$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: OVSzAmQ4s1HnROeSVjTix2VMViq69bMzo1yo11Akick= Subject key identifier: 53:A8:FD:85:1C:15:1F:1D:71:C2:59:89:06:17:97:50:94:F8:D5:EC Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 0200 Signing time: Mon 11 Aug 2025 02:22:39 +0000 Manifest this update: Mon 11 Aug 2025 02:22:39 +0000 Manifest next update: Mon 18 Aug 2025 02:22:39 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: m1lt0fOuKfyktMnGa8DJ46RFIfUp8qh+7RP5IfZPojs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Aug 11 02:22:39 2025 GMT Not After : Aug 18 02:22:39 2025 GMT Subject: CN=689953ef-dfda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:2c:87:d6:55:84:f8:19:e4:48:eb:85:2d: 8d:17:47:c5:64:45:af:2c:5d:ef:27:e3:64:41:d7: 05:15:18:9e:c1:0d:ea:af:22:57:db:f1:c8:42:83: 0b:de:dd:d4:ab:86:85:93:2c:17:1a:8f:00:92:42: 98:59:30:77:5f:8a:75:c5:db:59:84:ec:a6:d5:ae: 79:9d:07:7a:98:38:02:0e:c2:11:ad:a4:af:9e:e2: 0b:29:66:37:4b:6b:82:99:4e:a1:22:f5:39:bd:a8: 2b:2e:ad:b9:09:a8:c7:55:2a:c6:5d:bd:da:48:2e: e3:21:72:46:89:53:d0:bd:ed:e5:00:fd:61:85:ed: 74:f6:6d:5a:19:95:90:53:5f:8b:37:1f:66:df:cb: 93:c9:e2:ed:e6:aa:e2:ff:5a:16:16:76:1d:46:ee: eb:88:0f:2c:08:e5:8f:52:ad:fb:5b:e1:d6:05:0c: 0c:b0:bf:6c:3f:01:6d:84:89:cc:e3:90:b6:8d:92: 99:bb:de:54:6b:70:54:db:0e:b7:25:fe:8b:35:e8: 84:4f:f7:a5:34:83:82:ce:ff:20:78:f4:4d:f5:3d: 33:9b:3a:dc:3e:18:40:f7:8f:18:66:65:cf:7f:a4: bd:c8:2d:4f:8e:ed:42:e4:31:ab:8c:db:21:68:03: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A8:FD:85:1C:15:1F:1D:71:C2:59:89:06:17:97:50:94:F8:D5:EC X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:95:c3:cc:1d:8e:1a:d6:6a:7d:6f:7f:2e:a4:5e:64:03:09: 5d:cb:da:ab:6f:ca:34:69:33:45:3a:5b:f5:55:96:8c:24:f0: e5:5c:23:35:5b:d4:33:f9:39:21:0e:15:71:81:ae:a8:cc:62: d6:de:db:ab:2e:96:a7:7a:3d:3b:d1:42:eb:cc:75:f9:5c:51: fa:d1:5f:cc:aa:ff:dd:1d:a5:84:14:cc:be:91:cc:7f:29:8d: 7a:57:48:7e:95:ab:47:f2:fa:28:e2:12:5b:1c:e3:23:78:22: 88:f5:03:e6:f3:45:ec:97:99:12:bc:84:30:ee:01:73:96:8e: 0b:d0:61:be:c4:bc:a2:e1:72:8d:0e:a8:4e:2d:a9:e8:9b:c5: 3a:3f:81:4a:1d:a8:b2:a0:75:32:b7:48:28:a1:92:a0:d5:91: cb:d7:84:da:6c:27:7b:93:23:5a:20:7a:aa:0d:0a:7a:b6:f2: ed:7f:81:9e:5e:64:a9:fe:95:0d:b1:71:c6:56:d2:ce:9a:da: 9a:9b:ca:c0:bd:ec:31:71:8f:0a:1e:57:af:d5:d2:e2:81:8f: b8:49:a1:ec:78:c3:14:60:5a:e1:c5:af:ee:46:55:e2:fd:c9: 90:cf:d2:bf:f4:e7:6d:2c:ba:d9:34:9a:e7:e1:99:a5:c5:0e: 17:9c:34:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUwODExMDIyMjM5WhcNMjUwODE4MDIyMjM5WjAYMRYwFAYD VQQDEw02ODk5NTNlZi1kZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzQsh9ZVhPgZ5EjrhS2NF0fFZEWvLF3vJ+NkQdcFFRiewQ3qryJX2/HIQoML 3t3Uq4aFkywXGo8AkkKYWTB3X4p1xdtZhOym1a55nQd6mDgCDsIRraSvnuILKWY3 S2uCmU6hIvU5vagrLq25CajHVSrGXb3aSC7jIXJGiVPQve3lAP1hhe109m1aGZWQ U1+LNx9m38uTyeLt5qri/1oWFnYdRu7riA8sCOWPUq37W+HWBQwMsL9sPwFthInM 45C2jZKZu95Ua3BU2w63Jf6LNeiET/elNIOCzv8gePRN9T0zmzrcPhhA948YZmXP f6S9yC1Pju1C5DGrjNshaAPocwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOo/YUc FR8dccJZiQYXl1CU+NXsMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnlcPMHY4a1mp9b38upF5kAwldy9qrb8o0aTNFOlv1VZaMJPDlXCM1 W9Qz+TkhDhVxga6ozGLW3turLpanej070ULrzHX5XFH60V/Mqv/dHaWEFMy+kcx/ KY16V0h+latH8voo4hJbHOMjeCKI9QPm80Xsl5kSvIQw7gFzlo4L0GG+xLyi4XKN DqhOLanom8U6P4FKHaiyoHUyt0gooZKg1ZHL14TabCd7kyNaIHqqDQp6tvLtf4Ge XmSp/pUNsXHGVtLOmtqam8rAvewxcY8KHlev1dLigY+4SaHseMMUYFrhxa/uRlXi /cmQz9K/9OdtLLrZNJrn4ZmlxQ4XnDRh -----END CERTIFICATE-----Generated at Tue Aug 12 22:40:42 2025 by rpki-client