$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: Yjc5IOLYKNqhdVaq4d8uP7r0EWnTS3y7ElgFYgvGmp4= Subject key identifier: D1:D0:ED:95:FD:52:9A:30:F6:87:A4:11:31:24:A1:5B:C2:ED:4B:E4 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 0153 Signing time: Thu 07 Aug 2025 04:40:35 +0000 Manifest this update: Thu 07 Aug 2025 04:40:34 +0000 Manifest next update: Thu 14 Aug 2025 04:40:34 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: pFq50SLkHrHrKcwFirb9fO3yQYENAbfTMG+wsGBzHmM=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: mEWfsTcA2IvJ08SERafVpG79nAxQN7WQ08fS/psaf1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Aug 7 04:40:34 2025 GMT Not After : Aug 14 04:40:34 2025 GMT Subject: CN=68942e43-5f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:4f:da:47:99:50:bc:a3:54:8d:49:eb:48: f6:ff:ea:3d:af:b8:24:fe:fd:06:63:56:22:83:6d: f4:b5:c0:81:b2:43:ed:10:1e:be:da:da:99:9b:38: 47:f1:0e:0a:2e:22:1a:f4:1f:bc:bb:73:ce:e2:9e: f7:00:18:59:61:c8:32:bc:0f:0b:42:c7:fb:16:4e: aa:4b:71:37:5e:89:15:82:8b:a5:3b:8d:6f:43:6d: 44:45:ea:a9:5e:94:ba:b7:0a:59:54:70:13:ea:f7: c5:51:67:73:0c:89:d1:0a:e2:16:22:5e:c7:a1:7a: e4:97:7b:3d:18:24:14:6b:7d:5a:a0:7f:df:c5:56: 76:a1:e2:f6:c9:3f:52:bb:50:63:b0:b5:78:3e:91: 2c:2f:1d:e0:76:5d:38:6a:ea:d1:cd:f8:37:e3:55: 12:26:b3:82:70:a7:74:cc:cb:a4:00:12:b0:80:96: 12:44:4a:c4:eb:04:d9:d1:82:a1:40:86:f6:1b:87: bb:08:d4:aa:9e:26:e6:4b:6b:a8:8a:93:97:84:0f: 3b:29:37:dd:54:3b:c9:f2:c6:59:d1:57:b2:55:50: 3d:32:59:df:15:93:41:b1:96:38:a2:98:cf:e8:95: f9:1a:d9:c3:e3:27:d0:f4:e7:08:a1:99:6d:33:09: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D0:ED:95:FD:52:9A:30:F6:87:A4:11:31:24:A1:5B:C2:ED:4B:E4 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f6:c0:17:33:c6:a8:1b:11:0a:26:6f:28:2a:7b:21:81:e7: ed:f6:9d:c5:a4:88:96:be:5c:00:79:98:cf:4b:b4:e1:f6:39: 66:34:0a:ef:48:9c:66:a4:b7:79:7c:b8:92:77:a8:d4:b8:61: bb:f5:51:fe:30:16:28:b1:29:39:9f:19:a2:76:bd:7b:de:0d: d9:79:f2:91:11:9e:ce:e3:14:c6:bf:2c:9d:b6:a7:91:e0:f5: be:ce:65:fb:fa:e2:cf:bd:14:d4:66:40:31:c9:3b:43:c7:49: 17:93:70:1d:46:b9:a4:b7:90:d6:ad:e1:4b:fe:2c:40:a4:7e: 97:1e:6c:ec:18:31:ec:2c:d1:ee:d8:ba:79:97:5b:b5:f0:09: fa:3c:1b:fe:eb:64:cc:0e:b7:02:a8:57:38:1a:45:49:09:4c: 2b:1b:61:c9:b5:3e:e9:04:47:b7:d7:3b:64:f3:2b:ef:b0:52: a7:04:52:66:cd:b6:75:b5:0c:1c:d7:e7:ea:3e:12:d2:ff:59: e0:d9:41:ed:f1:0a:0e:9e:47:c1:9e:c8:dc:c7:3e:bd:bb:e4: a5:11:a0:65:3a:b0:40:1b:6c:b8:ce:d8:80:9a:ff:41:7d:72: ca:d3:a8:d2:5a:a8:7a:86:38:50:13:62:04:d6:ba:0e:52:40: 6e:cf:04:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUwODA3MDQ0MDM0WhcNMjUwODE0MDQ0MDM0WjAYMRYwFAYD VQQDEw02ODk0MmU0My01ZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8NP2keZULyjVI1J60j2/+o9r7gk/v0GY1Yig230tcCBskPtEB6+2tqZmzhH 8Q4KLiIa9B+8u3PO4p73ABhZYcgyvA8LQsf7Fk6qS3E3XokVgoulO41vQ21EReqp XpS6twpZVHAT6vfFUWdzDInRCuIWIl7HoXrkl3s9GCQUa31aoH/fxVZ2oeL2yT9S u1BjsLV4PpEsLx3gdl04aurRzfg341USJrOCcKd0zMukABKwgJYSRErE6wTZ0YKh QIb2G4e7CNSqnibmS2uoipOXhA87KTfdVDvJ8sZZ0VeyVVA9MlnfFZNBsZY4opjP 6JX5GtnD4yfQ9OcIoZltMwnbtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHQ7ZX9 Upow9oekETEkoVvC7UvkMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf9sAXM8aoGxEKJm8oKnshgeft9p3FpIiWvlwAeZjPS7Th9jlmNArv SJxmpLd5fLiSd6jUuGG79VH+MBYosSk5nxmidr173g3ZefKREZ7O4xTGvyydtqeR 4PW+zmX7+uLPvRTUZkAxyTtDx0kXk3AdRrmkt5DWreFL/ixApH6XHmzsGDHsLNHu 2Lp5l1u18An6PBv+62TMDrcCqFc4GkVJCUwrG2HJtT7pBEe31ztk8yvvsFKnBFJm zbZ1tQwc1+fqPhLS/1ng2UHt8QoOnkfBnsjcxz69u+SlEaBlOrBAG2y4ztiAmv9B fXLK06jSWqh6hjhQE2IE1roOUkBuzwSN -----END CERTIFICATE-----Generated at Sat Aug 9 02:49:00 2025 by rpki-client