$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: WJCjlV9p2MmnXDy9eRZHrCiQaIWKkngId5+Ulh1quSE= Subject key identifier: 6D:F1:A7:7C:82:09:F2:78:47:22:FE:A8:E2:EF:60:E8:91:2F:82:9C Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 1551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1548 Signing time: Fri 08 Aug 2025 16:57:44 +0000 Manifest this update: Fri 08 Aug 2025 16:57:43 +0000 Manifest next update: Fri 15 Aug 2025 16:57:43 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: I0u4nNa01Naolw++Fr5v+ziaYhj4LYv6oEJ5qVHoJiw=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5457 (0x1551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Aug 8 16:57:43 2025 GMT Not After : Aug 15 16:57:43 2025 GMT Subject: CN=68962c88-5060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:e0:b6:6d:c5:bf:16:1f:4d:04:d2:96:00: 68:4a:98:5b:9f:7a:41:f5:73:ba:02:80:6a:2f:f8: 7f:b6:5f:3e:bb:e7:0e:5b:ad:eb:8b:6d:a7:6b:d6: 54:f0:12:21:b7:88:bf:bc:9d:15:8e:cb:b9:48:ac: 1e:b6:7a:80:a1:b8:3b:e1:a7:37:d4:d0:ec:f7:cd: a6:86:bd:a2:42:24:a1:d8:a8:a5:29:0a:a0:5b:a8: f6:e4:7a:3e:a3:1e:2b:b7:21:0c:5f:dc:38:6b:63: b5:6d:6c:7b:14:a9:62:5e:6e:43:31:81:36:55:cf: 4a:19:f8:85:b6:8e:60:07:ad:d2:3a:8b:ff:5b:c9: fd:55:3e:6d:44:b4:d0:69:46:5a:9f:82:ad:f6:47: 80:8c:53:59:be:c5:b2:e7:4f:d3:c2:4f:9a:14:42: 1f:ec:49:22:79:af:f2:b7:5f:a0:be:cc:14:8d:53: ba:77:1c:d7:4f:75:db:26:e2:16:8d:e4:58:07:94: 1f:01:1f:5a:da:60:64:b7:65:8c:32:bb:a9:b5:dd: d1:80:24:0b:4e:3b:ca:54:a9:29:37:81:25:73:14: a7:42:ef:ab:4b:30:f6:98:7e:2e:49:ad:5a:8f:5e: a5:47:eb:03:c9:e0:c4:04:c2:2d:ee:15:01:b4:b1: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F1:A7:7C:82:09:F2:78:47:22:FE:A8:E2:EF:60:E8:91:2F:82:9C X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d8:52:49:82:94:6c:9c:4c:89:f8:0c:21:f7:ba:02:69:d1: 28:9d:f3:8b:20:e8:01:2f:48:71:fb:4a:77:a3:eb:e3:a1:9c: 85:0c:51:10:bc:68:22:04:c3:88:f8:43:11:10:19:db:10:23: 03:21:9a:6d:0d:5b:0b:ef:ef:60:38:a8:16:2d:9b:75:25:b3: 4e:27:4a:f1:36:41:a5:dd:1f:94:ad:65:ac:3a:f0:ca:b5:43: 8a:a5:92:2f:a7:c6:33:0c:ee:27:60:ec:38:08:ee:dc:a2:02: 47:ce:e9:96:56:e5:78:3f:4e:90:c5:ec:0f:f2:88:81:d2:06: 11:58:a4:90:3c:61:ff:8d:be:34:46:5d:01:76:02:e4:54:0b: 75:38:3f:21:9c:e6:d1:d6:ec:97:d6:29:0c:24:ed:0f:ec:8b: df:fa:27:23:fb:a7:99:d8:b0:ac:3c:50:2b:a3:1f:ab:54:a3: f1:8d:60:1c:50:fd:49:34:74:eb:2e:13:3b:1e:10:ea:1c:5a: 15:dd:4b:bd:7c:1f:25:3c:76:70:35:75:11:33:73:41:1b:70: 4d:c2:8f:60:5c:4f:c6:0c:b8:5c:51:fe:aa:f6:41:4a:34:e4: ef:e1:32:fc:c2:79:ea:19:67:ba:d3:91:55:2d:e6:7c:70:37: fe:1d:dc:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwODA4MTY1NzQzWhcNMjUwODE1MTY1NzQzWjAYMRYwFAYD VQQDEw02ODk2MmM4OC01MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV/gtm3FvxYfTQTSlgBoSphbn3pB9XO6AoBqL/h/tl8+u+cOW63ri22na9ZU 8BIht4i/vJ0Vjsu5SKwetnqAobg74ac31NDs982mhr2iQiSh2KilKQqgW6j25Ho+ ox4rtyEMX9w4a2O1bWx7FKliXm5DMYE2Vc9KGfiFto5gB63SOov/W8n9VT5tRLTQ aUZan4Kt9keAjFNZvsWy50/Twk+aFEIf7Ekiea/yt1+gvswUjVO6dxzXT3XbJuIW jeRYB5QfAR9a2mBkt2WMMruptd3RgCQLTjvKVKkpN4ElcxSnQu+rSzD2mH4uSa1a j16lR+sDyeDEBMIt7hUBtLGnSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3xp3yC CfJ4RyL+qOLvYOiRL4KcMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE2FJJgpRsnEyJ+Awh97oCadEonfOLIOgBL0hx+0p3o+vjoZyFDFEQ vGgiBMOI+EMREBnbECMDIZptDVsL7+9gOKgWLZt1JbNOJ0rxNkGl3R+UrWWsOvDK tUOKpZIvp8YzDO4nYOw4CO7cogJHzumWVuV4P06QxewP8oiB0gYRWKSQPGH/jb40 Rl0BdgLkVAt1OD8hnObR1uyX1ikMJO0P7Ivf+icj+6eZ2LCsPFArox+rVKPxjWAc UP1JNHTrLhM7HhDqHFoV3Uu9fB8lPHZwNXURM3NBG3BNwo9gXE/GDLhcUf6q9kFK NOTv4TL8wnnqGWe605FVLeZ8cDf+HdzN -----END CERTIFICATE-----Generated at Sun Aug 10 05:42:10 2025 by rpki-client