$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: YHykAiRURphtJadsPX35TycVWXBOSIzDOd7uUJDBD0g= Subject key identifier: 3B:52:EC:DC:3F:59:49:D6:52:8F:04:B2:15:45:6C:FB:01:9A:64:AB Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 0142 Signing time: Sat 09 Aug 2025 04:48:08 +0000 Manifest this update: Sat 09 Aug 2025 04:48:08 +0000 Manifest next update: Sat 16 Aug 2025 04:48:08 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: AJtfFp3f/4Ei4jAySy+dXltiUJhZTlEycB2yky24Irg=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: Aug 9 04:48:08 2025 GMT Not After : Aug 16 04:48:08 2025 GMT Subject: CN=6896d308-a83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:30:89:63:49:13:c3:66:76:f8:91:8e:6a: 1d:38:92:7c:0d:3f:33:0f:21:a6:d4:cb:61:64:e5: 6e:b1:e6:de:56:a8:8e:f6:d6:53:db:42:11:cf:d3: e6:70:4d:a4:34:a2:4e:16:d9:e7:5a:d0:10:b8:9d: af:28:71:fb:a5:1a:8f:6a:2c:a8:e5:61:af:b7:d7: b4:52:75:c4:dc:99:f1:e6:84:1a:e0:87:6b:8e:7e: 05:0b:14:91:af:ad:5c:0e:6e:94:a6:2e:a8:75:b9: e5:98:80:24:13:6e:47:5c:58:0b:74:28:81:4f:5a: 53:8c:79:d9:58:08:5f:be:53:4d:5f:d2:76:b6:5e: 3f:64:7a:64:e5:d7:63:09:b0:6b:79:f3:64:4a:d7: 85:32:20:83:07:ab:74:42:7b:b0:43:e8:77:f6:c3: 27:8b:bc:15:80:b0:38:21:12:d2:ed:f6:1b:8c:10: 83:19:ea:f3:0a:a0:ee:3d:f8:3a:8d:8b:0f:10:fe: 65:c3:2d:23:51:3e:d3:85:32:79:03:80:3c:ae:7c: 28:c5:a3:d6:14:6c:f8:89:be:53:60:c2:64:c0:41: 4c:7c:66:5b:3a:d1:66:42:44:dc:1f:bf:e0:69:c3: 03:04:54:db:80:2a:56:33:a6:13:fe:f0:75:0f:25: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:52:EC:DC:3F:59:49:D6:52:8F:04:B2:15:45:6C:FB:01:9A:64:AB X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4b:1f:a0:f5:f5:db:58:20:0f:bc:cf:b7:52:0a:19:e6:08: 7f:27:88:b6:b5:b9:93:6d:ca:8a:9f:50:66:22:19:3a:b4:31: 62:f0:39:a9:fb:4c:0d:fe:2d:d4:8f:50:bd:88:46:c8:5e:9b: f2:f7:24:c2:93:20:d0:68:f6:c0:32:ea:17:27:8e:26:bb:f1: ce:4a:32:26:d7:53:52:8d:3a:4c:28:3c:a9:fc:fd:dd:06:81: 3f:df:43:49:b4:1c:51:60:f0:32:d7:09:a4:8d:99:d6:dd:35: 3c:b6:b3:84:1d:37:05:16:62:d0:36:ff:9f:5a:cd:70:4a:22: 9f:e3:b5:0d:6c:59:17:18:a5:a1:62:94:08:33:a8:b9:51:e2: c7:6f:0d:b1:64:e8:6a:12:51:0a:15:7e:51:1a:e9:2e:09:42: c5:28:39:bd:70:9c:9a:c5:9c:9d:86:36:b9:11:40:de:8a:04: 00:12:87:b3:f4:57:92:49:3c:30:36:98:fe:3f:eb:11:80:f1: 35:e6:cf:e0:33:cf:a7:b8:54:cd:10:c7:84:7b:8c:b6:c6:8e: 5d:be:53:66:da:97:1d:c2:48:3a:d5:f7:50:07:58:b8:f6:25: b5:53:1a:e8:19:e5:3e:44:3d:8b:28:ea:e6:3b:d6:cf:a4:6c: 9d:cf:a4:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjUwODA5MDQ0ODA4WhcNMjUwODE2MDQ0ODA4WjAYMRYwFAYD VQQDEw02ODk2ZDMwOC1hODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulwwiWNJE8NmdviRjmodOJJ8DT8zDyGm1MthZOVusebeVqiO9tZT20IRz9Pm cE2kNKJOFtnnWtAQuJ2vKHH7pRqPaiyo5WGvt9e0UnXE3Jnx5oQa4Idrjn4FCxSR r61cDm6Upi6odbnlmIAkE25HXFgLdCiBT1pTjHnZWAhfvlNNX9J2tl4/ZHpk5ddj CbBrefNkSteFMiCDB6t0QnuwQ+h39sMni7wVgLA4IRLS7fYbjBCDGerzCqDuPfg6 jYsPEP5lwy0jUT7ThTJ5A4A8rnwoxaPWFGz4ib5TYMJkwEFMfGZbOtFmQkTcH7/g acMDBFTbgCpWM6YT/vB1DyVOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtS7Nw/ WUnWUo8EshVFbPsBmmSrMB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjRGNi9FMUNGM0M1NjkwREIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJ OFNiQWJvS1hEcnRJdGtZOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUSx+g9fXbWCAPvM+3UgoZ5gh/J4i2tbmTbcqKn1BmIhk6tDFi8Dmp +0wN/i3Uj1C9iEbIXpvy9yTCkyDQaPbAMuoXJ44mu/HOSjIm11NSjTpMKDyp/P3d BoE/30NJtBxRYPAy1wmkjZnW3TU8trOEHTcFFmLQNv+fWs1wSiKf47UNbFkXGKWh YpQIM6i5UeLHbw2xZOhqElEKFX5RGukuCULFKDm9cJyaxZydhja5EUDeigQAEoez 9FeSSTwwNpj+P+sRgPE15s/gM8+nuFTNEMeEe4y2xo5dvlNm2pcdwkg61fdQB1i4 9iW1UxroGeU+RD2LKOrmO9bPpGydz6Tf -----END CERTIFICATE-----Generated at Sun Aug 10 10:42:30 2025 by rpki-client