$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: 5jft8cjoOYE5hlueK+PEkJHcw/oq0a/I9MoGo9VKGJo= Subject key identifier: EB:EE:48:4F:0A:DE:28:2A:48:77:32:58:F3:63:37:A6:78:52:53:C6 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 02AD Signing time: Mon 11 Aug 2025 01:44:42 +0000 Manifest this update: Mon 11 Aug 2025 01:44:41 +0000 Manifest next update: Mon 18 Aug 2025 01:44:41 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: 5cHTSsPTQ7lhRN+bMmB99qNMSjb7OycSzGlaXt+2Drg=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Aug 11 01:44:41 2025 GMT Not After : Aug 18 01:44:41 2025 GMT Subject: CN=68994b0a-093a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:0a:f4:16:2a:29:0e:03:60:0b:c2:fb:29: 4f:21:83:06:c7:9d:4e:1e:e0:e4:92:24:1b:b4:d8: 55:b1:9b:7d:2d:1a:35:8c:b0:25:5a:f9:3a:e6:61: 94:f7:49:61:b5:98:6e:f6:e0:07:6b:87:aa:c6:fe: 1a:20:10:7a:14:86:3f:5a:11:2f:f4:e2:42:24:c0: cf:87:39:3a:6f:f2:4b:2c:31:9f:c5:48:11:1a:fb: f7:a2:23:4a:05:cb:41:18:62:26:0e:3a:e1:a6:1b: 89:69:8b:d6:73:7c:d1:42:02:5f:1e:66:74:46:b8: 19:0c:cf:aa:f8:42:d1:4f:0f:04:8b:fe:14:46:12: 73:60:a5:4f:68:4e:6d:8f:53:c5:ed:28:0c:83:a6: ad:84:26:c9:bf:c3:00:fb:93:c0:9c:cd:7d:a8:fc: c8:42:c3:22:10:96:2c:9f:80:05:61:7b:15:ea:cf: e0:1b:91:35:24:e4:f4:b7:e9:f7:34:78:67:ff:e7: c3:89:b0:d7:86:95:f2:f6:99:a3:2e:54:d1:13:92: da:57:80:27:89:0a:76:63:47:b5:e6:46:d1:58:47: c1:ca:19:b7:43:3f:0c:94:37:39:c6:6e:0f:db:f8: 7b:b3:79:a8:8c:d5:fb:57:1f:17:65:e0:6f:14:cd: 02:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:48:4F:0A:DE:28:2A:48:77:32:58:F3:63:37:A6:78:52:53:C6 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:66:c0:77:72:8d:a5:6e:46:a4:6c:6a:1a:37:b3:16:d6:93: 38:9f:a2:42:e0:d2:de:d8:04:08:71:e2:be:d9:0f:cf:c0:fe: 43:d1:3d:b2:62:2f:e6:ac:b6:83:9c:3f:de:28:66:64:35:f6: bd:10:31:c6:bc:a1:8f:e0:52:ed:31:61:b7:84:20:73:7f:e1: c6:40:d7:44:cc:df:15:46:c4:32:22:f1:96:46:ab:f3:87:b0: cf:83:d4:cc:3f:23:15:46:87:67:0c:93:9a:5a:0e:da:fa:df: 10:23:ee:96:17:d8:2d:9b:02:5c:97:56:d5:3f:91:d3:3a:01: 91:96:27:15:d7:3e:01:de:39:aa:4a:d9:df:c6:77:ee:2f:02: cb:e3:81:48:e7:fe:7d:e6:f4:6b:3f:4f:26:d2:4d:a9:e2:3e: d3:76:30:dc:ed:c6:91:32:bf:e1:af:be:a3:1a:ba:6c:25:dd: bb:e1:78:e9:3f:0a:c1:6a:92:a1:e5:24:1f:74:8d:0e:5a:a6: 50:48:d9:ed:7f:5a:09:a5:28:43:c1:08:b0:5f:87:50:68:ca: 7e:2e:c0:71:3a:aa:e5:c5:91:50:2f:d8:0b:27:70:7f:14:ee: 1b:83:23:97:c9:0c:73:83:5e:16:c8:0d:5e:a7:db:01:62:1b: 44:20:2d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUwODExMDE0NDQxWhcNMjUwODE4MDE0NDQxWjAYMRYwFAYD VQQDEw02ODk5NGIwYS0wOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo34K9BYqKQ4DYAvC+ylPIYMGx51OHuDkkiQbtNhVsZt9LRo1jLAlWvk65mGU 90lhtZhu9uAHa4eqxv4aIBB6FIY/WhEv9OJCJMDPhzk6b/JLLDGfxUgRGvv3oiNK BctBGGImDjrhphuJaYvWc3zRQgJfHmZ0RrgZDM+q+ELRTw8Ei/4URhJzYKVPaE5t j1PF7SgMg6athCbJv8MA+5PAnM19qPzIQsMiEJYsn4AFYXsV6s/gG5E1JOT0t+n3 NHhn/+fDibDXhpXy9pmjLlTRE5LaV4AniQp2Y0e15kbRWEfByhm3Qz8MlDc5xm4P 2/h7s3mojNX7Vx8XZeBvFM0CvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvuSE8K 3igqSHcyWPNjN6Z4UlPGMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXZsB3co2lbkakbGoaN7MW1pM4n6JC4NLe2AQIceK+2Q/PwP5D0T2y Yi/mrLaDnD/eKGZkNfa9EDHGvKGP4FLtMWG3hCBzf+HGQNdEzN8VRsQyIvGWRqvz h7DPg9TMPyMVRodnDJOaWg7a+t8QI+6WF9gtmwJcl1bVP5HTOgGRlicV1z4B3jmq StnfxnfuLwLL44FI5/595vRrP08m0k2p4j7TdjDc7caRMr/hr76jGrpsJd274Xjp PwrBapKh5SQfdI0OWqZQSNntf1oJpShDwQiwX4dQaMp+LsBxOqrlxZFQL9gLJ3B/ FO4bgyOXyQxzg14WyA1ep9sBYhtEIC1Q -----END CERTIFICATE-----Generated at Mon Aug 11 05:56:17 2025 by rpki-client