:4c:9a:58:bd:09:9f:b1: 10:2a:40:a6:ce:12:43:d8:28:84:19:e2:0b:16:52:03:3c:99: 85:9a:50:24:60:e3:92:a5:cd:91:ce:52:ac:33:5a:e4:07:98: c7:6d:e5:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjUwOTA2MTk1NDA0WhcNMjUwOTEzMTk1NDA0WjAYMRYwFAYD VQQDEw02OGJjOTE1ZC0wMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ML7fPhCImenM/0qOzKVq0boJTuB3tizVSyG+51RnceVI4xgUWoNHvLMnkOV Lb1tlinI1A7dD8SxVjQgI7CiOhMT0OaVoLNBvlA44L9YgBlcXRnJR3Fu7Pl6pM0i VWOI8WDznPkhi5uvu6gyxQi1LrQ4xaXkpy+i8ii8Yl+OBT/Mc3O1MBYj34+VWMlU o8UMOvCWzvOKYZcSkrs85hKwzCUzommSwV7QiYyyTAycj8Cu5ufThPKE5EEnlR9E 1Nf8rUgu7qovcVnp5lzq1O7yIwwcPE15TqHj05cHJbGfOC6PdHGp773GLuETbwgL nAULB5vU7Nq1NtHl7f9OGx8NfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUabB8n cD5sXbzwhadVEIP2R+i1MB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuaAxtj0vkVm4cxB6uA7xwRzzMw5BaYoGKAODiGorvk7vBvuHsv9cZ ViVJBv+/Mu5ZOjlIGLzX5yhMjiwjCQH/Qatwidptn2Ty0nroZ58wTCpb1XbRXlsv v16p63wlft2Mc1MkgfjixxpovZfo5D/DbiZov6ONn6CmumulXcneYUCgvJJoxZF9 8bb88L6pIbXdUuWczHMFRBlkfUOPd5exyVQtMLgK+H+ra3Ao/8CUSGwU+vKX2V81 IiuUFn5NrDhrzblmxcdIENW0G36ZMyLOvEyaWL0Jn7EQKkCmzhJD2CiEGeILFlID PJmFmlAkYOOSpc2RzlKsM1rkB5jHbeXT -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:07 2025 by rpki-client