$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: rooT9xezclb/ys9D8IS0kJ6QdiYs9Bv2tv8DgK35XLk= Subject key identifier: 6C:33:5E:E0:1B:44:28:DA:FE:4F:D4:0C:F1:9D:22:DA:A0:88:E5:D1 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0488 Signing time: Thu 07 Aug 2025 00:34:08 +0000 Manifest this update: Thu 07 Aug 2025 00:34:07 +0000 Manifest next update: Thu 14 Aug 2025 00:34:07 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: F9UoTLymWDckj1JG8bnDRZUo98ragL+tjHFoHGlGnXU=) 2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: 70pXo7TPZehC7uJ0XdtVRKfDG1GkFpY/5x3mmDYZSxI=) 3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: w67HRNi/yFu6FrtkXk67zQVeYi9FWWK0Yn59oMaToP8=) 4: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: c26DXYzcpQgya2lb6mPXdMatF2eIuHc37QpxkKWbfsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Aug 7 00:34:07 2025 GMT Not After : Aug 14 00:34:07 2025 GMT Subject: CN=6893f480-0959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:28:e7:63:82:d5:9e:1c:31:13:33:8e:fd: f4:af:bd:0b:f3:5f:78:e4:9f:e6:3d:7e:52:fc:ce: 27:a9:4e:d7:bf:78:2a:83:e2:dd:bb:73:79:eb:d9: 36:59:18:b3:a1:12:dd:b2:62:92:54:64:fd:6e:26: 33:bf:de:32:40:39:aa:d9:5e:ad:3e:9c:6b:12:5e: d9:5a:93:6d:37:70:b4:41:a0:74:04:82:52:ce:a6: 11:f2:2c:d1:86:0d:2a:8b:64:e0:d9:77:36:c4:f0: b6:6a:b8:9e:4f:7e:77:ac:4b:0c:10:11:5c:be:c4: 72:b0:57:ce:8c:d9:17:21:7d:e0:b5:bb:41:d4:b4: b7:7a:bb:cc:72:c5:98:e3:18:9b:fa:d2:82:3f:47: 1c:68:15:3b:61:08:76:3f:81:36:e9:a9:5a:67:17: 86:f2:11:d0:78:f3:9a:eb:24:04:07:48:06:aa:70: 4b:3c:b7:01:b0:de:ba:2b:2f:1b:86:73:4b:a0:96: b0:bb:4e:52:f1:2f:1d:04:1e:81:ca:f0:98:0e:aa: b7:1e:4c:43:e1:a2:17:53:95:69:db:08:6a:f4:89: 01:a2:3c:98:13:05:7b:d0:cf:11:23:56:ea:67:88: 42:18:dd:7b:ca:ac:24:0a:5a:f7:cc:0a:1c:8c:8a: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:5E:E0:1B:44:28:DA:FE:4F:D4:0C:F1:9D:22:DA:A0:88:E5:D1 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:85:67:e8:b2:d3:ef:60:ba:ec:f7:ab:f5:9b:ab:09:57:96: 44:98:e3:34:38:a8:d6:d8:bc:71:ab:4e:fa:28:e2:fa:57:e3: 35:61:66:b1:95:04:1a:cf:18:cc:e2:6c:5e:9c:36:49:9f:23: b5:bb:d8:64:a8:6f:57:27:b9:f2:dd:9b:5f:eb:61:01:8c:3d: f6:24:33:5c:85:bc:82:47:5f:e1:bc:bb:b9:53:c9:7a:fc:f1: 0b:5c:06:b2:3f:e8:68:8e:16:c6:48:3a:a2:3f:36:39:5f:15: f5:3a:e1:9a:67:e9:2c:85:0a:50:ca:a2:28:d1:a8:1f:f3:79: 18:11:92:1c:34:b3:d2:f5:4c:ce:e9:c0:c8:30:29:77:62:ee: 61:a7:42:9c:91:35:28:03:f3:6a:b8:9c:a8:36:df:c3:93:8d: 34:a9:b4:db:46:18:69:9d:44:d2:c8:c8:be:45:38:e4:c0:c8: 53:a0:0e:b1:d8:83:9c:f7:42:44:69:3e:8c:c5:d6:17:ca:6a: 4c:23:0c:08:94:e9:ef:44:46:c0:0c:89:8b:b4:e5:9c:81:29: 27:e3:04:17:0c:d3:96:48:ed:fc:84:5d:9a:a6:a8:28:2a:d5: 53:88:0b:97:5c:78:d0:02:6d:da:e7:27:7e:32:b8:83:b5:da: 25:46:39:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjUwODA3MDAzNDA3WhcNMjUwODE0MDAzNDA3WjAYMRYwFAYD VQQDEw02ODkzZjQ4MC0wOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3so52OC1Z4cMRMzjv30r70L81945J/mPX5S/M4nqU7Xv3gqg+Ldu3N569k2 WRizoRLdsmKSVGT9biYzv94yQDmq2V6tPpxrEl7ZWpNtN3C0QaB0BIJSzqYR8izR hg0qi2Tg2Xc2xPC2arieT353rEsMEBFcvsRysFfOjNkXIX3gtbtB1LS3ervMcsWY 4xib+tKCP0ccaBU7YQh2P4E26alaZxeG8hHQePOa6yQEB0gGqnBLPLcBsN66Ky8b hnNLoJawu05S8S8dBB6ByvCYDqq3HkxD4aIXU5Vp2whq9IkBojyYEwV70M8RI1bq Z4hCGN17yqwkClr3zAocjIoKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwzXuAb RCja/k/UDPGdItqgiOXRMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOhWfostPvYLrs96v1m6sJV5ZEmOM0OKjW2Lxxq076KOL6V+M1YWax lQQazxjM4mxenDZJnyO1u9hkqG9XJ7ny3Ztf62EBjD32JDNchbyCR1/hvLu5U8l6 /PELXAayP+hojhbGSDqiPzY5XxX1OuGaZ+kshQpQyqIo0agf83kYEZIcNLPS9UzO 6cDIMCl3Yu5hp0KckTUoA/NquJyoNt/Dk400qbTbRhhpnUTSyMi+RTjkwMhToA6x 2IOc90JEaT6MxdYXympMIwwIlOnvREbADImLtOWcgSkn4wQXDNOWSO38hF2apqgo KtVTiAuXXHjQAm3a5yd+MriDtdolRjkR -----END CERTIFICATE-----Generated at Thu Aug 7 04:38:16 2025 by rpki-client