$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: 8rnzRf/j2g4BYRRTmS1MWuGmEUloTAQ3RilkrT4V5hI= Subject key identifier: 02:88:9B:E0:DB:60:51:B5:A9:B3:51:DB:65:96:1C:15:C7:98:A3:2D Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 01A5 Signing time: Sat 09 Aug 2025 03:37:56 +0000 Manifest this update: Sat 09 Aug 2025 03:37:55 +0000 Manifest next update: Sat 16 Aug 2025 03:37:55 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: J//qYdR/HO61TOJhaexjUW4Nb0bTE9i6j1dMeAmjnMs=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: inMm5nvfP57Hl+fyHfmB7fCT1GborVKT6HpM1mM5xkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: Aug 9 03:37:55 2025 GMT Not After : Aug 16 03:37:55 2025 GMT Subject: CN=6896c294-8814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:84:8a:7f:09:cc:8e:fe:48:bb:9b:bc:67: e9:f5:ba:09:db:8b:5b:1c:31:1c:68:6c:ce:f6:32: 0d:d9:20:8a:c8:3d:38:1a:e4:cd:5b:cf:fc:81:3f: 69:69:83:05:a7:b3:a0:b4:2e:dd:69:da:7a:46:38: 0c:0c:33:6d:8e:1f:9a:2c:d5:26:5a:1c:9e:c8:84: e5:d3:07:d5:91:38:d8:08:9f:4d:ab:ad:9a:00:1b: 9c:f7:6a:22:e4:1c:87:16:f1:6e:b7:1d:10:46:01: a2:21:65:df:44:e9:56:67:8a:f2:9c:e0:7b:bd:0f: a2:47:76:9a:e2:63:37:81:de:e3:7d:af:10:bf:b5: 24:63:cb:eb:60:44:88:b5:2b:6a:af:75:bf:6f:86: 88:47:34:67:e6:96:bf:e4:f3:0a:30:26:90:f0:18: a7:16:82:37:3a:af:a6:07:9d:04:bb:12:eb:05:c5: 54:55:05:a8:45:0c:92:8d:4d:30:09:6a:3b:1a:05: 78:fa:67:da:d8:de:e4:24:35:5e:86:f5:aa:2d:24: 40:30:85:5c:37:f8:82:48:e0:9e:8e:01:3d:10:bf: 07:48:05:b9:87:1c:00:b4:0c:46:9f:ad:6e:90:42: 47:a8:a5:91:36:27:f3:dc:34:62:6b:1c:10:34:61: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:88:9B:E0:DB:60:51:B5:A9:B3:51:DB:65:96:1C:15:C7:98:A3:2D X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:12:67:86:45:8f:aa:b5:d5:42:65:4e:91:b8:8b:b9:cc:90: 7b:16:2e:c7:f6:17:2d:80:d2:f6:d7:58:fc:ce:e7:02:73:70: 94:34:2a:83:b5:69:6f:d2:1c:54:ef:50:1f:54:c6:1a:6e:90: ab:0e:ac:43:26:85:46:54:cc:a9:03:a7:59:20:d6:a2:4b:d5: 74:dc:85:c4:9c:35:4d:a9:6d:1f:ca:43:b3:6d:24:f8:c2:45: 3e:28:fd:91:0c:5e:97:14:68:cd:bd:79:4d:cc:88:56:24:c0: ff:5f:71:a9:a7:f8:8e:dd:8e:7e:e4:67:67:0f:05:56:73:31: a0:61:15:a3:9e:bf:07:24:a5:69:4b:b3:b1:bc:2e:19:0d:b9: e0:50:58:b4:d3:ae:16:7d:18:0f:15:2f:f7:2c:2d:c9:f3:5d: 9e:c5:26:e4:ea:f7:a6:80:a6:8c:d3:a5:1a:a0:c2:10:bf:76: 0f:b1:99:c8:c5:bf:c6:71:60:95:24:30:37:93:3f:c6:3b:c0: c5:b7:37:e8:c2:83:da:b9:3b:0a:b2:c0:c7:18:17:50:ce:6a: e3:bf:5f:3a:3e:71:f6:91:35:b6:99:fc:42:92:24:74:d9:4d: 8a:cc:df:2f:54:8b:63:88:d9:01:da:68:8b:15:67:89:00:1e: c7:23:5a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjUwODA5MDMzNzU1WhcNMjUwODE2MDMzNzU1WjAYMRYwFAYD VQQDEw02ODk2YzI5NC04ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rqEin8JzI7+SLubvGfp9boJ24tbHDEcaGzO9jIN2SCKyD04GuTNW8/8gT9p aYMFp7OgtC7dadp6RjgMDDNtjh+aLNUmWhyeyITl0wfVkTjYCJ9Nq62aABuc92oi 5ByHFvFutx0QRgGiIWXfROlWZ4rynOB7vQ+iR3aa4mM3gd7jfa8Qv7UkY8vrYESI tStqr3W/b4aIRzRn5pa/5PMKMCaQ8BinFoI3Oq+mB50EuxLrBcVUVQWoRQySjU0w CWo7GgV4+mfa2N7kJDVehvWqLSRAMIVcN/iCSOCejgE9EL8HSAW5hxwAtAxGn61u kEJHqKWRNifz3DRiaxwQNGE9YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKIm+Db YFG1qbNR22WWHBXHmKMtMB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLEmeGRY+qtdVCZU6RuIu5zJB7Fi7H9hctgNL211j8zucCc3CUNCqD tWlv0hxU71AfVMYabpCrDqxDJoVGVMypA6dZINaiS9V03IXEnDVNqW0fykOzbST4 wkU+KP2RDF6XFGjNvXlNzIhWJMD/X3Gpp/iO3Y5+5GdnDwVWczGgYRWjnr8HJKVp S7OxvC4ZDbngUFi0064WfRgPFS/3LC3J812exSbk6vemgKaM06UaoMIQv3YPsZnI xb/GcWCVJDA3kz/GO8DFtzfowoPauTsKssDHGBdQzmrjv186PnH2kTW2mfxCkiR0 2U2KzN8vVItjiNkB2miLFWeJAB7HI1ri -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:20 2025 by rpki-client