$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft File: J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json) Hash identifier: jzoNju3S0cAid5LfS3FVoz6fMN+PO8KijaBQVCbua68= Subject key identifier: 59:02:EA:7E:2A:A6:34:1E:9A:44:0D:13:7B:6F:2B:3A:F3:33:48:D9 Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB Certificate issuer: /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft Manifest number: 068D Signing time: Tue 16 Sep 2025 22:39:30 +0000 Manifest this update: Tue 16 Sep 2025 22:39:29 +0000 Manifest next update: Tue 23 Sep 2025 22:39:29 +0000 Files and hashes: 1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: a4nk3n2YGzu8OWdUq3gn9LeH/T8grYfxyPpgzqS+M7g=) 2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: U3xUizSTWdJYMjLLq4qIbC/HRkla7mf9lgp0wntQ29I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Validity Not Before: Sep 16 22:39:29 2025 GMT Not After : Sep 23 22:39:29 2025 GMT Subject: CN=68c9e721-15fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:d1:b4:d9:01:07:fd:6e:cc:96:96:dd:d5: c4:62:15:4b:53:27:1b:a9:b1:04:b1:38:26:42:eb: e6:f6:ee:49:7e:8c:55:ab:92:35:e4:fb:39:b3:0f: cd:d9:e8:fc:e3:1a:22:0f:b8:b1:9b:66:86:09:76: f3:08:1c:ee:d4:79:f7:72:8c:99:e8:5c:0b:2f:e0: df:a1:9f:90:99:83:ae:40:8a:a7:95:23:14:b8:66: 5d:f0:de:e6:40:89:f3:89:96:ad:05:00:ab:2b:44: 80:83:87:75:04:c6:3e:96:10:55:9a:ff:bb:e5:e5: 32:bb:6b:c2:f5:1f:25:cc:73:59:89:7a:3e:b5:b4: b0:3c:eb:81:86:b2:2a:7e:8e:98:ba:74:24:9e:de: 3a:e9:e4:ae:b2:75:eb:f5:c8:d1:76:91:e2:f4:69: c2:9d:13:56:15:c5:85:d4:22:8d:6e:ae:89:f1:4e: e9:db:fe:3c:a7:b7:89:8a:39:6f:19:a8:53:01:a9: 55:e1:91:76:be:b5:bb:2d:7d:31:2e:77:99:18:23: 0c:c5:90:ae:aa:43:10:d3:ed:7b:46:24:aa:4d:84: 2c:0e:c3:0e:44:de:d4:36:62:17:70:0f:e2:a5:2d: b4:b2:36:fd:df:b4:03:d2:f2:cb:7f:95:78:49:a7: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:02:EA:7E:2A:A6:34:1E:9A:44:0D:13:7B:6F:2B:3A:F3:33:48:D9 X509v3 Authority Key Identifier: keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d4:dd:56:ac:f8:68:09:5b:b2:44:e7:e9:2f:97:f3:ba:af: a0:08:31:c6:ff:38:cf:d0:a3:5c:2b:da:e1:af:a5:77:51:34: 4f:10:b4:7b:73:f0:58:af:78:45:6d:70:7e:7a:70:81:8f:c0: 0d:54:09:0a:92:99:20:d8:a2:91:01:e9:35:1b:d1:c2:4f:04: 40:5d:14:73:8d:c9:0b:89:44:5f:3c:a7:0c:0c:60:d4:a2:75: 24:3a:26:ee:e7:0f:7c:6b:e4:ac:87:86:fe:54:4b:c9:25:1e: 66:ac:5e:c9:62:88:aa:d2:43:97:32:9b:fc:68:e9:61:5d:8b: af:5b:2c:d1:c2:b4:f9:a9:0d:73:ef:57:ca:d8:b1:81:a4:c1: 20:1a:37:d5:96:68:26:42:c2:a1:ba:0d:08:75:b2:2b:1b:28: ee:7c:ea:d6:30:07:eb:71:c9:a5:0b:6b:4e:57:6a:11:37:18: cf:47:ea:7b:2e:0d:09:20:28:22:ce:35:6b:81:11:1d:bb:a8: a4:37:56:4b:7f:d2:37:d1:4a:95:48:ba:c8:f3:5b:29:d9:70: bb:cb:ae:79:ec:ce:ad:90:68:e5:fa:0f:2f:b6:ed:4c:c1:c4: 93:94:3e:81:c8:ac:f1:53:34:91:35:8e:11:52:47:c8:52:9d: f9:cd:a8:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjExMTAvBgNVBAUTKDI3OTI5NTlCMjVGQkY5RUJEQzkzMzlCQTlDN0QzNTU1 NzI2OTY5QUIwHhcNMjUwOTE2MjIzOTI5WhcNMjUwOTIzMjIzOTI5WjAYMRYwFAYD VQQDEw02OGM5ZTcyMS0xNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNXRtNkBB/1uzJaW3dXEYhVLUycbqbEEsTgmQuvm9u5JfoxVq5I15Ps5sw/N 2ej84xoiD7ixm2aGCXbzCBzu1Hn3coyZ6FwLL+DfoZ+QmYOuQIqnlSMUuGZd8N7m QInziZatBQCrK0SAg4d1BMY+lhBVmv+75eUyu2vC9R8lzHNZiXo+tbSwPOuBhrIq fo6YunQknt466eSusnXr9cjRdpHi9GnCnRNWFcWF1CKNbq6J8U7p2/48p7eJijlv GahTAalV4ZF2vrW7LX0xLneZGCMMxZCuqkMQ0+17RiSqTYQsDsMORN7UNmIXcA/i pS20sjb937QD0vLLf5V4SaeefwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkC6n4q pjQemkQNE3tvKzrzM0jZMB8GA1UdIwQYMBaAFCeSlZsl+/nr3JM5upx9NVVyaWmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2MS85MEI2RjcyRTg2 QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1ldmNrem02bkgwMVZYSnBh YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o1S1ZteVg3LWV2Y2t6bTZuSDAxVlhKcGFhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2MS85MEI2RjcyRTg2QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1l dmNrem02bkgwMVZYSnBhYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT1N1WrPhoCVuyROfpL5fzuq+gCDHG/zjP0KNcK9rhr6V3UTRPELR7 c/BYr3hFbXB+enCBj8ANVAkKkpkg2KKRAek1G9HCTwRAXRRzjckLiURfPKcMDGDU onUkOibu5w98a+Ssh4b+VEvJJR5mrF7JYoiq0kOXMpv8aOlhXYuvWyzRwrT5qQ1z 71fK2LGBpMEgGjfVlmgmQsKhug0IdbIrGyjufOrWMAfrccmlC2tOV2oRNxjPR+p7 Lg0JICgizjVrgREdu6ikN1ZLf9I30UqVSLrI81sp2XC7y6557M6tkGjl+g8vtu1M wcSTlD6ByKzxUzSRNY4RUkfIUp35zahJ -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:28 2025 by rpki-client