$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: BF+DmsgiSDPsJwwf4BHuKbtFbBrRAOzgJRbR0uHLoVg= Subject key identifier: 8F:58:4F:88:73:7B:9F:B2:1A:1A:58:11:93:E7:60:F6:8A:43:37:B8 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FBC Signing time: Sat 02 Aug 2025 17:40:46 +0000 Manifest this update: Sat 02 Aug 2025 17:40:46 +0000 Manifest next update: Sat 09 Aug 2025 17:40:46 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: kZiTYpGY/8jTeEz9UINFuJHSVIwXwIK7FD80WHkgTsk=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4035 (0xfc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Aug 2 17:40:46 2025 GMT Not After : Aug 9 17:40:46 2025 GMT Subject: CN=688e4d9e-d222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:a5:de:bc:96:3b:5a:29:7a:21:63:02:52: 90:57:5d:57:94:57:cd:55:10:fa:1c:70:00:e8:0a: bd:74:2f:14:a6:33:f1:2d:8b:f7:8b:7f:a1:6a:47: 56:d8:25:01:ed:5e:9e:05:fc:18:aa:19:2b:d9:7e: 60:e2:7f:71:3f:5e:ec:2d:72:e7:1c:af:62:28:9f: 5b:f5:fd:23:68:bd:37:83:94:0b:ce:96:02:c1:1e: 86:d8:f9:4f:42:2b:c5:cb:2b:9e:ec:f7:b1:fa:89: d7:ec:0c:6e:be:ea:11:4b:e6:53:28:65:a4:90:34: a8:62:69:92:ca:57:3e:74:e0:14:55:36:a3:26:6c: 2c:b3:02:49:20:16:fb:33:e1:8e:67:af:e7:61:4a: d4:8a:1a:13:24:f5:d2:ec:a2:3a:78:47:cf:3c:24: c5:15:f1:3a:0a:c6:fc:93:b2:08:f8:a8:d4:9f:98: 1b:d4:75:5a:16:a7:5f:ce:e2:28:91:e5:25:d7:fa: 02:04:41:eb:8f:b4:db:09:1b:84:c0:b9:48:4b:fb: fa:62:b5:32:23:70:98:3e:ea:d4:f5:e9:85:17:1d: 87:96:d4:c3:bb:cf:cb:cd:85:2d:82:eb:bd:4d:73: 0e:a1:65:aa:d5:00:aa:18:29:97:e8:4a:d9:e1:ed: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:58:4F:88:73:7B:9F:B2:1A:1A:58:11:93:E7:60:F6:8A:43:37:B8 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8b:9b:a6:52:b3:91:71:2e:40:b3:93:00:e0:89:d3:5d:ad: 2d:18:73:cc:e5:9d:22:d2:63:5a:02:6e:06:9d:ff:e5:13:d2: a7:40:7f:4a:95:83:87:c2:31:73:8c:44:0e:61:45:73:51:e9: af:09:e8:ce:cb:14:cd:9c:20:8f:4a:7f:0c:02:f6:39:61:bd: 1f:7b:4e:a0:ae:4e:01:90:a4:92:f7:03:9d:c7:5f:9e:98:6f: 35:78:52:2e:d9:9e:07:b4:c9:77:87:23:81:6e:7a:51:34:d9: 97:d7:f1:0f:bf:65:44:8c:32:8c:15:b1:07:bf:93:b4:bf:da: 5e:93:02:f5:5f:0b:5f:63:35:e2:cd:a5:13:5a:e9:e6:bc:60: f3:75:1b:80:a5:73:03:ae:0f:1f:1f:0f:2b:18:06:10:df:f9: 5c:4d:57:03:b0:6c:d7:e8:1a:72:c1:f6:68:d8:f7:37:ec:be: d5:d5:25:11:c8:4d:23:ed:33:23:ef:3b:0e:36:30:02:86:f7: 5f:27:30:e7:f1:37:dc:be:c0:a7:5e:11:be:e6:e1:be:09:8c: 0c:0a:78:a8:20:bf:84:77:91:02:da:a7:b4:0c:c5:e4:87:0c: fd:f8:79:6f:d9:e3:d6:f0:57:00:33:59:2e:4b:97:7c:38:8a: 50:c7:a0:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwODAyMTc0MDQ2WhcNMjUwODA5MTc0MDQ2WjAYMRYwFAYD VQQDEw02ODhlNGQ5ZS1kMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H6l3ryWO1opeiFjAlKQV11XlFfNVRD6HHAA6Aq9dC8UpjPxLYv3i3+hakdW 2CUB7V6eBfwYqhkr2X5g4n9xP17sLXLnHK9iKJ9b9f0jaL03g5QLzpYCwR6G2PlP QivFyyue7Pex+onX7AxuvuoRS+ZTKGWkkDSoYmmSylc+dOAUVTajJmwsswJJIBb7 M+GOZ6/nYUrUihoTJPXS7KI6eEfPPCTFFfE6Csb8k7II+KjUn5gb1HVaFqdfzuIo keUl1/oCBEHrj7TbCRuEwLlIS/v6YrUyI3CYPurU9emFFx2HltTDu8/LzYUtguu9 TXMOoWWq1QCqGCmX6ErZ4e1o8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9YT4hz e5+yGhpYEZPnYPaKQze4MB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqi5umUrORcS5As5MA4InTXa0tGHPM5Z0i0mNaAm4Gnf/lE9KnQH9K lYOHwjFzjEQOYUVzUemvCejOyxTNnCCPSn8MAvY5Yb0fe06grk4BkKSS9wOdx1+e mG81eFIu2Z4HtMl3hyOBbnpRNNmX1/EPv2VEjDKMFbEHv5O0v9pekwL1XwtfYzXi zaUTWunmvGDzdRuApXMDrg8fHw8rGAYQ3/lcTVcDsGzX6BpywfZo2Pc37L7V1SUR yE0j7TMj7zsONjAChvdfJzDn8TfcvsCnXhG+5uG+CYwMCnioIL+Ed5EC2qe0DMXk hwz9+Hlv2ePW8FcAM1kuS5d8OIpQx6A9 -----END CERTIFICATE-----Generated at Mon Aug 4 11:24:58 2025 by rpki-client