$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: Z+4jHYGZROvlXTyRPtaNQ1HbLN6rwjLKR80QPl69dFE= Subject key identifier: 38:DD:B6:97:A6:8A:B5:49:F0:77:D8:42:3F:34:3D:7B:A1:58:4A:F8 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0BF7 Signing time: Fri 08 Aug 2025 19:00:48 +0000 Manifest this update: Fri 08 Aug 2025 19:00:48 +0000 Manifest next update: Fri 15 Aug 2025 19:00:48 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: yegdC5/ssKGf7cvp3kPRt4bPid8JU2MGs/CMbZZF5gk=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Aug 8 19:00:48 2025 GMT Not After : Aug 15 19:00:48 2025 GMT Subject: CN=68964960-3328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:fe:3d:5a:ec:60:d4:4f:f0:c1:15:be:2b: 36:60:64:a3:bf:8d:ce:08:29:12:20:5e:13:c4:85: 2b:5d:dd:b6:b0:e5:8e:92:1a:e0:8e:d2:cb:cc:75: b9:07:01:65:c9:2f:91:de:67:ac:19:d3:84:18:f4: 9d:e9:43:16:4d:ad:c5:37:3a:b0:a8:29:54:4e:4c: 3f:d0:b8:3c:73:2c:7e:d1:7d:ee:6e:5d:e0:7e:1a: 00:6c:14:aa:e9:c9:01:bc:17:5c:50:e5:e4:bb:59: 47:49:67:4b:d4:fb:b0:3e:10:c0:7e:f8:65:38:21: 86:72:5c:3d:fa:0f:2a:ee:d3:5b:e6:a6:23:fc:76: 45:e3:e7:a3:b1:bf:34:66:03:2c:3e:1b:f4:aa:1b: 50:19:51:f8:f1:c3:15:2c:90:ea:34:43:53:e7:21: 66:91:2d:25:03:10:71:d8:95:44:9c:a5:73:b1:c3: 7d:ea:3b:a2:4f:e7:e3:87:9f:80:c2:90:47:77:1e: a9:31:75:fb:b3:bf:ba:5e:45:c9:6e:80:22:00:36: c8:bf:3e:2d:a3:04:f1:d1:c5:cd:94:ac:b6:75:de: b6:01:01:f0:9a:b9:da:fc:52:a3:31:99:35:f2:d9: 4f:94:62:24:bd:0a:c3:09:8d:c0:1a:f9:a1:7b:df: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DD:B6:97:A6:8A:B5:49:F0:77:D8:42:3F:34:3D:7B:A1:58:4A:F8 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:10:af:41:a3:e9:73:86:c1:4b:80:08:08:9c:ae:50:82:d8: 62:70:d6:9d:c2:d0:0e:b0:d8:9c:64:89:d4:89:26:c8:db:cf: 3f:47:79:37:99:54:77:37:04:60:a2:97:35:4c:ce:c1:2d:15: d0:2b:31:5c:89:16:1a:fb:9c:24:18:f4:39:12:f3:bf:a4:18: 0c:a8:65:aa:5e:2f:b5:59:3e:a1:98:a0:8c:a3:8a:4a:40:1a: 58:aa:e6:70:6c:d2:54:80:17:65:55:bd:d6:c5:9c:76:1d:01: ec:56:e9:60:a8:82:f1:24:0c:5a:b1:e2:91:12:8b:81:d1:f9: 25:06:f8:93:b3:4c:f7:35:2a:54:70:ca:f3:46:57:d3:ab:97: b0:87:d9:f3:5e:93:72:a6:3b:f3:86:ac:aa:e7:f4:f9:eb:11: 36:ce:99:a3:c3:cd:d8:d7:9f:bf:e9:4a:30:76:a0:0c:cf:26: bd:9c:0a:9c:10:66:c8:02:51:2a:b3:72:26:b7:26:32:74:7c: ba:43:cd:8e:b7:74:52:4c:03:86:a9:74:51:62:51:40:f7:df: fa:5d:5f:a3:f9:48:67:ee:4c:e4:91:00:8e:7e:9e:17:d4:0f: 4e:2b:7d:05:3f:1e:33:35:46:a1:07:d4:13:a5:49:b7:11:ff: 78:38:ef:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUwODA4MTkwMDQ4WhcNMjUwODE1MTkwMDQ4WjAYMRYwFAYD VQQDEw02ODk2NDk2MC0zMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4e7+PVrsYNRP8MEVvis2YGSjv43OCCkSIF4TxIUrXd22sOWOkhrgjtLLzHW5 BwFlyS+R3mesGdOEGPSd6UMWTa3FNzqwqClUTkw/0Lg8cyx+0X3ubl3gfhoAbBSq 6ckBvBdcUOXku1lHSWdL1PuwPhDAfvhlOCGGclw9+g8q7tNb5qYj/HZF4+ejsb80 ZgMsPhv0qhtQGVH48cMVLJDqNENT5yFmkS0lAxBx2JVEnKVzscN96juiT+fjh5+A wpBHdx6pMXX7s7+6XkXJboAiADbIvz4towTx0cXNlKy2dd62AQHwmrna/FKjMZk1 8tlPlGIkvQrDCY3AGvmhe99BzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjdtpem irVJ8HfYQj80PXuhWEr4MB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMEK9Bo+lzhsFLgAgInK5QgthicNadwtAOsNicZInUiSbI288/R3k3 mVR3NwRgopc1TM7BLRXQKzFciRYa+5wkGPQ5EvO/pBgMqGWqXi+1WT6hmKCMo4pK QBpYquZwbNJUgBdlVb3WxZx2HQHsVulgqILxJAxaseKREouB0fklBviTs0z3NSpU cMrzRlfTq5ewh9nzXpNypjvzhqyq5/T56xE2zpmjw83Y15+/6UowdqAMzya9nAqc EGbIAlEqs3ImtyYydHy6Q82Ot3RSTAOGqXRRYlFA99/6XV+j+Uhn7kzkkQCOfp4X 1A9OK30FPx4zNUahB9QTpUm3Ef94OO/u -----END CERTIFICATE-----Generated at Sun Aug 10 16:14:02 2025 by rpki-client