$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: B2nK/gCdkjA8WvJrxkieM486m93zXO4LUu9dqaU1HVg= Subject key identifier: 1E:98:95:0C:FF:2B:A6:0E:FA:76:7B:1D:A6:55:BB:14:9A:F0:E3:9B Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: CE Signing time: Tue 05 Aug 2025 06:10:17 +0000 Manifest this update: Tue 05 Aug 2025 06:10:17 +0000 Manifest next update: Tue 12 Aug 2025 06:10:17 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: sel19cVP8/bAm2/F6DaPD7leCI9PJ3hze2xVDRy15K8=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Aug 5 06:10:17 2025 GMT Not After : Aug 12 06:10:17 2025 GMT Subject: CN=6891a049-66e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9b:ed:9a:c5:d3:35:6a:12:a6:dc:7b:3d:7c: f6:c3:30:a8:ab:40:2c:df:df:ad:99:a4:db:42:13: 7a:0e:39:7a:8a:c2:c5:2f:7d:eb:96:ad:11:60:ee: 87:cd:60:7f:15:dd:f8:64:72:18:2e:da:64:93:da: ee:20:47:cb:f0:50:08:79:3a:e3:e4:fc:6f:2b:e0: b8:6a:83:86:1d:50:ce:3d:62:e2:dd:99:67:7a:90: a3:09:d0:14:a0:ee:64:30:1b:20:56:2c:c0:55:bd: 4d:c7:39:18:73:d9:a8:c1:e5:e0:73:60:d1:78:9a: b2:93:87:25:b9:b3:9d:d9:36:91:7c:52:4f:f4:d5: a2:0b:67:0c:0b:36:62:c0:46:29:cc:21:2c:54:86: e9:86:e9:74:4a:91:19:a0:e6:4d:bf:8a:ac:64:53: af:f9:a9:70:0c:c9:4f:c5:d8:d6:ee:70:4c:d8:57: b7:77:90:7c:bb:ab:65:b1:d6:af:5a:bf:e7:b2:74: c5:ba:95:3e:70:15:68:b1:4b:a0:f3:3f:15:7b:1f: fe:4a:57:3c:32:b2:ab:ab:4e:f3:07:dc:24:49:2f: 67:45:dd:b9:66:b6:ab:4b:35:92:2b:e0:b1:9e:db: 29:eb:9d:01:d0:86:1a:d0:8a:7c:5f:b2:e2:97:57: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:98:95:0C:FF:2B:A6:0E:FA:76:7B:1D:A6:55:BB:14:9A:F0:E3:9B X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:13:ed:a1:25:b5:a0:45:81:b0:be:59:ba:ec:15:75:d2:b1: eb:ba:86:27:30:92:98:85:72:d5:0e:51:7f:84:26:51:f7:a5: 56:27:8e:d2:a7:67:49:0f:4d:55:98:8d:9f:0f:1c:02:90:07: c9:9a:03:a6:db:1b:f8:5a:18:9b:98:61:a5:df:9a:50:8b:53: 99:12:ff:e8:b8:fd:22:da:c3:0f:1a:e2:ea:7d:5a:22:78:46: df:16:97:41:88:cb:78:a4:d0:53:cf:25:30:66:c8:c6:86:64: 13:28:bf:03:54:2e:98:64:28:58:0c:49:65:53:ae:43:95:1f: 0a:3a:12:18:cb:96:d0:97:10:fc:0c:d2:9b:e3:ed:3c:36:e0: 1c:d6:7f:16:14:9b:a1:07:4c:a0:b1:2b:0f:5f:8a:1f:55:72: e7:47:a0:61:6d:1a:c1:32:ae:bd:9f:56:58:01:c4:c1:f8:25: 23:57:75:70:ae:47:ae:77:52:23:96:2c:1f:f2:aa:a0:af:30: 5a:5e:06:2c:d1:af:5b:9f:a5:11:4d:0b:d0:ba:8c:13:f3:e1: 6f:29:fd:12:b5:a1:18:a2:d4:0c:78:31:ab:85:85:ce:7d:2c: 39:24:08:55:83:a2:ae:80:45:34:28:3c:da:2f:ca:0a:9a:d5: 4d:d0:f2:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUwODA1MDYxMDE3WhcNMjUwODEyMDYxMDE3WjAYMRYwFAYD VQQDEw02ODkxYTA0OS02NmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JvtmsXTNWoSptx7PXz2wzCoq0As39+tmaTbQhN6Djl6isLFL33rlq0RYO6H zWB/Fd34ZHIYLtpkk9ruIEfL8FAIeTrj5PxvK+C4aoOGHVDOPWLi3ZlnepCjCdAU oO5kMBsgVizAVb1NxzkYc9moweXgc2DReJqyk4clubOd2TaRfFJP9NWiC2cMCzZi wEYpzCEsVIbphul0SpEZoOZNv4qsZFOv+alwDMlPxdjW7nBM2Fe3d5B8u6tlsdav Wr/nsnTFupU+cBVosUug8z8Vex/+Slc8MrKrq07zB9wkSS9nRd25ZrarSzWSK+Cx ntsp650B0IYa0Ip8X7Lil1e9FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6YlQz/ K6YO+nZ7HaZVuxSa8OObMB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEE+2hJbWgRYGwvlm67BV10rHruoYnMJKYhXLVDlF/hCZR96VWJ47S p2dJD01VmI2fDxwCkAfJmgOm2xv4WhibmGGl35pQi1OZEv/ouP0i2sMPGuLqfVoi eEbfFpdBiMt4pNBTzyUwZsjGhmQTKL8DVC6YZChYDEllU65DlR8KOhIYy5bQlxD8 DNKb4+08NuAc1n8WFJuhB0ygsSsPX4ofVXLnR6BhbRrBMq69n1ZYAcTB+CUjV3Vw rkeud1Ijliwf8qqgrzBaXgYs0a9bn6URTQvQuowT8+FvKf0StaEYotQMeDGrhYXO fSw5JAhVg6KugEU0KDzaL8oKmtVN0PJL -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:00 2025 by rpki-client