$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: C+p7VGhWfp7G/w/dLYm801SnJZywMMHG/3AZWlaiE3Q= Subject key identifier: 52:D8:8E:BF:7B:FA:D1:76:5E:AE:75:9F:E4:3F:64:E5:48:1B:EA:23 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 01AC Signing time: Tue 05 Aug 2025 03:40:57 +0000 Manifest this update: Tue 05 Aug 2025 03:40:57 +0000 Manifest next update: Tue 12 Aug 2025 03:40:57 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: No7iPNTjPIEOSemvbCYKsoKc0TuE4GVjYArGff0NJ7s=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: Obgr2Zd1OVsSRpdsU4YgCxrRpE7FbkGE3q8rgEYfK/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: Aug 5 03:40:57 2025 GMT Not After : Aug 12 03:40:57 2025 GMT Subject: CN=68917d49-85bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:ce:bb:4d:44:d2:10:36:ed:93:f7:b8:e9: a9:0a:b5:cb:13:ed:52:e5:cd:ec:19:77:24:fd:54: 71:c3:09:55:fc:ba:eb:3f:f6:77:0d:27:81:26:39: 11:60:6a:a9:b7:f0:1a:70:9d:bb:a9:42:34:a5:7f: 11:45:a0:b1:49:18:68:92:05:d9:62:71:d1:41:46: bf:3a:cb:ce:82:5e:2d:b5:d6:e9:1f:3d:13:a6:ca: 5e:64:ed:61:f6:80:a0:30:ef:68:4a:d4:07:d5:df: 7c:2d:31:b4:a4:f9:2a:41:c9:59:48:fe:d5:30:e5: 88:93:6c:24:fb:32:92:c7:47:84:78:76:9e:ed:b8: 40:c1:09:ed:a1:94:b5:b7:19:c6:ad:5c:a3:6e:6c: e5:bd:44:78:1c:39:f8:5c:08:0f:ec:27:12:53:72: 87:c1:c8:98:70:4f:d9:db:7e:8d:42:cb:f5:0b:82: a0:cf:19:55:c4:37:36:43:d5:e9:fd:fd:74:20:1d: 29:7d:ec:f7:c6:37:84:c9:d6:3e:a2:d0:f3:13:57: c1:c0:b6:d2:07:84:fd:13:42:b7:33:87:ad:2e:87: f5:4e:81:1f:91:56:e4:8d:b9:a8:a3:fe:e1:7f:88: 80:1a:73:3a:7c:55:59:0a:e7:3e:46:e2:36:99:8f: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:8E:BF:7B:FA:D1:76:5E:AE:75:9F:E4:3F:64:E5:48:1B:EA:23 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:d9:6b:af:c7:e2:4a:a9:d4:b4:58:c1:9b:ee:a1:4f:2f:3b: 0b:00:7c:bd:48:fd:d1:96:51:75:fc:4d:e3:8a:52:e8:01:09: eb:7d:ff:95:e1:79:07:36:11:30:62:4c:63:dd:95:c2:d6:2c: ec:5a:2d:12:48:a2:b9:e8:2a:aa:2d:82:ca:9b:09:e7:3c:4a: 42:9b:a5:84:90:7a:56:2e:a6:87:8f:b1:e0:94:c8:eb:cb:ae: 62:e9:b3:20:03:a7:9a:2d:15:85:e5:34:73:13:d5:3c:38:cb: d3:4c:14:dc:c3:3b:36:6e:22:83:5f:4a:e7:65:28:d6:2c:98: 68:18:a3:1b:8a:79:b2:b4:72:05:2f:cb:1c:99:b5:19:3c:11: a1:3a:c9:df:6f:f4:93:b6:12:bf:4c:76:d8:7d:f6:0c:b0:f8: b7:46:f8:09:99:ef:59:74:99:72:17:56:77:dc:a6:6b:b6:de: 3c:49:32:96:1a:9f:a3:d9:39:2b:b6:b4:bd:24:d7:19:b7:a6: 00:40:ab:0e:3d:a1:c6:c8:85:ef:97:31:d9:30:a4:83:65:5f: 99:0d:01:2d:e4:ce:0b:21:d5:8d:ed:1d:de:3f:47:ab:62:77: 9b:6d:dd:02:0b:6f:1b:d9:ff:19:83:ef:a4:48:5c:75:93:c0: f8:c4:59:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUwODA1MDM0MDU3WhcNMjUwODEyMDM0MDU3WjAYMRYwFAYD VQQDEw02ODkxN2Q0OS04NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E3Ou01E0hA27ZP3uOmpCrXLE+1S5c3sGXck/VRxwwlV/LrrP/Z3DSeBJjkR YGqpt/AacJ27qUI0pX8RRaCxSRhokgXZYnHRQUa/OsvOgl4ttdbpHz0TpspeZO1h 9oCgMO9oStQH1d98LTG0pPkqQclZSP7VMOWIk2wk+zKSx0eEeHae7bhAwQntoZS1 txnGrVyjbmzlvUR4HDn4XAgP7CcSU3KHwciYcE/Z236NQsv1C4KgzxlVxDc2Q9Xp /f10IB0pfez3xjeEydY+otDzE1fBwLbSB4T9E0K3M4etLof1ToEfkVbkjbmoo/7h f4iAGnM6fFVZCuc+RuI2mY/hLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLYjr97 +tF2Xq51n+Q/ZOVIG+ojMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL2Wuvx+JKqdS0WMGb7qFPLzsLAHy9SP3RllF1/E3jilLoAQnrff+V 4XkHNhEwYkxj3ZXC1izsWi0SSKK56CqqLYLKmwnnPEpCm6WEkHpWLqaHj7HglMjr y65i6bMgA6eaLRWF5TRzE9U8OMvTTBTcwzs2biKDX0rnZSjWLJhoGKMbinmytHIF L8scmbUZPBGhOsnfb/STthK/THbYffYMsPi3RvgJme9ZdJlyF1Z33KZrtt48STKW Gp+j2TkrtrS9JNcZt6YAQKsOPaHGyIXvlzHZMKSDZV+ZDQEt5M4LIdWN7R3eP0er Ynebbd0CC28b2f8Zg++kSFx1k8D4xFlz -----END CERTIFICATE-----Generated at Wed Aug 6 14:17:47 2025 by rpki-client