$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: QWgoxfuJiLXlJudoBWF3d6esAWAOQfcfI3WisRz3g9Q= Subject key identifier: 7F:0D:67:B8:86:B0:C4:8F:89:51:B5:5A:40:3F:3B:3B:50:F6:BA:05 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 0348 Signing time: Mon 11 Aug 2025 01:14:07 +0000 Manifest this update: Mon 11 Aug 2025 01:14:07 +0000 Manifest next update: Mon 18 Aug 2025 01:14:07 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: JHiVfOKpHxRp1NagQo6itJmW6JZNlbHqCe5srRiHsM4=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: C1ezUxuL3ClkX3BgQjjS1dTVihRitOogxbbsy9SR+JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: Aug 11 01:14:07 2025 GMT Not After : Aug 18 01:14:07 2025 GMT Subject: CN=689943df-f3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:69:d9:82:a7:50:99:0c:89:bd:b2:24:b5:fe: 8e:d7:ff:1e:b8:09:97:15:01:7a:ff:85:79:5f:98: 86:aa:f3:ac:b9:48:5a:e4:7e:c5:d6:d3:32:16:58: 0b:47:20:d8:96:99:ef:0a:8f:34:87:07:f3:c2:46: 40:be:c9:99:f3:c9:39:7d:51:d5:b6:cf:b7:fb:e5: ee:9e:14:07:8f:37:17:ba:0a:7e:05:24:74:f3:fa: 9b:a0:d7:c1:14:d3:0e:ad:f8:f0:09:17:88:98:a1: 1c:aa:27:28:29:c3:b8:c6:34:96:0b:46:7c:92:b3: e4:ea:4d:4d:ab:2a:16:15:48:46:22:02:cb:d2:9e: ae:d7:26:83:1e:5e:d1:32:38:0e:79:4d:36:c6:26: 14:2e:b7:f8:5e:5e:39:c2:d1:fb:b6:04:1d:8e:a2: 39:84:54:7b:9e:a0:78:4b:a6:fb:f8:ed:3c:48:57: 13:33:16:01:f8:fc:d8:6b:6a:1f:48:b0:15:e0:fc: 64:0d:fd:e3:e0:82:6d:fd:a9:5e:86:c1:ea:72:cb: 20:78:e0:8d:98:43:a1:94:49:02:10:69:ce:a7:7b: e3:d5:c6:fc:80:c8:c9:6f:3b:e7:fc:c7:e7:5b:1b: ca:88:d0:27:51:13:fd:68:f8:62:c3:ef:74:f9:2c: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0D:67:B8:86:B0:C4:8F:89:51:B5:5A:40:3F:3B:3B:50:F6:BA:05 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:86:5e:39:f1:f1:96:1e:f1:e5:7e:92:22:a4:ed:31:e8:cf: 42:83:0b:d8:1d:26:e1:77:82:ef:21:f5:2e:0a:a1:9d:41:ae: 3c:c1:e8:19:ec:b5:c0:c1:c1:35:94:10:1a:04:d0:48:19:3e: 14:3c:e8:31:cf:dd:6d:a9:4e:15:19:7a:9f:ad:7b:e0:5e:8d: 42:76:39:c2:a8:0e:3b:72:5f:a8:d4:70:18:65:e4:3c:03:ab: 7e:84:34:b8:ac:61:fa:c1:34:2e:b4:40:ef:66:c3:99:92:9a: bc:b5:f1:9e:5e:99:83:28:d1:59:67:c4:20:3a:4d:c4:bd:6b: 79:b6:ea:78:90:a8:50:73:07:10:9a:bb:e9:6c:54:a9:9f:41: 67:01:7f:03:03:87:dd:62:51:ea:13:57:eb:67:f5:c5:0a:9a: dc:b5:a2:25:93:df:02:71:2b:c4:90:19:b0:5a:a6:66:33:7c: f9:64:1f:1c:41:53:0d:57:e5:b5:e3:f8:f6:c0:be:11:11:93: b8:e0:b6:a9:1f:aa:e3:73:87:36:b9:07:d5:f1:e2:69:10:8c: b5:f1:1b:e3:39:8f:14:1c:d0:aa:e7:9c:d4:09:33:ab:48:6a: 02:92:f0:fa:5d:95:90:4c:de:45:17:34:6c:1e:bc:68:8f:dd: 39:ad:fc:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjUwODExMDExNDA3WhcNMjUwODE4MDExNDA3WjAYMRYwFAYD VQQDEw02ODk5NDNkZi1mM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62nZgqdQmQyJvbIktf6O1/8euAmXFQF6/4V5X5iGqvOsuUha5H7F1tMyFlgL RyDYlpnvCo80hwfzwkZAvsmZ88k5fVHVts+3++XunhQHjzcXugp+BSR08/qboNfB FNMOrfjwCReImKEcqicoKcO4xjSWC0Z8krPk6k1NqyoWFUhGIgLL0p6u1yaDHl7R MjgOeU02xiYULrf4Xl45wtH7tgQdjqI5hFR7nqB4S6b7+O08SFcTMxYB+PzYa2of SLAV4PxkDf3j4IJt/alehsHqcssgeOCNmEOhlEkCEGnOp3vj1cb8gMjJbzvn/Mfn WxvKiNAnURP9aPhiw+90+Sy/hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8NZ7iG sMSPiVG1WkA/OztQ9roFMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4hl458fGWHvHlfpIipO0x6M9CgwvYHSbhd4LvIfUuCqGdQa48wegZ 7LXAwcE1lBAaBNBIGT4UPOgxz91tqU4VGXqfrXvgXo1CdjnCqA47cl+o1HAYZeQ8 A6t+hDS4rGH6wTQutEDvZsOZkpq8tfGeXpmDKNFZZ8QgOk3EvWt5tup4kKhQcwcQ mrvpbFSpn0FnAX8DA4fdYlHqE1frZ/XFCprctaIlk98CcSvEkBmwWqZmM3z5ZB8c QVMNV+W14/j2wL4REZO44LapH6rjc4c2uQfV8eJpEIy18RvjOY8UHNCq55zUCTOr SGoCkvD6XZWQTN5FFzRsHrxoj905rfwI -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:30 2025 by rpki-client