$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json) Hash identifier: UikGzsx3749UOdVnqHl0kqWFNcdyD/PW+xG3Oz0KBmo= Subject key identifier: F6:4A:42:4B:A5:CE:62:B5:1A:1C:5D:F9:B8:2F:D4:0D:3F:32:F1:20 Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft Manifest number: DA Signing time: Mon 11 Aug 2025 05:46:55 +0000 Manifest this update: Mon 11 Aug 2025 05:46:55 +0000 Manifest next update: Mon 18 Aug 2025 05:46:55 +0000 Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: qY/cnB3uSRqwh07INiFbcBkAAsPbjiveJehZFh5IoWY=) 2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Validity Not Before: Aug 11 05:46:55 2025 GMT Not After : Aug 18 05:46:55 2025 GMT Subject: CN=689983cf-5d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:0a:1d:e5:2f:17:d8:5a:ab:14:73:5f:6c: ba:a4:b4:b0:ce:97:dd:ce:63:41:6a:27:be:65:a1: 82:96:fa:d5:09:1e:2a:3d:de:ba:f1:06:be:2b:aa: db:2c:40:a1:63:a0:b9:95:b4:d9:c4:ad:1f:e3:90: d3:20:04:d5:f4:53:03:c0:a1:06:d8:22:a1:0f:76: 74:cc:27:93:87:31:ac:7a:cc:01:9c:ae:73:17:06: b1:31:97:6d:4b:c7:62:dd:04:9d:a6:0b:17:23:c4: 18:4f:dd:04:bc:6c:6c:06:74:ce:10:da:b6:ee:8c: 94:83:28:54:d4:87:1d:7c:a2:8a:5d:06:81:5e:f7: ef:85:0d:52:2c:12:23:76:e2:b7:d6:d1:99:41:0f: d2:24:54:31:12:2b:6b:ea:6a:e1:23:68:47:bd:ef: 4c:8b:f8:51:45:79:9b:cb:ef:bc:89:29:c1:27:f9: 07:25:58:0c:60:0d:4b:f7:ab:fc:fb:28:ba:e5:63: b6:a8:83:fb:a4:5d:a5:b2:99:36:e7:cb:17:66:1f: 0d:ad:62:b8:da:7d:83:74:34:85:2d:3d:d7:e3:ed: 89:aa:2b:c6:1a:81:a9:e8:5b:df:3e:89:0d:29:97: 0f:a9:f1:b7:7a:8f:4c:9e:03:b6:80:e8:79:fb:e4: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4A:42:4B:A5:CE:62:B5:1A:1C:5D:F9:B8:2F:D4:0D:3F:32:F1:20 X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:84:fe:3d:00:a0:95:cf:a7:d5:65:5c:2b:50:c4:3b:7c:6b: 31:58:45:94:f9:8b:33:10:4f:01:bb:7d:1c:85:dd:c5:94:2d: 1a:98:44:0e:54:6b:5a:c5:8e:ed:5f:df:03:39:d9:d4:e0:c4: 99:51:a7:c2:6d:2e:0d:d3:d3:9e:2a:40:e2:1c:06:24:cb:4b: 27:fa:61:d2:59:19:da:21:36:e9:cb:47:3d:08:28:c4:39:f4: 90:ff:2b:7a:40:43:b5:43:cf:da:6b:53:3b:8a:a2:d2:e3:41: f6:71:a5:60:43:c9:ef:de:1c:32:49:69:91:6e:42:38:35:f2: c9:a0:b6:c9:6a:83:84:9f:11:36:d6:f9:85:07:25:ef:51:5b: 96:df:e2:2f:06:19:6f:a9:7f:ad:11:e3:2c:f3:b5:e3:39:7b: 66:53:be:99:f5:c9:50:91:fe:a8:c5:92:12:d4:23:2d:67:4b: db:f5:dc:dd:7c:e2:7a:3a:74:e0:f6:0f:24:46:ce:c9:a2:51: 1b:ca:86:28:33:bd:fa:19:cc:e8:4f:fe:8c:46:48:03:06:ce: 6c:94:dd:b3:22:c8:d8:f5:3e:6c:03:98:f2:38:86:e0:d6:c4: 2e:13:be:61:88:9e:75:b5:64:9b:0a:75:1f:86:50:2a:ee:02: eb:fe:75:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx MzgyRTRFNTgwHhcNMjUwODExMDU0NjU1WhcNMjUwODE4MDU0NjU1WjAYMRYwFAYD VQQDEw02ODk5ODNjZi01ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV4KHeUvF9haqxRzX2y6pLSwzpfdzmNBaie+ZaGClvrVCR4qPd668Qa+K6rb LEChY6C5lbTZxK0f45DTIATV9FMDwKEG2CKhD3Z0zCeThzGseswBnK5zFwaxMZdt S8di3QSdpgsXI8QYT90EvGxsBnTOENq27oyUgyhU1IcdfKKKXQaBXvfvhQ1SLBIj duK31tGZQQ/SJFQxEitr6mrhI2hHve9Mi/hRRXmby++8iSnBJ/kHJVgMYA1L96v8 +yi65WO2qIP7pF2lspk258sXZh8NrWK42n2DdDSFLT3X4+2JqivGGoGp6FvfPokN KZcPqfG3eo9MngO2gOh5++QRFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZKQkul zmK1Ghxd+bgv1A0/MvEgMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBR MzZxT3pzVjV6RklUZ3VUbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkhP49AKCVz6fVZVwrUMQ7fGsxWEWU+YszEE8Bu30chd3FlC0amEQO VGtaxY7tX98DOdnU4MSZUafCbS4N09OeKkDiHAYky0sn+mHSWRnaITbpy0c9CCjE OfSQ/yt6QEO1Q8/aa1M7iqLS40H2caVgQ8nv3hwySWmRbkI4NfLJoLbJaoOEnxE2 1vmFByXvUVuW3+IvBhlvqX+tEeMs87XjOXtmU76Z9clQkf6oxZIS1CMtZ0vb9dzd fOJ6OnTg9g8kRs7JolEbyoYoM736GczoT/6MRkgDBs5slN2zIsjY9T5sA5jyOIbg 1sQuE75hiJ51tWSbCnUfhlAq7gLr/nX3 -----END CERTIFICATE-----Generated at Wed Aug 13 05:37:38 2025 by rpki-client