$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft File: Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json) Hash identifier: LonEqv1Zyv5V+TgkVuGZB/uuTkmejUNG54BljLWlvg0= Subject key identifier: 9E:5C:95:12:7A:F5:45:D0:C0:F4:69:2E:72:29:6B:B7:62:2D:93:13 Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft Manifest number: 068B Signing time: Tue 12 Aug 2025 22:41:53 +0000 Manifest this update: Tue 12 Aug 2025 22:41:52 +0000 Manifest next update: Tue 19 Aug 2025 22:41:52 +0000 Files and hashes: 1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: b3oHkCLYhDxSkHKiDP0DhjcrQ9cGvJYq3SeFNAWjITE=) 2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aM+7gCUGE+qk8+F9OXTcC/AfNjJw372IOJzcraxEznU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325, serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Validity Not Before: Aug 12 22:41:52 2025 GMT Not After : Aug 19 22:41:52 2025 GMT Subject: CN=689bc331-5142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:52:43:c0:90:f8:48:32:d4:01:26:7c:14: 0e:ac:9a:c2:b0:72:c2:9e:b1:95:22:9b:5d:f3:d3: 8a:2e:cc:d3:88:a2:2c:28:49:a6:52:e1:11:64:84: 97:b4:c9:e2:25:84:4d:c9:7f:c5:9a:d9:06:80:4e: 9f:e8:63:4d:71:8e:10:4a:06:d9:a2:b6:40:c2:c5: 74:54:d2:45:c1:e9:74:f0:4b:df:07:43:27:3a:dd: 35:3c:69:61:5c:99:1d:e0:dc:fa:56:0c:92:fe:d3: 22:b5:ca:49:79:6d:64:66:6f:8e:a2:c6:3d:b0:d2: 7f:6b:ea:16:46:93:05:63:8e:20:e5:8a:6d:51:94: ec:61:9c:cd:f3:bb:fe:58:f0:65:96:2d:24:ef:07: 73:e4:cb:25:83:ff:04:5e:8e:d3:05:66:57:2f:17: 46:a5:ce:9e:91:99:c6:0b:75:6c:bf:6d:85:87:81: de:94:21:e3:b4:bc:6c:1e:6d:6e:2b:e6:f9:5c:74: 23:26:8c:84:66:b5:79:e5:56:01:e8:2a:d0:6b:5f: 9a:61:d8:0f:39:c1:df:28:0e:3f:19:64:13:9c:34: 8d:61:7f:d7:89:39:08:fd:2a:52:3d:b7:b9:08:09: ca:10:d3:b4:0f:46:b6:58:f2:54:94:cf:4d:db:59: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5C:95:12:7A:F5:45:D0:C0:F4:69:2E:72:29:6B:B7:62:2D:93:13 X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:df:c9:54:81:6c:15:90:d7:f8:e6:d4:1e:ab:9b:47:2c:a6: ed:69:49:7f:74:8d:c4:99:f9:d4:6d:ab:f2:00:c3:60:34:32: 0e:0d:bd:97:6a:bb:9a:f0:67:b0:a9:b2:13:89:a5:34:d8:99: 06:11:39:40:3f:5d:12:9f:0e:64:af:f1:ef:f6:15:c2:df:34: 31:c3:e6:e8:1b:0f:a7:41:b6:c0:e6:15:8c:79:f6:49:64:ad: 22:aa:6b:11:d4:7e:c7:38:98:74:8a:8f:66:1c:50:a5:f8:a2: a6:5f:0f:6b:3e:49:69:0b:80:8e:ae:ad:4b:c2:4e:18:33:22: ed:4d:87:ea:4a:f7:92:89:87:c4:51:94:d6:eb:3d:eb:a8:d7: 47:40:c7:4a:0a:40:c7:d9:5c:48:84:7e:c3:ce:d0:c2:8f:95: b8:45:30:06:f0:bd:42:5b:f7:5e:e0:97:f8:76:be:37:8c:40: 2a:a8:2f:a7:c4:89:11:79:4f:4e:45:a1:be:7e:f8:21:3a:24: 16:28:fa:72:37:6f:be:bd:de:39:bb:35:92:96:75:49:80:8a: aa:92:05:1b:7e:72:bc:eb:de:e4:c8:b7:00:5b:a5:0a:5f:c8: 7a:46:11:31:41:0a:ad:71:12:1b:a2:e1:29:d3:0f:63:c6:65: 16:f9:66:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjUwODEyMjI0MTUyWhcNMjUwODE5MjI0MTUyWjAYMRYwFAYD VQQDEw02ODliYzMzMS01MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sJSQ8CQ+Egy1AEmfBQOrJrCsHLCnrGVIptd89OKLszTiKIsKEmmUuERZISX tMniJYRNyX/FmtkGgE6f6GNNcY4QSgbZorZAwsV0VNJFwel08EvfB0MnOt01PGlh XJkd4Nz6VgyS/tMitcpJeW1kZm+OosY9sNJ/a+oWRpMFY44g5YptUZTsYZzN87v+ WPBlli0k7wdz5Mslg/8EXo7TBWZXLxdGpc6ekZnGC3Vsv22Fh4HelCHjtLxsHm1u K+b5XHQjJoyEZrV55VYB6CrQa1+aYdgPOcHfKA4/GWQTnDSNYX/XiTkI/SpSPbe5 CAnKENO0D0a2WPJUlM9N21nERwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5clRJ6 9UXQwPRpLnIpa7diLZMTMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb38lUgWwVkNf45tQeq5tHLKbtaUl/dI3EmfnUbavyAMNgNDIODb2X arua8GewqbITiaU02JkGETlAP10Snw5kr/Hv9hXC3zQxw+boGw+nQbbA5hWMefZJ ZK0iqmsR1H7HOJh0io9mHFCl+KKmXw9rPklpC4COrq1Lwk4YMyLtTYfqSveSiYfE UZTW6z3rqNdHQMdKCkDH2VxIhH7DztDCj5W4RTAG8L1CW/de4Jf4dr43jEAqqC+n xIkReU9ORaG+fvghOiQWKPpyN2++vd45uzWSlnVJgIqqkgUbfnK8697kyLcAW6UK X8h6RhExQQqtcRIbouEp0w9jxmUW+Waf -----END CERTIFICATE-----Generated at Wed Aug 13 02:46:26 2025 by rpki-client