$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json) Hash identifier: uLECBpXcjAoLgfNJnXBUCKzhWQ0a4GcNGuGVHtLqaoA= Subject key identifier: 94:AF:FB:21:19:66:81:0A:30:48:AF:70:F9:66:C3:0D:49:66:2B:D5 Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft Manifest number: 1BF4 Signing time: Sun 24 Aug 2025 16:12:08 +0000 Manifest this update: Sun 24 Aug 2025 16:12:08 +0000 Manifest next update: Sun 31 Aug 2025 16:12:08 +0000 Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: zIHJS47K+1yv91DjbHgi/RQ0PEvyNEZYLgWarRb6zs0=) 2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: adZvd/ecrn/69jFBmaF8532OMU/h1NSuA6iJnPKo2nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7166 (0x1bfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: Aug 24 16:12:08 2025 GMT Not After : Aug 31 16:12:08 2025 GMT Subject: CN=68ab39d8-f2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7e:83:f3:e0:0d:64:36:fb:f9:17:55:39:37: 96:15:d7:ca:8e:2d:24:25:f2:e2:48:df:fc:d6:03: 9c:ad:59:ca:11:9b:64:6f:a8:54:6f:e0:57:57:62: 7e:4b:52:3a:f7:e5:e6:fd:50:a5:69:40:68:4c:d9: 85:46:a3:10:d1:c0:b2:c6:d9:f3:11:b5:9f:4c:62: 23:95:f7:fd:1f:3d:ff:65:50:f7:c7:e3:00:61:e2: ab:b1:cd:06:7d:f7:57:07:a6:be:cd:f4:f2:d6:c5: 8a:fb:a4:ea:06:37:53:44:22:ee:38:ba:52:08:b1: d9:5e:db:76:f1:ba:5f:e1:4d:cb:c2:43:99:fe:60: f0:06:c3:ee:f1:9e:9c:76:d4:b7:14:e4:ee:66:03: 6b:32:06:f1:39:f3:27:21:a0:f6:81:a4:2b:ef:35: 6f:81:76:71:d0:68:b2:63:19:9c:63:a9:d4:51:38: 9f:f5:54:d9:38:b2:86:79:bd:39:5c:d1:0b:a2:b7: 32:97:40:da:7c:e3:07:12:af:88:5b:99:53:d5:87: 3b:a9:e6:75:df:d9:80:02:bf:59:a7:18:ae:93:59: bd:dc:4a:65:61:44:f2:28:b4:d6:c6:89:36:b7:fe: 02:70:27:40:96:95:bc:65:af:4a:a1:4d:9c:39:64: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AF:FB:21:19:66:81:0A:30:48:AF:70:F9:66:C3:0D:49:66:2B:D5 X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ec:70:d4:2f:13:c7:0f:6c:d6:85:3c:6a:73:4d:d4:50:5b: e2:5f:75:d7:af:c7:5f:b9:fe:f2:a0:0c:af:cd:d0:22:ff:91: c9:3a:e5:e0:eb:9b:f3:f1:46:e1:82:85:b0:a0:9f:e0:1f:9b: 72:a2:2b:0b:5a:97:0b:35:4a:46:a9:72:04:e5:84:fd:fd:bc: ce:0a:34:26:8e:6e:54:d5:cb:c7:55:6d:f6:64:5e:23:56:48: ef:bf:79:98:5b:7b:54:7d:f4:6d:f8:63:03:56:bb:aa:62:96: 0b:fc:25:d5:64:f2:a6:95:a4:09:1a:15:0a:01:e8:b7:9c:bc: 88:cd:cb:5a:ad:d6:38:06:b5:e9:19:f5:b4:5e:25:e2:91:5e: e3:70:00:f8:c2:62:e1:b5:ff:4a:b9:db:b6:53:64:27:7a:83: 1d:e3:11:4b:5d:21:08:9c:67:7a:f3:ef:e6:ff:8f:78:71:d5: 1a:45:2d:d1:8a:9e:dc:cf:b4:4a:79:de:87:f1:b8:e2:d4:b6: 08:23:5b:a2:d3:57:37:e8:be:68:b7:2e:8b:4b:38:75:02:a0: fc:f8:d5:5f:ad:9b:ca:da:da:b9:c0:b8:9a:3c:52:e6:ef:c1: 50:22:cf:75:32:28:ee:74:a3:83:da:cc:81:20:5d:c5:41:7a: 7a:2d:e7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjUwODI0MTYxMjA4WhcNMjUwODMxMTYxMjA4WjAYMRYwFAYD VQQDEw02OGFiMzlkOC1mMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn6D8+ANZDb7+RdVOTeWFdfKji0kJfLiSN/81gOcrVnKEZtkb6hUb+BXV2J+ S1I69+Xm/VClaUBoTNmFRqMQ0cCyxtnzEbWfTGIjlff9Hz3/ZVD3x+MAYeKrsc0G ffdXB6a+zfTy1sWK+6TqBjdTRCLuOLpSCLHZXtt28bpf4U3LwkOZ/mDwBsPu8Z6c dtS3FOTuZgNrMgbxOfMnIaD2gaQr7zVvgXZx0GiyYxmcY6nUUTif9VTZOLKGeb05 XNELorcyl0DafOMHEq+IW5lT1Yc7qeZ139mAAr9Zpxiuk1m93EplYUTyKLTWxok2 t/4CcCdAlpW8Za9KoU2cOWRSowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSv+yEZ ZoEKMEivcPlmww1JZivVMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW7HDULxPHD2zWhTxqc03UUFviX3XXr8dfuf7yoAyvzdAi/5HJOuXg 65vz8UbhgoWwoJ/gH5tyoisLWpcLNUpGqXIE5YT9/bzOCjQmjm5U1cvHVW32ZF4j Vkjvv3mYW3tUffRt+GMDVruqYpYL/CXVZPKmlaQJGhUKAei3nLyIzctardY4BrXp GfW0XiXikV7jcAD4wmLhtf9Kudu2U2QneoMd4xFLXSEInGd68+/m/494cdUaRS3R ip7cz7RKed6H8bji1LYII1ui01c36L5oty6LSzh1AqD8+NVfrZvK2tq5wLiaPFLm 78FQIs91MijudKOD2syBIF3FQXp6Lec2 -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:35 2025 by rpki-client