$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: W27lK0RXc7Dlzi7XegBeTRuIEmYHxc5VCgUeUigiDTk= Subject key identifier: 73:05:69:F6:66:82:90:DA:5E:B7:20:84:F2:4E:07:8A:8B:40:43:38 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 029E Signing time: Sat 09 Aug 2025 02:08:34 +0000 Manifest this update: Sat 09 Aug 2025 02:08:33 +0000 Manifest next update: Sat 16 Aug 2025 02:08:33 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: 1e8Q/HSNfWiJmj4p1LVZFON+XEre1t49ZEPJbWNSrV0=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Aug 9 02:08:33 2025 GMT Not After : Aug 16 02:08:33 2025 GMT Subject: CN=6896ada2-c2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:cb:6b:96:ff:ab:4c:87:0a:13:46:ad:77: a0:9b:1f:35:8d:a2:6e:bc:9f:c3:57:bc:69:78:ee: 17:7e:79:44:e1:40:bf:d1:d3:66:7a:e5:0f:99:3b: fa:5b:47:83:6d:cc:b5:90:18:96:f8:56:d8:2f:80: 1e:bb:2f:2e:29:f1:3c:78:cf:24:23:ca:9d:08:a2: de:34:9d:f4:dc:be:b3:86:e2:5d:cf:00:ab:27:f5: c0:ef:f3:07:18:60:ea:c2:eb:bd:eb:08:ee:0a:e9: fa:64:69:cc:7e:60:e4:5e:0f:96:14:a7:47:8d:fd: 2a:32:64:aa:74:34:3f:1c:a9:41:8b:dc:7b:2a:74: fe:37:83:5c:d9:2e:46:92:01:fd:55:55:ae:6a:86: ab:8a:ba:2f:5c:20:fd:2c:8e:a0:43:32:66:4a:b2: 26:31:0f:d1:d5:79:16:ee:ea:45:c8:3c:74:9e:ca: d5:f9:14:a6:e9:a6:3b:73:bc:fa:7b:bc:df:e5:96: 80:91:da:8b:6c:43:9a:2a:8c:5d:4e:bf:66:2f:4e: f3:98:76:aa:54:5d:f4:a0:55:97:e8:19:d7:01:5f: 41:a1:45:70:4b:55:3b:22:a8:d4:16:59:dc:b3:93: cc:98:1d:29:91:65:9e:b0:c0:a4:d2:8a:3a:52:55: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:05:69:F6:66:82:90:DA:5E:B7:20:84:F2:4E:07:8A:8B:40:43:38 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7e:a1:a9:70:50:00:6a:53:45:a0:fb:f7:5d:ae:e2:9d:fe: 57:13:b7:78:fa:97:a4:59:58:d1:45:06:77:8e:6e:47:78:f9: 58:ce:ff:4e:67:d6:d5:ea:02:bc:0c:29:33:65:7b:1e:c6:ba: f6:48:3f:75:9e:6d:56:9d:c7:e6:0a:cf:ee:3a:17:dd:2c:67: 96:47:dc:98:86:37:0c:30:02:9f:5b:4f:86:1f:39:de:62:d0: 53:df:d8:fe:ac:51:e1:f3:3a:93:73:a1:b2:9b:1d:90:1b:28: fa:4f:08:76:e5:c4:25:73:c5:e8:81:66:61:c6:16:01:d7:92: 7b:0a:b9:e2:db:11:f8:39:a1:bc:3f:a5:52:5c:0f:b1:2b:63: 3c:0e:43:03:dc:d2:1e:51:cc:b8:6f:ad:81:9d:c5:56:21:df: 23:a5:6b:ff:c9:29:dd:56:dd:c0:80:a0:6a:cb:a7:53:75:d0: cf:bf:d4:56:83:48:33:a9:57:f8:8b:61:4f:dc:1c:ab:c1:b2: 3c:84:a7:aa:7c:9d:48:8a:21:e1:33:a7:6a:6d:34:20:00:4d: 10:fa:2d:52:26:9a:6f:85:1f:e9:7d:a4:6b:98:dc:c4:8d:3e: 85:14:bd:fb:25:fd:7d:59:1d:d7:ea:c3:2b:f7:a9:f2:9e:98: dd:9f:a1:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUwODA5MDIwODMzWhcNMjUwODE2MDIwODMzWjAYMRYwFAYD VQQDEw02ODk2YWRhMi1jMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzjLa5b/q0yHChNGrXegmx81jaJuvJ/DV7xpeO4XfnlE4UC/0dNmeuUPmTv6 W0eDbcy1kBiW+FbYL4Aeuy8uKfE8eM8kI8qdCKLeNJ303L6zhuJdzwCrJ/XA7/MH GGDqwuu96wjuCun6ZGnMfmDkXg+WFKdHjf0qMmSqdDQ/HKlBi9x7KnT+N4Nc2S5G kgH9VVWuaoarirovXCD9LI6gQzJmSrImMQ/R1XkW7upFyDx0nsrV+RSm6aY7c7z6 e7zf5ZaAkdqLbEOaKoxdTr9mL07zmHaqVF30oFWX6BnXAV9BoUVwS1U7IqjUFlnc s5PMmB0pkWWesMCk0oo6UlV2twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMFafZm gpDaXrcghPJOB4qLQEM4MB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqfqGpcFAAalNFoPv3Xa7inf5XE7d4+pekWVjRRQZ3jm5HePlYzv9O Z9bV6gK8DCkzZXsexrr2SD91nm1WncfmCs/uOhfdLGeWR9yYhjcMMAKfW0+GHzne YtBT39j+rFHh8zqTc6Gymx2QGyj6Twh25cQlc8XogWZhxhYB15J7Crni2xH4OaG8 P6VSXA+xK2M8DkMD3NIeUcy4b62BncVWId8jpWv/ySndVt3AgKBqy6dTddDPv9RW g0gzqVf4i2FP3ByrwbI8hKeqfJ1IiiHhM6dqbTQgAE0Q+i1SJppvhR/pfaRrmNzE jT6FFL37Jf19WR3X6sMr96nynpjdn6GG -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:26 2025 by rpki-client