$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: 2/PCZ/sXlpCzZUxCcTK939AZIfguJOL3ldpVR26dVSQ= Subject key identifier: DB:43:D2:99:59:7E:26:DF:6B:5A:B6:41:12:67:BE:F7:8B:46:EB:6D Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: CB Signing time: Mon 11 Aug 2025 05:55:18 +0000 Manifest this update: Mon 11 Aug 2025 05:55:17 +0000 Manifest next update: Mon 18 Aug 2025 05:55:17 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: YTSPBbhjzIK/PyBV7xudX3uIeb3vbt00WXI1YkBpMcY=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Aug 11 05:55:17 2025 GMT Not After : Aug 18 05:55:17 2025 GMT Subject: CN=689985c5-071c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:78:2c:32:e8:ab:1f:70:a2:8e:03:0c:57: 13:b5:d5:84:16:aa:28:13:e8:c0:6b:2c:ad:66:9e: e8:b6:0b:77:ce:c3:99:73:b3:fd:3c:29:8e:8a:cd: 7d:f4:9b:35:97:bf:d7:5c:79:0a:ff:55:2e:06:96: 51:21:6b:75:e6:67:8e:ff:38:d5:08:19:3a:5a:5d: 52:53:55:f5:61:ba:c0:02:39:bc:b6:d0:3a:62:64: 2a:74:33:40:73:54:5d:3a:ed:98:fa:1d:4d:d4:18: 3f:4c:a8:c4:0d:96:8d:41:a9:26:b0:d6:0a:eb:40: 92:d1:af:63:31:91:22:c1:e1:5e:0d:df:4d:e4:06: 6f:59:3f:3a:e7:8d:78:b4:68:05:49:6d:c3:de:41: 0e:d2:f0:49:f6:ed:ba:42:2c:1c:f9:79:c8:5e:1e: 1f:0a:bc:57:c5:1f:6c:85:f4:9a:09:ff:1f:27:f4: 8a:39:a4:46:5b:43:c9:2b:48:a1:5f:72:d4:b1:34: 24:23:cc:d6:c1:e6:6b:3a:49:75:b5:24:34:ce:a6: 1d:5e:e7:43:d3:7c:b7:b8:d0:00:e3:df:9e:47:c8: eb:a6:06:74:18:2e:b2:e4:3a:c4:c2:4c:8a:0d:4e: d6:a5:be:75:5e:6c:be:f5:2e:24:ed:79:83:a0:89: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:D2:99:59:7E:26:DF:6B:5A:B6:41:12:67:BE:F7:8B:46:EB:6D X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a8:07:5c:52:c0:1f:b9:63:98:1d:31:ee:e2:9d:d1:d8:aa: d2:b0:96:a4:ae:cd:a0:c5:a8:47:e8:93:a2:3b:7f:7d:24:d7: 70:3f:b1:db:8c:3a:70:1e:27:57:2c:88:bf:51:60:b6:9b:7c: 6e:72:44:34:e4:36:5f:93:e7:42:d9:4c:67:59:5f:1f:85:5b: 02:7e:8f:4e:ec:1b:7e:84:6d:a2:be:79:f1:53:e5:31:bd:53: 5a:35:91:d9:b0:f1:95:1e:e6:33:69:04:c5:4c:d7:56:65:f0: 5c:f2:0c:67:26:4f:a7:28:12:68:cd:21:a0:7b:25:ba:f1:48: 54:8a:ff:0d:69:d7:a2:ac:71:8b:9b:52:34:2a:a0:4d:cd:e3: 05:7a:d6:d2:38:28:29:1d:58:92:08:5c:d9:2e:6b:bc:cc:be: 94:6b:4f:9c:1a:58:70:d4:ad:fd:d0:6b:53:8f:cc:eb:72:e0: c1:a9:94:ba:2d:b0:2a:cb:55:07:39:d5:6d:d5:80:10:6a:97: 48:eb:57:5b:72:07:a9:4b:7b:3c:4e:0e:c1:9c:40:7b:31:e1: 1d:5a:ff:2a:6f:5a:02:2c:55:15:c1:bc:31:52:98:cd:ea:c0: 35:96:a7:fe:66:31:25:a0:53:7d:11:ff:b5:c5:47:06:50:cb: 0e:5b:4c:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjUwODExMDU1NTE3WhcNMjUwODE4MDU1NTE3WjAYMRYwFAYD VQQDEw02ODk5ODVjNS0wNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hd4LDLoqx9woo4DDFcTtdWEFqooE+jAayytZp7otgt3zsOZc7P9PCmOis19 9Js1l7/XXHkK/1UuBpZRIWt15meO/zjVCBk6Wl1SU1X1YbrAAjm8ttA6YmQqdDNA c1RdOu2Y+h1N1Bg/TKjEDZaNQakmsNYK60CS0a9jMZEiweFeDd9N5AZvWT865414 tGgFSW3D3kEO0vBJ9u26Qiwc+XnIXh4fCrxXxR9shfSaCf8fJ/SKOaRGW0PJK0ih X3LUsTQkI8zWweZrOkl1tSQ0zqYdXudD03y3uNAA49+eR8jrpgZ0GC6y5DrEwkyK DU7Wpb51Xmy+9S4k7XmDoIlEzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtD0plZ fibfa1q2QRJnvveLRuttMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWqAdcUsAfuWOYHTHu4p3R2KrSsJakrs2gxahH6JOiO399JNdwP7Hb jDpwHidXLIi/UWC2m3xuckQ05DZfk+dC2UxnWV8fhVsCfo9O7Bt+hG2ivnnxU+Ux vVNaNZHZsPGVHuYzaQTFTNdWZfBc8gxnJk+nKBJozSGgeyW68UhUiv8NadeirHGL m1I0KqBNzeMFetbSOCgpHViSCFzZLmu8zL6Ua0+cGlhw1K390GtTj8zrcuDBqZS6 LbAqy1UHOdVt1YAQapdI61dbcgepS3s8Tg7BnEB7MeEdWv8qb1oCLFUVwbwxUpjN 6sA1lqf+ZjEloFN9Ef+1xUcGUMsOW0yC -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:23 2025 by rpki-client