$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: /HEV//EuN6QP/Oujh8cOearis8hApgzRLVj+Y/Y31GA= Subject key identifier: 01:02:8C:12:8A:D6:98:5D:7A:2B:4B:5D:F1:EC:05:7D:92:42:F9:F6 Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 06A3 Signing time: Fri 08 Aug 2025 22:33:54 +0000 Manifest this update: Fri 08 Aug 2025 22:33:53 +0000 Manifest next update: Fri 15 Aug 2025 22:33:53 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: OdlBRy8vaiwPraLpZY27YIarRG9wlrz9LqClD48GJsM=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Aug 8 22:33:53 2025 GMT Not After : Aug 15 22:33:53 2025 GMT Subject: CN=68967b51-ccf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:58:5e:73:0f:1b:08:f0:6b:78:57:9e:9e: e4:5e:d6:8c:3c:34:fc:f9:8b:c5:2d:9a:de:d1:58: 9d:cf:21:dd:9e:5f:04:0f:55:a0:ae:e3:ad:10:89: 71:1b:61:6e:e7:4c:67:d4:95:0b:79:f4:87:4b:e2: ad:a5:7f:2c:ae:40:22:58:dc:6f:57:7e:6b:e8:0a: ef:09:7d:f2:2f:d8:ce:6d:24:f2:06:6e:4a:56:33: e2:94:db:e4:7c:24:75:88:ea:1d:7b:56:b1:92:7d: 1e:41:fa:6a:dd:83:94:23:f4:ea:f8:61:ce:0a:76: d2:27:97:8b:55:f7:c0:86:30:6f:64:a0:82:c9:ab: 86:9d:f3:61:49:21:24:c8:38:2c:59:48:4f:4b:f7: 06:33:5d:d1:fb:51:96:17:1e:8d:f9:7d:d7:7f:a7: cd:a8:88:be:39:b4:cf:c3:3c:6a:56:c3:de:cc:26: d8:2c:3e:8e:76:41:0f:9b:ea:2b:4e:3f:9d:d1:93: a5:43:c6:d9:46:23:f0:16:31:a1:f0:53:1a:12:a0: db:d6:99:6b:6b:aa:3a:02:b6:4e:7e:84:43:ae:e3: 2d:41:39:be:66:94:d7:cb:e8:a9:f9:f6:17:0d:49: 59:76:e7:d5:f3:a4:7c:12:4f:41:1f:28:9c:6e:45: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:02:8C:12:8A:D6:98:5D:7A:2B:4B:5D:F1:EC:05:7D:92:42:F9:F6 X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:47:39:bf:be:55:ed:a8:d8:91:5b:5b:ab:54:3c:7d:d7:2e: c9:bb:f1:43:0a:88:76:b3:8d:ce:10:b1:01:e0:2b:45:29:70: 4c:73:81:ef:27:eb:f7:6b:b2:f6:e6:2c:a1:01:8c:fd:81:87: 69:de:cf:1f:40:5d:bd:93:17:2b:81:e8:d0:af:4f:84:09:3d: 49:c0:f2:24:0b:fb:86:2c:0b:3f:91:94:55:25:3a:87:ef:46: 5a:5f:9b:00:2c:b5:c2:e8:b6:32:6a:2b:ef:d6:84:12:46:9d: 25:2f:71:e8:65:ce:4a:46:96:f8:e1:78:10:5e:68:90:2f:53: c4:c6:c6:8b:ea:6c:d7:55:17:6e:0d:ac:5b:d1:50:5a:ad:1a: 1d:02:5e:db:0f:94:3a:4d:fb:3e:85:b6:35:91:e7:2f:0e:b0: 2a:11:1d:dd:ca:2c:94:3a:40:6b:f9:e8:f7:11:7d:ee:00:ff: 62:d5:88:c3:dc:32:bd:ad:62:3b:25:d2:b0:37:d0:76:79:c0: d7:81:ea:0d:3f:ec:6d:12:30:27:0f:ca:fa:f7:57:3b:91:ef: 87:1c:87:92:09:27:c2:72:6e:96:ab:72:bb:71:7d:4d:96:84: 8a:4c:59:55:38:15:51:49:1b:f6:d8:63:55:b0:63:b6:c3:55: 6d:90:04:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUwODA4MjIzMzUzWhcNMjUwODE1MjIzMzUzWjAYMRYwFAYD VQQDEw02ODk2N2I1MS1jY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYFYXnMPGwjwa3hXnp7kXtaMPDT8+YvFLZre0VidzyHdnl8ED1WgruOtEIlx G2Fu50xn1JULefSHS+KtpX8srkAiWNxvV35r6ArvCX3yL9jObSTyBm5KVjPilNvk fCR1iOode1axkn0eQfpq3YOUI/Tq+GHOCnbSJ5eLVffAhjBvZKCCyauGnfNhSSEk yDgsWUhPS/cGM13R+1GWFx6N+X3Xf6fNqIi+ObTPwzxqVsPezCbYLD6OdkEPm+or Tj+d0ZOlQ8bZRiPwFjGh8FMaEqDb1plra6o6ArZOfoRDruMtQTm+ZpTXy+ip+fYX DUlZdufV86R8Ek9BHyicbkVV6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAECjBKK 1phdeitLXfHsBX2SQvn2MB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Rzm/vlXtqNiRW1urVDx91y7Ju/FDCoh2s43OELEB4CtFKXBMc4Hv J+v3a7L25iyhAYz9gYdp3s8fQF29kxcrgejQr0+ECT1JwPIkC/uGLAs/kZRVJTqH 70ZaX5sALLXC6LYyaivv1oQSRp0lL3HoZc5KRpb44XgQXmiQL1PExsaL6mzXVRdu Daxb0VBarRodAl7bD5Q6Tfs+hbY1kecvDrAqER3dyiyUOkBr+ej3EX3uAP9i1YjD 3DK9rWI7JdKwN9B2ecDXgeoNP+xtEjAnD8r691c7ke+HHIeSCSfCcm6Wq3K7cX1N loSKTFlVOBVRSRv22GNVsGO2w1VtkASE -----END CERTIFICATE-----Generated at Sat Aug 9 02:52:16 2025 by rpki-client