$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: RuM49iygIIg8sb6e78kmFMkUevBD3O2079NLjjYLvnI= Subject key identifier: 9D:89:E7:26:F2:67:C2:26:27:C9:AC:02:A6:FD:D7:B0:E9:90:F5:DB Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 350C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 34D9 Signing time: Tue 12 Aug 2025 14:18:17 +0000 Manifest this update: Tue 12 Aug 2025 14:18:17 +0000 Manifest next update: Tue 19 Aug 2025 14:18:17 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: hMobZ3Ilf9JYtF1GMPQZadQwIcNJbKSN4hoVN6Grajc=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: E8L7EMY++G+/jL4fto/6X8FIxPH0nU/qyOAGKr50fbg=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: cZP7pPe4Y/msfUjF/3Xl+aRlpqp1LPFsqoN3iYA504I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13580 (0x350c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Aug 12 14:18:17 2025 GMT Not After : Aug 19 14:18:17 2025 GMT Subject: CN=689b4d29-34f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:8d:5f:07:23:7b:22:11:62:d4:c1:8b:c9: e1:9f:23:a5:0b:f3:8d:a3:89:65:df:ea:aa:e4:2b: 8a:7f:78:75:46:e7:e3:5b:42:6c:47:52:0b:b9:84: f9:98:b6:67:8f:a8:dc:20:c4:b9:7c:05:53:78:f4: da:3b:a7:ec:12:91:1f:7d:82:4c:bc:3c:7d:eb:eb: 8e:d3:7f:c7:59:7f:af:ed:74:ac:38:52:a5:ea:be: b3:d2:1b:90:ef:e5:f8:fc:30:c7:44:16:ff:eb:59: 06:9a:e5:de:6d:8d:49:48:72:cf:10:29:09:2d:f6: 92:58:ad:2c:4f:9c:7a:c9:d9:10:90:b3:78:c0:78: f6:60:d9:4d:e7:65:23:ae:a1:84:fe:b3:29:65:d7: c7:84:1d:f6:99:c3:fe:21:bd:41:d7:ff:e0:26:5e: 6a:11:cd:c8:31:3f:16:ad:a1:03:70:88:71:c2:92: 81:10:69:e9:2b:4e:b4:28:74:76:6a:84:01:14:da: f6:54:36:41:d9:b5:5f:87:3e:57:22:3f:57:f3:09: 9a:07:a1:a6:c8:3f:3f:87:ef:54:d6:e3:ed:b3:f8: 25:d3:e0:dc:cb:13:e3:df:fb:1b:d1:fd:b5:40:d0: 85:8c:67:d7:af:c2:35:28:45:e7:5a:07:10:50:77: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:E7:26:F2:67:C2:26:27:C9:AC:02:A6:FD:D7:B0:E9:90:F5:DB X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c7:43:6c:c3:8e:22:8b:66:54:eb:6f:8d:ea:a3:ec:86:ad: 3b:20:39:e0:18:74:fa:38:dd:38:be:d3:8f:8c:72:48:02:30: 04:fe:c8:9a:f2:62:17:05:f0:53:5d:e7:43:67:e1:d4:4f:34: 4a:84:de:fb:c5:6f:b4:9d:de:4b:f1:40:da:b8:b6:2a:2b:48: c0:b8:f5:b2:24:4e:79:fd:79:9e:d4:f1:0c:d0:eb:92:89:57: dc:25:2b:a6:b5:ad:f6:0e:08:82:b8:20:cd:f0:22:be:4d:e5: 0a:24:f4:c4:20:47:8f:22:76:33:60:4b:f9:8a:65:03:af:8a: 49:3c:62:c9:87:e5:cd:eb:b1:b6:82:4d:69:97:eb:89:bd:1a: 52:30:9d:4c:c9:15:f7:f8:37:83:4a:10:70:9f:2c:09:3b:4e: eb:e3:16:90:5c:ec:87:b7:3e:08:21:53:d9:25:46:3f:6f:33: 21:73:86:59:97:80:df:cb:80:ed:c9:6e:40:28:b2:95:f9:d6: 42:c0:18:0b:f5:d1:7b:ef:bd:07:0f:19:ca:ad:83:83:8d:88: 08:3e:17:23:aa:e6:4b:a4:72:0e:e0:a3:05:41:9f:9a:f1:61: c9:40:7e:99:77:31:7e:6e:9e:ce:72:77:8f:68:e0:d2:f4:1a: eb:f1:97:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjUwODEyMTQxODE3WhcNMjUwODE5MTQxODE3WjAYMRYwFAYD VQQDEw02ODliNGQyOS0zNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbGNXwcjeyIRYtTBi8nhnyOlC/ONo4ll3+qq5CuKf3h1RufjW0JsR1ILuYT5 mLZnj6jcIMS5fAVTePTaO6fsEpEffYJMvDx96+uO03/HWX+v7XSsOFKl6r6z0huQ 7+X4/DDHRBb/61kGmuXebY1JSHLPECkJLfaSWK0sT5x6ydkQkLN4wHj2YNlN52Uj rqGE/rMpZdfHhB32mcP+Ib1B1//gJl5qEc3IMT8WraEDcIhxwpKBEGnpK060KHR2 aoQBFNr2VDZB2bVfhz5XIj9X8wmaB6GmyD8/h+9U1uPts/gl0+DcyxPj3/sb0f21 QNCFjGfXr8I1KEXnWgcQUHeVawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2J5yby Z8ImJ8msAqb917DpkPXbMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBx0Nsw44ii2ZU62+N6qPshq07IDngGHT6ON04vtOPjHJIAjAE/sia 8mIXBfBTXedDZ+HUTzRKhN77xW+0nd5L8UDauLYqK0jAuPWyJE55/Xme1PEM0OuS iVfcJSumta32DgiCuCDN8CK+TeUKJPTEIEePInYzYEv5imUDr4pJPGLJh+XN67G2 gk1pl+uJvRpSMJ1MyRX3+DeDShBwnywJO07r4xaQXOyHtz4IIVPZJUY/bzMhc4ZZ l4Dfy4DtyW5AKLKV+dZCwBgL9dF7770HDxnKrYODjYgIPhcjquZLpHIO4KMFQZ+a 8WHJQH6ZdzF+bp7OcnePaODS9Brr8Zdi -----END CERTIFICATE-----Generated at Tue Aug 12 18:54:21 2025 by rpki-client