$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: 9282PsKWvCiJVSXe7XhGep58e0KngsKDglQB9UShV58= Subject key identifier: A1:93:49:EC:43:75:61:E1:8A:04:34:34:61:FB:FA:62:BF:98:C0:50 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 01E5 Signing time: Sat 09 Aug 2025 03:01:29 +0000 Manifest this update: Sat 09 Aug 2025 03:01:29 +0000 Manifest next update: Sat 16 Aug 2025 03:01:29 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: 5XpmgfEa8OJkVWQLKXioOXrBiNKP1NKYKcneESECqYY=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Aug 9 03:01:29 2025 GMT Not After : Aug 16 03:01:29 2025 GMT Subject: CN=6896ba09-a693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:b5:ae:59:1e:42:a7:da:08:5a:43:c3:69: d7:5e:83:23:d7:62:2a:6d:4f:cc:1e:1a:2a:f8:64: a1:89:09:5b:d7:e1:93:c2:4e:52:a4:fc:aa:a0:6b: 9a:09:97:7f:f8:a8:3b:5c:49:da:04:09:16:57:70: 92:cc:a8:aa:7e:37:82:2b:e9:6e:2c:7e:ac:f4:a5: c7:82:2a:62:54:b8:eb:26:85:4f:e8:c4:34:c9:fd: 39:62:ac:33:3e:4d:34:bb:69:6b:9e:87:bf:fd:ce: 9d:96:02:5c:fd:28:5c:88:11:64:79:1c:4b:3d:04: 15:07:96:0a:c0:02:d5:e0:5c:5d:70:42:5f:1a:cb: a0:35:36:23:5e:50:c8:bd:e5:cb:54:23:66:05:15: 4d:9b:80:14:6e:4a:1b:61:3e:7f:21:0c:f7:f1:af: 19:47:d9:89:ad:1f:8f:dc:82:cb:8e:a0:9d:a0:d8: c7:df:7a:1e:73:71:f1:c3:d4:98:0f:3a:ca:99:68: 45:31:18:2d:c6:a9:36:43:15:24:46:91:19:fd:8b: ed:ff:53:e9:82:28:69:1a:d9:b8:3e:87:9a:d8:d8: ca:d5:e6:ba:a8:54:8b:07:29:8a:17:64:83:b2:52: 79:53:67:09:16:89:40:c6:0f:af:74:68:b3:3a:5b: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:93:49:EC:43:75:61:E1:8A:04:34:34:61:FB:FA:62:BF:98:C0:50 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:31:24:a0:58:1c:64:e4:5c:bc:25:3a:4f:87:05:80:6f:bd: 65:e0:de:7c:fd:f6:9a:7e:6c:13:d5:95:f6:d6:77:82:b2:d5: 62:15:86:0f:bf:7c:7b:55:d3:d7:e2:f9:ab:7e:12:f9:65:d3: 09:c9:48:ea:5d:aa:60:3e:91:60:2e:5b:59:7c:4f:35:c5:73: 56:12:38:93:ef:bf:56:0a:ff:a0:15:25:57:7f:7c:64:06:aa: ff:3d:08:c1:5a:10:72:6f:25:a5:af:f7:c3:d3:cb:39:f6:12: 60:e9:6a:38:77:43:ea:86:12:da:3e:68:6c:d3:92:fc:90:be: 04:86:19:04:86:d8:6b:a3:5c:d1:c7:9e:c8:d4:cc:d4:1c:ef: 9b:50:9e:d0:d8:e7:15:fa:bc:8d:d5:68:94:c0:76:7e:24:f1: c1:9a:0e:5f:4f:a4:61:89:79:9f:e6:a2:35:28:05:57:b9:b2: 17:e0:43:14:2f:27:07:12:79:31:52:a2:c1:ce:bd:56:d1:1a: c3:99:4f:7c:e1:ff:d3:a0:ec:c5:8a:29:44:b9:76:25:63:e9: 67:86:24:70:cc:77:1d:77:c9:55:8a:e9:ad:d9:6b:b7:ff:b2: 9e:cd:25:87:68:de:9b:78:6c:aa:52:a2:d5:d3:f5:75:56:14: 91:1a:80:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUwODA5MDMwMTI5WhcNMjUwODE2MDMwMTI5WjAYMRYwFAYD VQQDEw02ODk2YmEwOS1hNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwem1rlkeQqfaCFpDw2nXXoMj12IqbU/MHhoq+GShiQlb1+GTwk5SpPyqoGua CZd/+Kg7XEnaBAkWV3CSzKiqfjeCK+luLH6s9KXHgipiVLjrJoVP6MQ0yf05Yqwz Pk00u2lrnoe//c6dlgJc/ShciBFkeRxLPQQVB5YKwALV4FxdcEJfGsugNTYjXlDI veXLVCNmBRVNm4AUbkobYT5/IQz38a8ZR9mJrR+P3ILLjqCdoNjH33oec3Hxw9SY DzrKmWhFMRgtxqk2QxUkRpEZ/Yvt/1PpgihpGtm4Poea2NjK1ea6qFSLBymKF2SD slJ5U2cJFolAxg+vdGizOlt5iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGTSexD dWHhigQ0NGH7+mK/mMBQMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMMSSgWBxk5Fy8JTpPhwWAb71l4N58/faafmwT1ZX21neCstViFYYP v3x7VdPX4vmrfhL5ZdMJyUjqXapgPpFgLltZfE81xXNWEjiT779WCv+gFSVXf3xk Bqr/PQjBWhBybyWlr/fD08s59hJg6Wo4d0PqhhLaPmhs05L8kL4EhhkEhthro1zR x57I1MzUHO+bUJ7Q2OcV+ryN1WiUwHZ+JPHBmg5fT6RhiXmf5qI1KAVXubIX4EMU LycHEnkxUqLBzr1W0RrDmU984f/ToOzFiilEuXYlY+lnhiRwzHcdd8lViumt2Wu3 /7KezSWHaN6beGyqUqLV0/V1VhSRGoA3 -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:45 2025 by rpki-client