$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: +FnyMv1Wglha7uayz+/cxOjhm2mX/lslqxreqtFUl5U= Subject key identifier: 1A:4F:BB:6E:78:13:15:94:9B:4E:81:C6:CC:BF:85:EA:6C:21:B1:49 Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0B28 Signing time: Fri 08 Aug 2025 19:32:33 +0000 Manifest this update: Fri 08 Aug 2025 19:32:32 +0000 Manifest next update: Fri 15 Aug 2025 19:32:32 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: OLPBXfjOUsddCIJy9PpZvWbryou3mnOPuQGD+aFYkog=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Aug 8 19:32:32 2025 GMT Not After : Aug 15 19:32:32 2025 GMT Subject: CN=689650d0-b7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:d7:b6:d2:86:d2:49:ac:41:18:0e:3a:74: c3:d3:2e:c3:71:ac:64:08:73:cb:b6:f1:f6:16:34: 2e:75:21:a1:87:1f:c9:08:af:39:e2:cb:0c:fb:68: 02:f0:a0:b2:ff:46:ad:34:29:ae:a5:2a:86:09:31: 5d:4c:f0:65:30:61:71:ee:e0:49:c6:ad:cc:3e:d6: 05:39:ff:ee:a8:a3:a4:2e:4e:2a:3f:f6:4e:f5:e3: b6:70:72:69:bf:1b:95:34:1d:40:4b:13:10:69:e9: c9:e1:2f:55:c0:56:57:80:58:e8:42:67:00:e3:d1: ee:46:18:b8:02:e9:28:6b:90:62:24:2b:60:15:0d: 22:ca:62:be:48:fb:57:7f:de:4a:c0:4c:ce:aa:42: 03:f8:5f:f2:06:d1:e3:c9:52:29:2d:00:58:b3:15: 68:e6:b7:53:b6:18:f4:08:01:c7:ab:0e:f0:11:c2: 95:2f:d4:de:ec:aa:6b:f5:63:93:15:59:07:a0:9e: 1b:a1:36:83:e1:26:1e:bd:1d:fc:05:15:28:cd:dd: cc:55:c5:32:5c:83:47:47:3f:46:89:76:0a:a1:ba: a1:7c:f1:ad:45:98:0a:2e:3a:62:a5:34:48:46:7b: 52:53:b8:69:e9:aa:ba:63:80:ed:25:88:60:dc:55: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4F:BB:6E:78:13:15:94:9B:4E:81:C6:CC:BF:85:EA:6C:21:B1:49 X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:75:b2:04:3f:fe:6a:d4:81:f9:d0:71:c1:88:32:42:82:7b: 74:5c:af:63:b6:15:a2:f3:49:89:31:76:2f:9c:e1:67:38:0d: fa:96:8e:d8:06:39:31:2e:c0:82:fa:d3:b7:84:50:31:71:fe: 85:4f:44:ad:7a:8e:9b:00:99:2b:91:3e:f5:34:7e:3f:c2:d9: f1:dc:12:c2:38:0b:91:b5:44:c3:98:68:53:e8:84:df:cf:61: a1:96:74:a5:cd:0e:cb:49:27:38:eb:7f:be:d7:d0:78:88:25: b6:0c:11:63:09:7c:cd:7d:74:40:26:15:a5:04:2a:c9:21:cb: 77:03:e8:79:42:3c:54:50:85:88:70:ac:1f:37:0e:18:e3:2e: 2b:28:35:8a:b5:1c:d8:a6:e6:e8:bb:05:fa:5a:06:07:b0:cb: d4:c7:08:cc:2f:81:7d:79:9d:07:73:3f:d0:5e:f0:7d:7c:1f: 2d:22:07:11:26:ce:b0:9f:fb:da:05:49:75:83:7b:f6:b9:6e: d8:03:e3:7d:fc:06:14:e3:e3:ce:c2:93:6d:15:e3:eb:42:d6: ac:6e:29:9e:31:4c:a2:a4:18:f6:dd:47:d8:9a:13:3d:60:e9: 1b:a2:40:7e:0e:38:7d:d0:f9:ee:fd:4c:5e:58:49:f7:91:ae: 69:55:c9:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUwODA4MTkzMjMyWhcNMjUwODE1MTkzMjMyWjAYMRYwFAYD VQQDEw02ODk2NTBkMC1iN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKzXttKG0kmsQRgOOnTD0y7DcaxkCHPLtvH2FjQudSGhhx/JCK854ssM+2gC 8KCy/0atNCmupSqGCTFdTPBlMGFx7uBJxq3MPtYFOf/uqKOkLk4qP/ZO9eO2cHJp vxuVNB1ASxMQaenJ4S9VwFZXgFjoQmcA49HuRhi4Aukoa5BiJCtgFQ0iymK+SPtX f95KwEzOqkID+F/yBtHjyVIpLQBYsxVo5rdTthj0CAHHqw7wEcKVL9Te7Kpr9WOT FVkHoJ4boTaD4SYevR38BRUozd3MVcUyXINHRz9GiXYKobqhfPGtRZgKLjpipTRI RntSU7hp6aq6Y4DtJYhg3FUzZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpPu254 ExWUm06Bxsy/hepsIbFJMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+dbIEP/5q1IH50HHBiDJCgnt0XK9jthWi80mJMXYvnOFnOA36lo7Y BjkxLsCC+tO3hFAxcf6FT0Steo6bAJkrkT71NH4/wtnx3BLCOAuRtUTDmGhT6ITf z2GhlnSlzQ7LSSc463++19B4iCW2DBFjCXzNfXRAJhWlBCrJIct3A+h5QjxUUIWI cKwfNw4Y4y4rKDWKtRzYpubouwX6WgYHsMvUxwjML4F9eZ0Hcz/QXvB9fB8tIgcR Js6wn/vaBUl1g3v2uW7YA+N9/AYU4+POwpNtFePrQtasbimeMUyipBj23UfYmhM9 YOkbokB+Djh90Pnu/UxeWEn3ka5pVckH -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:02 2025 by rpki-client