$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: rxkVwA9OGMNAZZW14OWmHyGp6qtVG+0kkTQ7z9QLz6U= Subject key identifier: 2E:F5:D3:54:F5:90:0F:33:53:F3:06:5B:35:5C:D5:C9:0D:62:DE:95 Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 12EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 12E1 Signing time: Mon 04 Aug 2025 17:13:46 +0000 Manifest this update: Mon 04 Aug 2025 17:13:45 +0000 Manifest next update: Mon 11 Aug 2025 17:13:45 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: MDlMnTQ6kG2D+VHq08dJDCOLfTIw05SyV21xj0UHl0s=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 6hOTp4SmpuhM6odO1i0HOQXN93az6Qa4OUEoe22Ijvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4847 (0x12ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Aug 4 17:13:45 2025 GMT Not After : Aug 11 17:13:45 2025 GMT Subject: CN=6890ea49-1336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:89:fd:59:eb:cf:74:d1:9d:f9:a6:30:b8: f2:93:6a:ee:43:f9:67:b1:53:53:96:df:23:3e:e4: 23:84:27:04:50:8b:cf:d9:52:7f:6d:57:75:8e:f7: 07:a6:1e:8b:63:c3:d4:70:67:69:49:b8:53:61:7a: f8:be:14:6b:dd:b5:e7:ca:a3:79:a6:b2:9f:0f:14: 85:8e:d6:2a:56:7f:50:4d:b2:c5:a5:21:a7:8b:d7: 67:a6:42:69:ea:07:1a:bf:bc:1a:26:91:94:05:14: 85:b3:16:2c:2c:6b:49:5b:56:b0:d4:0e:a1:6f:b9: 24:31:d2:8d:66:ad:51:bd:dd:77:df:1c:60:af:d4: c9:f7:91:da:6b:38:8c:77:11:ad:b0:09:ae:af:32: 29:43:7c:8c:3f:7a:9c:d4:71:ad:12:ec:ab:25:de: 50:76:71:ec:8a:4d:e8:2c:ec:95:06:03:f4:63:34: 61:13:85:5c:32:58:9f:03:ca:00:ba:08:33:47:97: 75:bb:7b:23:70:16:a8:6c:f9:ee:a1:67:81:05:ef: e0:cd:12:04:06:40:a5:33:3b:9a:b4:48:90:a9:bc: aa:12:c4:80:bd:e8:51:8c:bf:1e:61:ae:65:5e:18: 67:e1:0d:6f:45:cf:ac:ef:48:c4:6b:73:82:8d:b2: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F5:D3:54:F5:90:0F:33:53:F3:06:5B:35:5C:D5:C9:0D:62:DE:95 X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:64:6d:1e:37:46:bb:48:cf:c6:5c:04:06:e5:9f:94:be:b7: 14:17:c1:f6:7a:94:7a:d1:f2:5e:81:37:18:d6:92:1f:36:86: 30:12:b5:27:5a:12:19:2c:b1:66:67:0e:2c:87:cd:28:30:da: a3:f1:04:83:fa:62:d1:71:3e:f0:77:17:80:1b:36:bc:8e:16: 38:6d:00:b2:c8:9a:dd:69:0a:10:d5:a7:43:fc:f6:1a:f1:bf: d6:c1:42:56:41:ed:64:cb:84:fb:b4:06:2a:f1:a2:64:3f:08: f2:a5:ef:4a:3b:01:04:82:6e:90:88:c4:8f:d3:8a:48:44:cd: 87:10:62:c4:4d:09:ab:ac:d5:cc:7f:41:e0:ed:f0:71:9c:46: 83:ef:2b:37:98:a8:00:21:07:4b:61:75:16:00:b1:a9:b5:7c: 63:64:d0:99:06:ee:fa:71:f4:b1:46:e9:44:3c:aa:cf:79:5f: f9:80:2a:2e:c3:7f:19:26:a4:23:dc:d9:e6:40:c2:bb:9d:75: 85:3c:a2:20:1a:64:0c:cf:73:fd:21:aa:dc:62:68:8b:ed:0c: fb:86:00:eb:05:25:57:8e:37:65:43:af:74:d5:07:57:09:b3: 1d:8b:fe:26:78:8c:8e:6a:5d:bd:eb:c3:d9:d1:e6:9d:3a:09: 78:2c:f9:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwODA0MTcxMzQ1WhcNMjUwODExMTcxMzQ1WjAYMRYwFAYD VQQDEw02ODkwZWE0OS0xMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAmJ/Vnrz3TRnfmmMLjyk2ruQ/lnsVNTlt8jPuQjhCcEUIvP2VJ/bVd1jvcH ph6LY8PUcGdpSbhTYXr4vhRr3bXnyqN5prKfDxSFjtYqVn9QTbLFpSGni9dnpkJp 6gcav7waJpGUBRSFsxYsLGtJW1aw1A6hb7kkMdKNZq1Rvd133xxgr9TJ95HaaziM dxGtsAmurzIpQ3yMP3qc1HGtEuyrJd5QdnHsik3oLOyVBgP0YzRhE4VcMlifA8oA uggzR5d1u3sjcBaobPnuoWeBBe/gzRIEBkClMzuatEiQqbyqEsSAvehRjL8eYa5l Xhhn4Q1vRc+s70jEa3OCjbJsHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7101T1 kA8zU/MGWzVc1ckNYt6VMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEZG0eN0a7SM/GXAQG5Z+UvrcUF8H2epR60fJegTcY1pIfNoYwErUn WhIZLLFmZw4sh80oMNqj8QSD+mLRcT7wdxeAGza8jhY4bQCyyJrdaQoQ1adD/PYa 8b/WwUJWQe1ky4T7tAYq8aJkPwjype9KOwEEgm6QiMSP04pIRM2HEGLETQmrrNXM f0Hg7fBxnEaD7ys3mKgAIQdLYXUWALGptXxjZNCZBu76cfSxRulEPKrPeV/5gCou w38ZJqQj3NnmQMK7nXWFPKIgGmQMz3P9IarcYmiL7Qz7hgDrBSVXjjdlQ6901QdX CbMdi/4meIyOal2968PZ0eadOgl4LPl/ -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:10 2025 by rpki-client