$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json) Hash identifier: FJEFPWRPbqRpXkxlxWVV4MHC3Yckze3KLOAOyxynZXs= Subject key identifier: 3D:44:5B:C6:44:8F:2A:AD:1D:B9:53:81:97:CE:19:1F:A0:14:E5:5B Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft Manifest number: 88 Signing time: Sat 09 Aug 2025 07:15:27 +0000 Manifest this update: Sat 09 Aug 2025 07:15:27 +0000 Manifest next update: Sat 16 Aug 2025 07:15:27 +0000 Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: XzDBGV2LulkZSj5obnLvhWwkf4JuvqJ8Rwqqc15o3VQ=) 2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: wZklMFDoQMrom29zHe2kxQjdWsUnZaq+ROOmp4NlaH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Validity Not Before: Aug 9 07:15:27 2025 GMT Not After : Aug 16 07:15:27 2025 GMT Subject: CN=6896f58f-f7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:89:9a:2f:9e:8f:40:b1:59:99:72:f2:3c: 18:c8:54:6e:ed:04:eb:d6:cc:7d:fa:da:73:4f:c4: 7d:eb:ab:c8:92:ab:7a:13:20:a6:1b:91:8a:35:93: 8b:1c:c1:4a:cb:70:b4:ca:00:13:30:5c:7f:fb:2e: b5:01:c6:57:9a:f3:de:a2:0e:4e:22:61:43:fc:c5: 80:94:05:fd:65:65:85:ba:bf:89:94:22:f6:88:2e: 01:d1:8e:b9:7a:7d:f7:73:84:fd:c3:e3:07:3c:00: be:c9:48:bc:36:a8:73:ba:1b:a5:44:b2:6a:ce:71: a6:35:04:4b:09:d8:8a:f1:6d:a4:a9:b7:0a:7a:25: f4:56:ec:b1:01:45:47:d6:e4:1c:83:19:5d:f5:28: 9f:3a:17:d0:cb:62:ee:2e:df:63:b4:9d:8d:52:7b: 48:7d:1c:f3:cb:ce:f7:5f:00:30:17:bd:da:fc:3e: c6:2b:ff:f2:6f:85:80:ce:74:c9:7c:25:cc:7e:64: 52:44:46:69:39:1e:8e:03:90:59:a6:16:98:da:d2: bf:64:6f:22:5d:75:75:13:03:3e:e4:a5:07:8e:9c: 2e:21:b5:8a:31:92:ab:29:71:26:97:0f:e4:08:85: 8a:39:ac:a5:e2:ff:c3:b5:d1:93:fc:0b:d2:7e:38: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:5B:C6:44:8F:2A:AD:1D:B9:53:81:97:CE:19:1F:A0:14:E5:5B X509v3 Authority Key Identifier: keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:00:52:10:6b:14:82:61:13:ee:d1:b8:aa:c6:86:72:a4:9e: c8:29:3b:92:2b:85:12:61:43:03:66:89:d0:98:48:3b:a3:1b: a2:34:d8:1b:14:0f:f3:b8:f3:9e:fb:40:22:ad:e5:31:ec:66: 61:c9:a2:85:ed:91:6f:11:b3:10:50:f4:11:d4:83:86:cc:33: 7f:41:a8:76:a2:70:47:87:97:67:41:d1:dd:de:35:a1:15:83: c2:be:fa:57:11:33:0e:34:c3:0d:52:63:dd:39:56:de:31:87: 10:47:27:46:4f:41:16:b5:7c:a1:f0:a4:f1:75:1f:8d:84:ce: 12:b7:4f:eb:7b:3e:d7:9b:b9:ec:8d:92:dc:9c:90:f1:d8:73: 56:8f:72:54:38:48:6f:71:a3:42:f1:15:23:a0:22:22:0e:47: ba:e3:55:59:f9:78:87:09:a8:ed:80:74:d5:7a:e6:3e:21:87: 36:5a:3a:25:06:b5:0f:f8:3c:19:11:40:36:b7:29:58:4f:90: 2e:c5:ba:21:25:c3:35:23:21:6f:5f:e3:06:c8:37:e4:4c:23: ca:6a:e3:71:1c:6c:5f:71:f6:ba:8e:d9:8c:9f:69:85:b3:c3: 47:90:11:84:34:47:ad:77:e0:bc:73:e1:11:c6:36:6a:e9:38: 94:24:5a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg5QUExMTAvBgNVBAUTKDI3N0YxMjI0NEE1MEJDNjU0RUU1NjNGRTczOUZFNEVC NzE5OTY2QjYwHhcNMjUwODA5MDcxNTI3WhcNMjUwODE2MDcxNTI3WjAYMRYwFAYD VQQDEw02ODk2ZjU4Zi1mN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptKJmi+ej0CxWZly8jwYyFRu7QTr1sx9+tpzT8R966vIkqt6EyCmG5GKNZOL HMFKy3C0ygATMFx/+y61AcZXmvPeog5OImFD/MWAlAX9ZWWFur+JlCL2iC4B0Y65 en33c4T9w+MHPAC+yUi8NqhzuhulRLJqznGmNQRLCdiK8W2kqbcKeiX0VuyxAUVH 1uQcgxld9SifOhfQy2LuLt9jtJ2NUntIfRzzy873XwAwF73a/D7GK//yb4WAznTJ fCXMfmRSREZpOR6OA5BZphaY2tK/ZG8iXXV1EwM+5KUHjpwuIbWKMZKrKXEmlw/k CIWKOayl4v/DtdGT/AvSfjjfzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1EW8ZE jyqtHblTgZfOGR+gFOVbMB8GA1UdIwQYMBaAFCd/EiRKULxlTuVj/nOf5OtxmWa2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODlBQS84NUQwRjM0NkJD NjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZHVk81V1AtYzVfazYzR1pa clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODlBQS84NUQwRjM0NkJDNjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVwUXZH Vk81V1AtYzVfazYzR1paclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpAFIQaxSCYRPu0biqxoZypJ7IKTuSK4USYUMDZonQmEg7oxuiNNgb FA/zuPOe+0AireUx7GZhyaKF7ZFvEbMQUPQR1IOGzDN/Qah2onBHh5dnQdHd3jWh FYPCvvpXETMONMMNUmPdOVbeMYcQRydGT0EWtXyh8KTxdR+NhM4St0/rez7Xm7ns jZLcnJDx2HNWj3JUOEhvcaNC8RUjoCIiDke641VZ+XiHCajtgHTVeuY+IYc2Wjol BrUP+DwZEUA2tylYT5AuxbohJcM1IyFvX+MGyDfkTCPKauNxHGxfcfa6jtmMn2mF s8NHkBGENEetd+C8c+ERxjZq6TiUJFoe -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:03 2025 by rpki-client