$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft File: pjicd02tZdiN8ubU9D3ioLVy7no.mft (raw, json) Hash identifier: QvaKDH6y/6eGmCAyPjCcPHin8TAmvU+690toxUq8Eac= Subject key identifier: A2:61:96:82:14:D5:CE:FD:B0:EC:67:83:DC:53:81:8D:FE:29:C2:9A Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft Manifest number: 0277 Signing time: Tue 09 Sep 2025 01:49:42 +0000 Manifest this update: Tue 09 Sep 2025 01:49:42 +0000 Manifest next update: Tue 16 Sep 2025 01:49:42 +0000 Files and hashes: 1: pjicd02tZdiN8ubU9D3ioLVy7no.crl (hash: pthwqQJZv7AthT5TqbpVFB2/3i16ON9QcoGIUFXUX4A=) 2: 9995D8D6276011EDAF21D06DC4F9AE02.roa (hash: De/y5SymwOEb9D5+rzbdyyNd+/EfQtgf39FuJEq4RYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A Validity Not Before: Sep 9 01:49:42 2025 GMT Not After : Sep 16 01:49:42 2025 GMT Subject: CN=68bf87b6-894f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:b5:b3:2a:e9:7b:8a:e2:d6:1b:0e:6f:ac: 5b:ba:85:74:1a:63:bf:4c:bd:30:69:d0:ec:47:35: 2a:c5:cf:e2:2c:a8:e1:7a:88:34:a6:83:58:89:fb: 1b:91:5f:a7:e1:0d:32:59:86:54:8f:e2:59:f5:66: 1a:5b:de:3f:7b:d7:37:5c:bd:97:b3:87:66:e1:34: 7c:da:bb:54:d0:5c:24:6c:f3:6f:a8:0a:f6:ad:c8: 2d:56:6d:91:5a:ed:4d:bb:0d:88:17:b9:41:71:ae: 00:c8:72:be:8c:f6:7e:55:6e:33:95:a7:00:9a:77: 64:30:44:79:82:f2:11:c6:ff:ba:bd:cb:2f:a0:63: 93:13:da:52:c1:f0:0d:57:16:8c:7b:79:45:c7:5f: 65:ab:17:84:4e:96:b8:fb:5f:46:40:e6:d2:75:40: dc:c9:76:a8:a7:a2:8a:a8:fd:4f:5e:fe:08:e0:3d: 37:aa:71:80:33:81:e4:a3:aa:45:8d:57:3f:ce:e4: 16:88:7d:4d:44:d5:32:17:0a:f2:cd:c8:c1:70:f5: cd:a3:27:63:85:b3:fe:c7:96:f9:97:7f:c2:e8:36: 53:22:81:90:4a:6f:02:f1:f0:3c:19:a1:ad:3d:e4: 28:9c:b3:0b:f3:0e:43:3d:83:3d:bd:90:1f:cd:fc: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:96:82:14:D5:CE:FD:B0:EC:67:83:DC:53:81:8D:FE:29:C2:9A X509v3 Authority Key Identifier: keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:17:f7:f0:94:2a:16:4c:c3:ae:b4:37:34:71:4e:75:8a:aa: a5:2c:bb:b4:65:ef:d0:67:d6:9c:9e:32:1a:f5:53:6a:a9:3d: 9c:ce:b6:c9:6b:a5:c9:94:e4:3e:02:8f:24:7b:b0:64:d2:b5: b3:24:ee:56:8c:a2:16:be:76:48:b6:86:08:e1:f8:0f:b2:98: 95:6c:b3:81:bc:76:83:14:8f:06:fc:e9:9e:bd:ca:62:4b:fb: 00:f4:7a:7f:e4:9a:c4:0e:2c:f2:19:fa:2c:25:38:d7:fd:88: 6e:60:50:54:e9:df:f9:ac:2f:b3:63:35:a9:8c:6a:21:f4:5c: 1b:fc:f3:be:09:9d:44:f8:f6:33:55:27:ac:5d:bb:98:f7:aa: 1d:31:4a:a2:ae:0a:9b:ad:c8:a8:a1:20:57:c2:d6:a7:3e:d0: b9:50:47:a4:af:d2:3b:de:8c:d4:15:b9:5c:ba:05:5d:a4:58: 37:47:1e:47:80:ed:49:56:31:4b:50:c8:8d:17:15:28:c5:49: 4f:b8:4f:be:a5:bd:4a:da:4b:b3:dd:6f:d5:bf:f3:5d:1b:3e: 3c:3c:74:ad:fb:25:1b:c4:23:ab:b9:74:ea:ab:43:9f:f2:d1: 50:22:08:93:73:f0:18:f6:c1:a1:b7:61:4d:fe:a5:b0:43:e8: 4f:95:b4:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1MjIxMTAvBgNVBAUTKEE2Mzg5Qzc3NERBRDY1RDg4REYyRTZENEY0M0RFMkEw QjU3MkVFN0EwHhcNMjUwOTA5MDE0OTQyWhcNMjUwOTE2MDE0OTQyWjAYMRYwFAYD VQQDEw02OGJmODdiNi04OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uC1syrpe4ri1hsOb6xbuoV0GmO/TL0wadDsRzUqxc/iLKjheog0poNYifsb kV+n4Q0yWYZUj+JZ9WYaW94/e9c3XL2Xs4dm4TR82rtU0FwkbPNvqAr2rcgtVm2R Wu1Nuw2IF7lBca4AyHK+jPZ+VW4zlacAmndkMER5gvIRxv+6vcsvoGOTE9pSwfAN VxaMe3lFx19lqxeETpa4+19GQObSdUDcyXaop6KKqP1PXv4I4D03qnGAM4Hko6pF jVc/zuQWiH1NRNUyFwryzcjBcPXNoydjhbP+x5b5l3/C6DZTIoGQSm8C8fA8GaGt PeQonLML8w5DPYM9vZAfzfzC4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJhloIU 1c79sOxng9xTgY3+KcKaMB8GA1UdIwQYMBaAFKY4nHdNrWXYjfLm1PQ94qC1cu56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDUyMi9ERTIwRkM5NjI3 NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpkaU44dWJVOUQzaW9MVnk3 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqaWNkMDJ0WmRpTjh1YlU5RDNpb0xWeTduby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDUyMi9ERTIwRkM5NjI3NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpk aU44dWJVOUQzaW9MVnk3bm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCF/fwlCoWTMOutDc0cU51iqqlLLu0Ze/QZ9acnjIa9VNqqT2czrbJ a6XJlOQ+Ao8ke7Bk0rWzJO5WjKIWvnZItoYI4fgPspiVbLOBvHaDFI8G/Omevcpi S/sA9Hp/5JrEDizyGfosJTjX/YhuYFBU6d/5rC+zYzWpjGoh9Fwb/PO+CZ1E+PYz VSesXbuY96odMUqirgqbrciooSBXwtanPtC5UEekr9I73ozUFblcugVdpFg3Rx5H gO1JVjFLUMiNFxUoxUlPuE++pb1K2kuz3W/Vv/NdGz48PHSt+yUbxCOruXTqq0Of 8tFQIgiTc/AY9sGht2FN/qWwQ+hPlbQ6 -----END CERTIFICATE-----Generated at Wed Sep 10 13:35:10 2025 by rpki-client