$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: rbStSNcJbDHhAvC6BOVC51niGKtnxWKOpENsIGZgTK4= Subject key identifier: 34:03:BB:0F:AD:31:AD:8C:27:FA:C5:2C:89:91:6E:A0:DF:1E:B2:5E Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0A3D Signing time: Wed 06 Aug 2025 20:19:53 +0000 Manifest this update: Wed 06 Aug 2025 20:19:52 +0000 Manifest next update: Wed 13 Aug 2025 20:19:52 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: y/I25FSZQLvl4tYphVBg5z+fMQYE0h0I0g9oxqQG9u0=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Aug 6 20:19:52 2025 GMT Not After : Aug 13 20:19:52 2025 GMT Subject: CN=6893b8e9-3196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:11:aa:6a:4a:82:99:cd:5f:37:60:00:b0: f7:b0:97:b4:63:03:56:8f:5d:ab:23:64:ef:b9:37: 34:22:d7:06:a0:9c:e2:2b:56:86:6f:7d:30:0f:01: cf:27:38:12:7d:35:71:1d:3c:0d:91:d4:f6:15:4c: 8d:2d:26:67:f6:d3:be:3f:77:06:c0:cd:1f:0d:df: a7:33:ae:1f:76:70:9f:0a:40:80:af:49:9c:23:5d: b0:08:87:e8:ab:96:0f:e3:a2:2e:7e:c5:69:cd:85: 53:1e:8d:5f:9d:85:be:72:e8:22:ef:12:5d:3a:f7: f5:b5:2f:5c:2e:d9:6d:bb:59:e1:94:c5:1c:84:ee: 04:62:d7:c0:d7:39:f1:26:7a:d5:0d:60:e9:4f:a5: cc:80:07:a2:23:a0:55:cc:b5:5e:4c:a2:01:79:ab: 0e:1a:24:d3:f5:99:cd:51:ce:f8:2c:71:4d:3b:91: b7:23:55:f7:5f:76:93:f1:85:ae:a0:6a:4b:b2:c9: 22:0e:cc:cb:1a:d2:fb:77:06:d4:52:7a:de:fc:44: fb:f5:bb:cd:b4:1c:1c:b0:dc:63:aa:79:1e:a9:60: de:d6:77:eb:66:cb:d3:af:18:ba:64:96:e5:ac:f0: 16:23:bf:54:78:47:a3:ae:28:37:aa:f9:11:8b:05: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:03:BB:0F:AD:31:AD:8C:27:FA:C5:2C:89:91:6E:A0:DF:1E:B2:5E X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:2c:19:56:0c:90:1b:fc:81:e3:3a:da:12:1f:8d:56:46:7c: 2c:cd:5c:0b:fe:05:54:cb:2e:89:c2:13:7a:c8:ff:44:89:65: 6d:f5:a4:2d:ff:1d:76:19:f7:1c:b1:a0:09:d6:1d:cd:8a:e2: f2:c4:97:8d:55:29:19:65:fc:c5:d4:bf:42:1d:76:4a:2e:bb: bb:84:c6:42:be:66:0a:30:3d:db:05:e3:41:94:f2:c7:d5:d2: 76:fb:70:3f:7b:1e:2b:4d:89:fb:ab:9f:22:69:5c:e1:d7:4b: 07:f1:eb:f9:e1:7c:26:7f:13:aa:bf:fa:29:7b:9d:77:21:91: 44:aa:f4:69:d1:2c:7e:d6:35:0d:ad:49:d2:86:f9:5d:c0:b7: 4a:48:bc:fd:e3:8c:a6:fd:d8:76:9e:6f:79:95:23:2a:b6:2d: 29:4d:b4:4e:39:42:76:73:36:e1:59:91:d5:a2:11:02:80:b8: 6d:7e:16:f0:cd:ea:01:ff:79:86:f3:d5:6c:33:30:b0:7d:bf: de:dc:e6:ba:f1:5b:3a:a5:99:74:52:26:76:77:a3:f6:04:d6: c9:32:95:07:fd:48:db:f4:a9:f2:68:e0:a4:94:1b:90:9d:44: 6a:26:91:ce:12:1d:7c:90:7f:3f:ff:a8:db:bb:a4:93:73:08: ac:e5:e7:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjUwODA2MjAxOTUyWhcNMjUwODEzMjAxOTUyWjAYMRYwFAYD VQQDEw02ODkzYjhlOS0zMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAna0RqmpKgpnNXzdgALD3sJe0YwNWj12rI2TvuTc0ItcGoJziK1aGb30wDwHP JzgSfTVxHTwNkdT2FUyNLSZn9tO+P3cGwM0fDd+nM64fdnCfCkCAr0mcI12wCIfo q5YP46IufsVpzYVTHo1fnYW+cugi7xJdOvf1tS9cLtltu1nhlMUchO4EYtfA1znx JnrVDWDpT6XMgAeiI6BVzLVeTKIBeasOGiTT9ZnNUc74LHFNO5G3I1X3X3aT8YWu oGpLsskiDszLGtL7dwbUUnre/ET79bvNtBwcsNxjqnkeqWDe1nfrZsvTrxi6ZJbl rPAWI79UeEejrig3qvkRiwU38QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQDuw+t Ma2MJ/rFLImRbqDfHrJeMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgLBlWDJAb/IHjOtoSH41WRnwszVwL/gVUyy6JwhN6yP9EiWVt9aQt /x12GfccsaAJ1h3NiuLyxJeNVSkZZfzF1L9CHXZKLru7hMZCvmYKMD3bBeNBlPLH 1dJ2+3A/ex4rTYn7q58iaVzh10sH8ev54XwmfxOqv/ope513IZFEqvRp0Sx+1jUN rUnShvldwLdKSLz944ym/dh2nm95lSMqti0pTbROOUJ2czbhWZHVohECgLhtfhbw zeoB/3mG89VsMzCwfb/e3Oa68Vs6pZl0UiZ2d6P2BNbJMpUH/Ujb9KnyaOCklBuQ nURqJpHOEh18kH8//6jbu6STcwis5efe -----END CERTIFICATE-----Generated at Thu Aug 7 11:20:16 2025 by rpki-client