$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: btGh2i6ONxd4ZH6DzrFj+N43HBvo1EXlG9a/xgXfKN4= Subject key identifier: 2B:CF:23:3B:C7:E4:72:0F:5B:42:3B:E0:81:1A:A4:58:5D:E3:55:75 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 34C0 Signing time: Fri 08 Aug 2025 15:19:41 +0000 Manifest this update: Fri 08 Aug 2025 15:19:41 +0000 Manifest next update: Fri 15 Aug 2025 15:19:40 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: VJLFCdnVb+508yy3aCfJfO7/XqJJb7Zcfc6d9zZTT8I=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13533 (0x34dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Aug 8 15:19:41 2025 GMT Not After : Aug 15 15:19:40 2025 GMT Subject: CN=6896158d-725d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:3c:b7:dd:fe:55:43:bf:48:3a:4d:bc:0a: 14:a9:b2:3e:27:49:93:13:d1:2d:23:33:6a:1f:3e: 85:38:15:a1:a2:21:ed:1a:cf:f4:f4:e1:d1:58:06: 6d:11:55:75:0a:c3:16:cc:01:82:cd:7d:56:14:d4: 63:4f:6f:bd:b7:b2:fc:a2:8f:fa:d1:df:0f:42:e0: b1:fc:e4:50:04:df:28:ad:8e:ab:bd:98:b3:c3:67: 45:30:45:e7:c9:68:f0:25:8d:b3:87:db:24:24:a4: 48:bb:f9:1f:b6:83:f3:aa:1e:aa:87:84:20:76:5e: 5d:1e:1d:c8:fb:ba:04:67:f5:f4:19:44:e6:fc:cd: 80:cd:ba:96:d6:d6:03:9f:3f:32:42:96:65:29:80: 96:70:02:33:3c:e3:0b:1c:09:a4:77:43:20:ed:ec: e5:28:e6:36:49:a8:fe:16:16:59:ed:c8:23:bf:e8: 71:05:62:50:1f:b9:09:09:bd:db:95:08:cb:5b:45: 8e:a3:29:62:e7:93:d0:7b:9f:e1:00:99:47:3f:26: 7e:68:ff:79:89:8c:a2:c7:87:67:15:a8:a5:67:19: a5:56:59:71:7c:18:0d:28:6f:c9:93:e4:0c:87:cf: 6e:ee:f1:58:2e:d5:df:5c:3e:78:67:31:e9:ef:85: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CF:23:3B:C7:E4:72:0F:5B:42:3B:E0:81:1A:A4:58:5D:E3:55:75 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d0:1a:ca:88:6f:c3:b2:3d:8b:c3:16:b7:a2:d1:02:ed:e1: cc:65:6a:36:02:59:19:9f:74:7c:aa:81:87:be:0b:b1:12:e6: 73:25:b5:ba:b5:eb:c5:fe:ea:a4:7f:3e:f5:f3:95:8b:3f:57: d7:e6:46:8d:d1:b4:9b:75:21:43:5c:72:ae:09:8b:f2:8f:07: 44:b0:fe:c2:74:76:b3:7c:3a:db:39:5e:c1:35:2c:63:f3:b1: 94:31:63:96:ac:55:05:6e:6f:84:f9:3d:93:4f:be:80:e6:03: 12:78:8b:68:c8:61:59:ac:39:18:25:5b:9b:66:ea:26:23:55: d5:07:33:f6:28:ec:f2:fd:e2:24:da:75:93:5a:3e:e1:3b:80: c1:d6:28:1d:1d:ea:c0:28:93:48:4d:d9:a8:91:f4:bc:9e:dc: 47:92:d6:8e:e4:48:ae:7c:26:36:5b:93:68:a5:cf:76:ad:e0: c0:45:b8:c9:fa:d1:a0:4a:30:f0:c5:4e:d9:8a:2c:1c:be:39: 20:fd:ad:b2:2c:53:a1:e6:6c:86:15:bc:06:07:33:38:a9:a6: 5d:fd:84:07:a4:12:62:bd:ac:df:d9:4f:15:cd:08:2c:97:16: b2:a1:a1:b1:36:43:58:05:32:fc:84:f2:e3:f2:5d:b4:b3:3c: 76:74:b7:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwODA4MTUxOTQxWhcNMjUwODE1MTUxOTQwWjAYMRYwFAYD VQQDEw02ODk2MTU4ZC03MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/A8t93+VUO/SDpNvAoUqbI+J0mTE9EtIzNqHz6FOBWhoiHtGs/09OHRWAZt EVV1CsMWzAGCzX1WFNRjT2+9t7L8oo/60d8PQuCx/ORQBN8orY6rvZizw2dFMEXn yWjwJY2zh9skJKRIu/kftoPzqh6qh4Qgdl5dHh3I+7oEZ/X0GUTm/M2AzbqW1tYD nz8yQpZlKYCWcAIzPOMLHAmkd0Mg7ezlKOY2Saj+FhZZ7cgjv+hxBWJQH7kJCb3b lQjLW0WOoyli55PQe5/hAJlHPyZ+aP95iYyix4dnFailZxmlVllxfBgNKG/Jk+QM h89u7vFYLtXfXD54ZzHp74V12QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvPIzvH 5HIPW0I74IEapFhd41V1MB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0BrKiG/Dsj2Lwxa3otEC7eHMZWo2AlkZn3R8qoGHvguxEuZzJbW6 tevF/uqkfz7185WLP1fX5kaN0bSbdSFDXHKuCYvyjwdEsP7CdHazfDrbOV7BNSxj 87GUMWOWrFUFbm+E+T2TT76A5gMSeItoyGFZrDkYJVubZuomI1XVBzP2KOzy/eIk 2nWTWj7hO4DB1igdHerAKJNITdmokfS8ntxHktaO5EiufCY2W5Nopc92reDARbjJ +tGgSjDwxU7Ziiwcvjkg/a2yLFOh5myGFbwGBzM4qaZd/YQHpBJivazf2U8VzQgs lxayoaGxNkNYBTL8hPLj8l20szx2dLf3 -----END CERTIFICATE-----Generated at Sun Aug 10 03:52:38 2025 by rpki-client