$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: IDg3ehb0dLeO0FI4ZCwwlqxyFkWm0gsDXxb5oTEVQZA= Subject key identifier: A7:FD:B3:5D:1B:32:77:43:8E:5D:9C:69:A2:8E:8C:DF:A9:62:63:9B Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: B2 Signing time: Sat 09 Aug 2025 06:27:29 +0000 Manifest this update: Sat 09 Aug 2025 06:27:29 +0000 Manifest next update: Sat 16 Aug 2025 06:27:29 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: fPSulIkE7gVHCFDzmV0/YR2c6RQ+Cukhw8zjF66pbyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Aug 9 06:27:29 2025 GMT Not After : Aug 16 06:27:29 2025 GMT Subject: CN=6896ea51-f476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f0:e8:ae:3d:c9:b8:9e:a5:13:bb:78:48:6c: d9:ea:0d:72:da:5a:ef:c8:94:f2:24:35:42:67:7e: c6:61:bb:e2:42:76:5a:1c:e0:8a:84:43:26:c5:58: 47:ec:31:d0:dd:b1:3b:fd:e0:6a:0b:be:fd:d5:b1: a8:02:28:bd:0a:f3:54:e2:7c:5e:5f:24:a8:f8:b1: b0:fd:d6:6e:c5:a7:83:c3:70:79:8f:20:3f:db:33: 6f:82:94:c9:9c:ae:4c:79:fc:e3:3c:7a:41:ea:6f: d8:8e:e5:93:38:2a:fa:30:95:e8:38:0c:c1:43:03: 30:1b:70:9c:ec:d6:07:f9:b7:e8:c6:4b:b8:78:0a: d2:84:88:42:8e:e8:df:93:ce:b1:b7:d4:45:0e:9d: c8:4a:dd:a3:93:9f:c1:59:81:19:89:44:e0:e8:e8: aa:4c:dc:d4:54:d9:7f:76:a6:90:a7:4f:d8:2d:45: 93:a0:9b:4a:3c:fb:96:36:2b:a2:82:ec:45:6e:2e: 3e:01:c4:14:04:42:d9:50:90:76:2a:4a:cb:99:f3: e8:c0:0d:c6:03:89:0d:0e:0c:87:c0:a3:1a:12:2d: bf:da:be:a7:aa:17:32:e4:e0:8c:4d:48:16:34:ff: dd:1b:f8:48:58:9d:52:29:08:65:39:a8:68:66:91: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:B3:5D:1B:32:77:43:8E:5D:9C:69:A2:8E:8C:DF:A9:62:63:9B X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e4:4a:97:e2:14:59:a2:8d:98:dc:98:b4:d7:82:aa:64:ff: 97:b9:f0:b8:69:d9:d1:93:df:7b:d9:d7:1c:b4:05:05:ad:4f: 11:5f:72:03:eb:c9:74:da:77:9e:9e:ed:4f:9f:30:c2:b0:ee: 7d:83:fe:a8:39:33:65:32:59:5b:56:0f:3d:3c:de:15:33:17: 06:3b:a5:0c:57:9c:e1:ec:fe:cc:5c:83:f0:11:60:f5:90:1c: 56:a2:ea:a2:4a:6f:56:a0:81:2a:6a:bb:6f:09:4e:1e:07:e6: 30:71:28:02:f5:16:59:a2:ca:b6:ec:5a:a0:9d:2f:cc:aa:51: c5:cd:c5:aa:0c:83:c7:bc:61:50:ac:94:86:82:9c:1f:fd:d0: 13:60:64:f6:16:cf:3c:64:05:18:70:e4:2b:e5:ad:a6:fb:bc: 53:ca:c7:2c:5a:4b:2c:34:7b:cd:73:38:1c:05:2d:c4:34:cd: ee:39:75:e4:a1:ec:fb:79:1b:8c:e8:07:35:b9:c9:97:7e:80: 82:8e:78:ac:16:78:85:0c:93:22:91:b1:07:ae:61:7c:4e:1b: 7b:d8:e1:8b:2f:6b:4d:f7:53:a5:c2:79:65:5a:ad:b9:22:1c: 09:63:a7:01:e2:60:fd:21:e6:1d:69:f7:32:f9:3f:02:0c:20: 96:74:2e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUwODA5MDYyNzI5WhcNMjUwODE2MDYyNzI5WjAYMRYwFAYD VQQDEw02ODk2ZWE1MS1mNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PDorj3JuJ6lE7t4SGzZ6g1y2lrvyJTyJDVCZ37GYbviQnZaHOCKhEMmxVhH 7DHQ3bE7/eBqC7791bGoAii9CvNU4nxeXySo+LGw/dZuxaeDw3B5jyA/2zNvgpTJ nK5MefzjPHpB6m/YjuWTOCr6MJXoOAzBQwMwG3Cc7NYH+bfoxku4eArShIhCjujf k86xt9RFDp3ISt2jk5/BWYEZiUTg6OiqTNzUVNl/dqaQp0/YLUWToJtKPPuWNiui guxFbi4+AcQUBELZUJB2KkrLmfPowA3GA4kNDgyHwKMaEi2/2r6nqhcy5OCMTUgW NP/dG/hIWJ1SKQhlOahoZpGAnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf9s10b MndDjl2caaKOjN+pYmObMB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd5EqX4hRZoo2Y3Ji014KqZP+XufC4adnRk9972dcctAUFrU8RX3ID 68l02neenu1PnzDCsO59g/6oOTNlMllbVg89PN4VMxcGO6UMV5zh7P7MXIPwEWD1 kBxWouqiSm9WoIEqartvCU4eB+YwcSgC9RZZosq27FqgnS/MqlHFzcWqDIPHvGFQ rJSGgpwf/dATYGT2Fs88ZAUYcOQr5a2m+7xTyscsWkssNHvNczgcBS3ENM3uOXXk oez7eRuM6Ac1ucmXfoCCjnisFniFDJMikbEHrmF8Tht72OGLL2tN91OlwnllWq25 IhwJY6cB4mD9IeYdafcy+T8CDCCWdC4y -----END CERTIFICATE-----Generated at Sun Aug 10 16:09:58 2025 by rpki-client