$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: vHMeWwogQEoqKRkQR8IF3PdhTIJHgOqwUt93mBEA1Jo= Subject key identifier: 3E:A2:D3:4E:BF:DA:5F:47:3C:DD:AE:8F:C6:A7:E1:06:06:11:9D:DF Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 0124 Signing time: Sat 09 Aug 2025 05:07:05 +0000 Manifest this update: Sat 09 Aug 2025 05:07:05 +0000 Manifest next update: Sat 16 Aug 2025 05:07:05 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: GOulKIc84SEGsvRXabZQA+VU1AorMla5EKL9CH4neEs=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Aug 9 05:07:05 2025 GMT Not After : Aug 16 05:07:05 2025 GMT Subject: CN=6896d779-c7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:e9:6d:7f:f6:d6:eb:86:a7:ce:74:08:e1: b1:90:92:dc:45:8b:0f:e2:4b:b0:dd:b5:24:58:cf: bb:d5:a2:a3:3b:a5:18:a4:3a:c7:ea:ac:98:e5:18: ee:1a:2f:83:13:f5:c9:ca:20:cb:aa:f2:b9:44:99: bb:58:90:fd:2d:2b:f9:d4:30:6f:f2:df:63:d9:fd: d0:ed:e2:1f:91:12:5b:d6:3c:47:f8:a0:fc:fb:37: 54:8c:00:f3:1a:da:98:ed:91:8d:a4:e2:ae:f1:12: 48:44:03:be:df:9b:d2:fc:c5:5e:7c:c1:c6:c4:25: 74:63:50:b1:30:79:50:b4:0f:01:0f:59:78:b7:94: 22:34:67:6c:0b:2e:0c:12:1b:fd:f7:49:66:05:33: 35:fc:3f:ee:ce:5c:44:af:87:85:d2:d0:2c:82:64: 59:12:c4:ad:94:e9:bb:b1:4b:2d:96:4c:f7:3c:26: 8e:dc:4b:5a:04:01:3e:ee:b3:9b:2c:c8:9e:e4:f5: 22:cd:5f:96:19:42:fc:19:a4:ba:98:b5:f1:bc:20: 84:55:78:f6:0e:80:1c:a5:d9:4e:e6:a4:ab:91:22: 47:de:27:ce:6c:28:16:5c:dd:6a:7b:65:b7:72:23: 8d:0f:a7:74:57:78:ec:a7:e3:b9:35:24:76:f4:8e: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A2:D3:4E:BF:DA:5F:47:3C:DD:AE:8F:C6:A7:E1:06:06:11:9D:DF X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a7:d1:f9:52:a9:be:2e:54:39:17:cc:e3:64:66:53:43:58: cf:65:10:8d:36:84:d4:aa:81:dc:79:16:61:ac:df:6b:06:00: ac:fc:52:bd:e7:5c:d5:c5:55:80:01:c1:77:c5:fe:67:21:01: 65:29:64:b5:80:f1:26:2e:25:7b:ca:19:a5:f5:43:b7:49:ff: d0:4b:e2:80:dd:6c:44:56:97:a5:9a:21:d9:bc:5e:1a:73:7b: 11:ce:44:20:13:0a:40:aa:7e:76:ce:f4:60:7d:6b:1c:bd:15: 6b:0d:d5:49:9a:63:24:a3:24:b9:a3:0b:33:f1:95:b5:da:e9: 75:8b:d5:49:fe:17:d7:6d:de:96:ca:81:39:17:d7:12:58:f0: 3f:0d:7c:4b:36:b4:5e:38:b4:91:10:11:4b:36:1a:34:c8:8c: c2:eb:c9:bc:ef:52:bf:75:ad:7e:bd:a2:21:de:fa:e6:1b:2d: d0:a2:df:20:07:4b:4a:50:f9:11:f7:93:e4:80:d7:e9:94:6c: 8e:d0:70:0b:b8:8d:88:19:b0:6a:37:fe:fc:4c:02:e5:b7:93: 7e:87:dc:fc:88:fe:5a:64:e0:bd:e9:3a:86:c9:39:67:d9:84: 1d:61:bc:1a:4b:2e:69:0c:08:89:3e:ac:75:4f:6f:75:54:14: 4c:e4:c2:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwODA5MDUwNzA1WhcNMjUwODE2MDUwNzA1WjAYMRYwFAYD VQQDEw02ODk2ZDc3OS1jN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qLpbX/21uuGp850COGxkJLcRYsP4kuw3bUkWM+71aKjO6UYpDrH6qyY5Rju Gi+DE/XJyiDLqvK5RJm7WJD9LSv51DBv8t9j2f3Q7eIfkRJb1jxH+KD8+zdUjADz GtqY7ZGNpOKu8RJIRAO+35vS/MVefMHGxCV0Y1CxMHlQtA8BD1l4t5QiNGdsCy4M Ehv990lmBTM1/D/uzlxEr4eF0tAsgmRZEsStlOm7sUstlkz3PCaO3EtaBAE+7rOb LMie5PUizV+WGUL8GaS6mLXxvCCEVXj2DoAcpdlO5qSrkSJH3ifObCgWXN1qe2W3 ciOND6d0V3jsp+O5NSR29I5KAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6i006/ 2l9HPN2uj8an4QYGEZ3fMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcp9H5Uqm+LlQ5F8zjZGZTQ1jPZRCNNoTUqoHceRZhrN9rBgCs/FK9 51zVxVWAAcF3xf5nIQFlKWS1gPEmLiV7yhml9UO3Sf/QS+KA3WxEVpelmiHZvF4a c3sRzkQgEwpAqn52zvRgfWscvRVrDdVJmmMkoyS5owsz8ZW12ul1i9VJ/hfXbd6W yoE5F9cSWPA/DXxLNrReOLSREBFLNho0yIzC68m871K/da1+vaIh3vrmGy3Qot8g B0tKUPkR95PkgNfplGyO0HALuI2IGbBqN/78TALlt5N+h9z8iP5aZOC96TqGyTln 2YQdYbwaSy5pDAiJPqx1T291VBRM5MLi -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:47 2025 by rpki-client