$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: +OX6MrWgktp+uVP0c6yLRW4gKcIyPLh9LTWZwE/xpzk= Subject key identifier: BC:00:4E:DA:F4:2C:D1:7A:66:0D:E3:26:4A:76:BE:F1:18:21:20:75 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 01E3 Signing time: Sat 09 Aug 2025 03:01:23 +0000 Manifest this update: Sat 09 Aug 2025 03:01:22 +0000 Manifest next update: Sat 16 Aug 2025 03:01:22 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: uqwunG73qIVGIq4vh6+VCPYfoYV2VuDpM1VdG5dsTMk=) 2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: fGEw+qeCcqB/RBoNg72OOghHbjbROkzgK5a78Db2wZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Aug 9 03:01:22 2025 GMT Not After : Aug 16 03:01:22 2025 GMT Subject: CN=6896ba02-fb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:73:e5:9e:b7:87:40:77:ab:6b:c0:12:c7: 7b:46:4d:7e:90:88:a9:4d:7c:5c:89:89:41:4d:ae: 3d:cf:ec:23:10:5f:d5:60:9e:7a:52:d0:30:a6:69: 43:e4:88:b4:b2:27:b9:9f:73:bd:9b:f8:a2:d0:10: 0d:c1:8d:54:15:28:c9:7b:7b:97:80:e4:6f:39:54: f3:9e:cc:24:49:e1:d8:31:95:2f:f9:cc:1d:60:25: a2:f1:6d:79:b9:f9:9b:d4:90:e9:42:86:cf:31:6e: 58:0e:df:60:20:7b:af:19:e4:a5:2b:9f:f9:6a:68: db:52:94:de:25:36:83:3d:25:c5:17:74:99:25:15: 9d:b3:93:0f:ee:da:88:2c:f9:47:8d:84:41:45:b4: 6f:c8:8c:6c:6f:ed:95:ab:35:75:4e:67:c9:5e:e5: 2e:4b:f9:00:dc:7e:62:26:59:4f:3f:3e:8b:38:38: 07:f6:0c:66:d7:d2:9e:a5:1d:71:fb:0d:86:d8:a3: ea:62:a0:b6:76:06:b7:8a:a9:51:5a:39:04:b2:34: ba:16:3a:da:71:a2:7c:d6:98:ef:99:fb:07:e7:bc: a9:4f:4a:5f:69:83:32:6f:70:0a:7f:ab:9d:83:6e: f7:b3:9a:79:b5:a8:f3:88:c4:6b:48:fa:96:72:71: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:00:4E:DA:F4:2C:D1:7A:66:0D:E3:26:4A:76:BE:F1:18:21:20:75 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ca:61:07:00:9d:0b:39:df:7b:7a:26:7b:1d:53:85:cc:92: 55:e5:f2:2f:0c:41:00:6b:53:9a:63:ce:e0:a9:17:72:94:6b: 4d:29:f2:d0:eb:49:6c:69:ae:59:c9:ec:fd:03:0b:81:bb:18: 4f:9c:71:e8:2f:8c:82:8b:43:ed:eb:63:71:21:51:28:f3:ec: 89:9d:11:59:e8:a3:12:1c:df:77:55:de:bf:33:5f:f2:e2:4d: 8e:a6:12:d8:b4:f8:a0:4d:72:86:5c:10:6f:75:51:53:cf:8a: 8e:b5:a3:66:98:6b:2b:3e:6d:7f:c4:48:7f:86:45:f7:db:f2: cc:03:bd:f8:10:be:e8:7e:9f:34:8c:78:58:fe:8d:db:e3:35: 0e:c5:97:95:2b:3a:83:8f:82:50:69:de:0f:a5:59:0d:f8:d2: 81:ad:cc:5b:45:54:7f:34:6c:69:1c:fd:24:72:a2:f9:fb:77: fb:6d:75:6a:54:66:75:31:a5:40:c9:85:62:32:d1:91:66:48: f5:71:b0:29:2e:67:de:8c:cd:21:49:6f:0f:91:1e:79:a7:ba: 4d:4b:c4:cb:91:e2:d3:c0:c3:3a:18:1e:92:b5:d8:fd:f0:12: c8:45:24:8e:ef:c1:5b:b9:05:37:31:b2:92:b0:60:c0:91:c5: dd:c3:ca:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUwODA5MDMwMTIyWhcNMjUwODE2MDMwMTIyWjAYMRYwFAYD VQQDEw02ODk2YmEwMi1mYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtihz5Z63h0B3q2vAEsd7Rk1+kIipTXxciYlBTa49z+wjEF/VYJ56UtAwpmlD 5Ii0sie5n3O9m/ii0BANwY1UFSjJe3uXgORvOVTznswkSeHYMZUv+cwdYCWi8W15 ufmb1JDpQobPMW5YDt9gIHuvGeSlK5/5amjbUpTeJTaDPSXFF3SZJRWds5MP7tqI LPlHjYRBRbRvyIxsb+2VqzV1TmfJXuUuS/kA3H5iJllPPz6LODgH9gxm19KepR1x +w2G2KPqYqC2dga3iqlRWjkEsjS6FjracaJ81pjvmfsH57ypT0pfaYMyb3AKf6ud g273s5p5tajziMRrSPqWcnEORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwATtr0 LNF6Zg3jJkp2vvEYISB1MB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrymEHAJ0LOd97eiZ7HVOFzJJV5fIvDEEAa1OaY87gqRdylGtNKfLQ 60lsaa5Zyez9AwuBuxhPnHHoL4yCi0Pt62NxIVEo8+yJnRFZ6KMSHN93Vd6/M1/y 4k2OphLYtPigTXKGXBBvdVFTz4qOtaNmmGsrPm1/xEh/hkX32/LMA734EL7ofp80 jHhY/o3b4zUOxZeVKzqDj4JQad4PpVkN+NKBrcxbRVR/NGxpHP0kcqL5+3f7bXVq VGZ1MaVAyYViMtGRZkj1cbApLmfejM0hSW8PkR55p7pNS8TLkeLTwMM6GB6Stdj9 8BLIRSSO78FbuQU3MbKSsGDAkcXdw8oR -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:34 2025 by rpki-client