$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: DiXWOLquHX10AJOG/SZOJ2RagSiOGcreRT/6jZwGmz0= Subject key identifier: 38:A4:D0:E1:F8:CD:4C:32:A3:FA:57:5E:01:59:96:EC:DC:12:3F:98 Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 0166 Signing time: Wed 13 Aug 2025 04:24:46 +0000 Manifest this update: Wed 13 Aug 2025 04:24:46 +0000 Manifest next update: Wed 20 Aug 2025 04:24:46 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: EdxC20Vl6Q5iHeOD4ocB4XUdzMMx1ghShOWJwTekhBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Aug 13 04:24:46 2025 GMT Not After : Aug 20 04:24:46 2025 GMT Subject: CN=689c138e-a40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f8:40:50:94:c9:61:ac:e5:15:6e:68:da:b7: 29:62:9c:0e:e7:e1:e7:2f:10:41:3c:48:c0:af:66: 49:72:d3:88:ae:f0:cf:08:f4:0f:72:80:ac:4a:68: 88:fb:2f:04:ae:df:cc:38:e8:fb:ee:cc:e8:29:bc: 39:a0:69:7f:fa:ae:d1:11:28:51:b9:8b:8b:8b:54: ab:7f:0f:33:f5:32:77:ec:28:93:17:2b:de:8d:22: e2:5c:d5:db:91:e5:ca:ae:f4:79:eb:4a:2c:6d:e5: 19:45:2c:64:dd:80:8c:53:e8:81:fe:35:c2:c5:12: fe:38:51:52:61:fd:ed:b4:b2:5d:39:92:8b:59:9f: eb:1b:05:46:4b:14:17:98:6a:06:54:b0:ce:0d:16: 74:32:5e:3f:c3:49:a4:26:69:a6:2e:cf:54:e6:4f: ec:77:5d:28:67:4d:51:c5:13:6e:e1:6e:bb:a4:94: 51:1e:fe:f2:52:1b:6c:25:14:80:82:d4:84:c0:33: 85:e8:6c:a4:3c:75:2c:c4:d6:fb:3e:91:2a:3d:b3: 59:f4:65:d9:1d:10:4c:43:f6:f8:31:5a:bc:2e:36: 9e:55:93:69:6d:c7:39:2f:6d:06:df:8a:f4:f6:4e: 4c:bc:e2:bf:38:3b:19:89:83:d5:93:e7:93:e5:6c: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:D0:E1:F8:CD:4C:32:A3:FA:57:5E:01:59:96:EC:DC:12:3F:98 X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:05:1a:f6:24:05:fe:08:c9:f4:e8:1b:11:66:ae:2e:f1:29: 99:ad:f1:14:23:3b:44:39:8d:16:af:e4:c5:d4:09:09:f3:84: a8:b3:ad:ff:d2:49:ce:fe:8d:c8:9f:23:fe:db:20:7e:f4:7d: b2:c6:aa:ca:b3:57:d3:d1:36:d3:2f:75:d5:96:d5:24:78:45: 8b:5b:8a:12:0e:1d:6c:40:6d:49:ba:15:fd:67:b2:ec:f5:84: c6:49:36:fc:82:57:50:44:2b:4b:a8:fb:3d:0e:61:0b:bf:50: e5:dc:23:04:7d:9c:e8:7e:94:75:ee:1e:10:80:35:b6:12:be: 54:37:1e:5c:60:a2:9e:de:65:81:a0:84:6f:66:f4:f6:02:e8: cc:5e:0b:68:f3:14:a3:59:35:05:8a:aa:ed:d3:48:88:9e:05: 0b:3c:6c:59:c9:ec:b1:96:49:cc:e4:49:13:e3:00:98:51:34: 31:8c:e2:87:31:3d:ac:8a:2f:57:18:1a:d1:e2:1c:a8:e7:b0: 9c:39:4f:bd:d1:0a:62:23:d3:b4:7e:ee:79:be:91:42:0b:01: 39:c5:94:04:d4:e0:10:63:34:e5:a6:6a:c6:a5:dd:67:52:b7: fd:77:7e:c5:bd:a8:54:b4:7e:7a:51:9e:11:e8:aa:1f:25:37: 73:e7:30:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjUwODEzMDQyNDQ2WhcNMjUwODIwMDQyNDQ2WjAYMRYwFAYD VQQDEw02ODljMTM4ZS1hNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vhAUJTJYazlFW5o2rcpYpwO5+HnLxBBPEjAr2ZJctOIrvDPCPQPcoCsSmiI +y8Ert/MOOj77szoKbw5oGl/+q7REShRuYuLi1Srfw8z9TJ37CiTFyvejSLiXNXb keXKrvR560osbeUZRSxk3YCMU+iB/jXCxRL+OFFSYf3ttLJdOZKLWZ/rGwVGSxQX mGoGVLDODRZ0Ml4/w0mkJmmmLs9U5k/sd10oZ01RxRNu4W67pJRRHv7yUhtsJRSA gtSEwDOF6GykPHUsxNb7PpEqPbNZ9GXZHRBMQ/b4MVq8LjaeVZNpbcc5L20G34r0 9k5MvOK/ODsZiYPVk+eT5WzNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDik0OH4 zUwyo/pXXgFZluzcEj+YMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+BRr2JAX+CMn06BsRZq4u8SmZrfEUIztEOY0Wr+TF1AkJ84Sos63/ 0knO/o3InyP+2yB+9H2yxqrKs1fT0TbTL3XVltUkeEWLW4oSDh1sQG1JuhX9Z7Ls 9YTGSTb8gldQRCtLqPs9DmELv1Dl3CMEfZzofpR17h4QgDW2Er5UNx5cYKKe3mWB oIRvZvT2AujMXgto8xSjWTUFiqrt00iIngULPGxZyeyxlknM5EkT4wCYUTQxjOKH MT2sii9XGBrR4hyo57CcOU+90QpiI9O0fu55vpFCCwE5xZQE1OAQYzTlpmrGpd1n Urf9d37FvahUtH56UZ4R6KofJTdz5zDS -----END CERTIFICATE-----Generated at Wed Aug 13 05:55:16 2025 by rpki-client