$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: J4XUg76JWnsNqTLMKsZRNuX11++hvpWvLcQu7LdakX0= Subject key identifier: 10:C5:85:25:38:15:85:14:88:1E:E9:2F:24:12:22:BA:D4:F5:AE:BE Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0B88 Signing time: Sun 10 Aug 2025 19:00:34 +0000 Manifest this update: Sun 10 Aug 2025 19:00:33 +0000 Manifest next update: Sun 17 Aug 2025 19:00:33 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: FZhgP4F4fmHXjLOCDxPufwK42yl2e9MFpKSrr+96hQs=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Aug 10 19:00:33 2025 GMT Not After : Aug 17 19:00:33 2025 GMT Subject: CN=6898ec52-580d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:a8:6b:24:2c:ae:e8:53:e3:24:ea:34:88: fc:9e:74:60:8c:c2:f5:ee:a4:43:99:07:e6:4e:28: 2b:79:81:db:94:08:8c:47:16:9d:47:2d:92:f7:5a: be:1f:f9:99:e5:84:81:2b:be:00:21:42:c5:57:c1: b8:90:9e:a3:72:31:f7:d1:a7:16:65:ae:a9:65:3d: 64:f8:0f:61:4b:b0:6d:63:a7:59:fe:e2:3e:5d:25: d5:15:d0:9f:44:81:a4:4f:80:a8:d4:6b:10:2d:a2: 5b:2a:de:7a:c0:89:6a:7a:b6:36:11:70:ce:67:93: 99:85:05:8b:5b:4f:6d:e8:b7:a4:76:f4:5b:e2:b4: 5f:36:82:dc:a2:ad:7f:75:c7:01:29:12:7e:bd:c0: 13:da:6b:1a:17:bc:53:f3:89:65:dd:ea:04:17:4f: a6:6f:16:26:8a:b9:20:d1:6d:61:32:3f:42:a4:62: 03:38:2a:33:41:f2:9b:6a:00:31:b8:cd:4e:6a:38: 73:9f:a7:06:3f:9c:7b:6b:dc:90:38:48:48:13:9c: 4d:eb:98:07:eb:42:c1:5b:b8:ee:35:7f:9b:72:8a: b2:8c:f6:e9:aa:36:55:cc:09:0a:2c:ef:d9:a0:2b: 31:f7:ea:c3:d5:fa:30:b5:e6:10:4f:bc:14:cc:66: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C5:85:25:38:15:85:14:88:1E:E9:2F:24:12:22:BA:D4:F5:AE:BE X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:cf:20:3d:e1:f1:ac:73:a1:7b:a3:66:fe:a6:42:59:94:a8: 8f:16:4b:6a:7e:a9:61:6a:a2:26:79:82:e3:50:23:04:46:3e: 3b:43:21:1a:b1:4d:68:03:4a:69:06:f0:78:42:06:be:6a:97: 11:e9:c5:a3:22:06:94:7c:b4:2a:84:ae:45:1f:03:5a:6e:72: a8:1c:d3:35:ad:d5:3b:30:26:02:fa:11:18:af:40:80:17:45: 13:fb:88:c1:5a:c7:33:a5:d8:7e:76:52:6f:cb:72:01:09:f4: 86:64:22:85:71:c9:8d:d5:66:17:db:d1:38:e3:58:0e:4f:5f: b0:ee:bc:8d:4d:68:16:2c:00:c3:97:60:b5:20:29:80:43:fe: bf:21:7f:53:17:dc:68:2e:cd:c8:f8:cd:55:fc:b9:39:d3:46: 54:d1:ae:4b:03:0e:4e:c0:b8:9c:ac:37:20:b1:ed:30:dd:94: cc:1c:f8:ab:d3:3f:45:58:b2:ea:30:7d:b6:5b:7a:e6:50:a1: 6a:75:43:f4:32:82:be:d3:21:6a:2c:fb:a4:2a:5a:1a:78:32: a6:6d:9b:62:72:47:8e:8a:0d:76:49:12:65:fe:ec:d0:1c:4a: 2a:cf:41:15:1a:6c:dd:c8:aa:61:7f:37:d6:01:2c:c5:c6:04: e2:4e:61:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjUwODEwMTkwMDMzWhcNMjUwODE3MTkwMDMzWjAYMRYwFAYD VQQDEw02ODk4ZWM1Mi01ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vKoayQsruhT4yTqNIj8nnRgjML17qRDmQfmTigreYHblAiMRxadRy2S91q+ H/mZ5YSBK74AIULFV8G4kJ6jcjH30acWZa6pZT1k+A9hS7BtY6dZ/uI+XSXVFdCf RIGkT4Co1GsQLaJbKt56wIlqerY2EXDOZ5OZhQWLW09t6LekdvRb4rRfNoLcoq1/ dccBKRJ+vcAT2msaF7xT84ll3eoEF0+mbxYmirkg0W1hMj9CpGIDOCozQfKbagAx uM1Oajhzn6cGP5x7a9yQOEhIE5xN65gH60LBW7juNX+bcoqyjPbpqjZVzAkKLO/Z oCsx9+rD1fowteYQT7wUzGZ6pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDFhSU4 FYUUiB7pLyQSIrrU9a6+MB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHzyA94fGsc6F7o2b+pkJZlKiPFktqfqlhaqImeYLjUCMERj47QyEa sU1oA0ppBvB4Qga+apcR6cWjIgaUfLQqhK5FHwNabnKoHNM1rdU7MCYC+hEYr0CA F0UT+4jBWsczpdh+dlJvy3IBCfSGZCKFccmN1WYX29E441gOT1+w7ryNTWgWLADD l2C1ICmAQ/6/IX9TF9xoLs3I+M1V/Lk500ZU0a5LAw5OwLicrDcgse0w3ZTMHPir 0z9FWLLqMH22W3rmUKFqdUP0MoK+0yFqLPukKloaeDKmbZtickeOig12SRJl/uzQ HEoqz0EVGmzdyKphfzfWASzFxgTiTmEb -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:49 2025 by rpki-client