$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft File: jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json) Hash identifier: wrfrik5SILEEcs6AWfdUvkiLlBb0OPeX3Pi7moAafAk= Subject key identifier: CA:AA:0B:D3:97:FB:AD:1D:4D:2A:4F:F9:EB:86:1A:FF:02:70:C3:D7 Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6 Certificate issuer: /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6 Certificate serial: 0559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft Manifest number: 0549 Signing time: Fri 08 Aug 2025 23:59:39 +0000 Manifest this update: Fri 08 Aug 2025 23:59:38 +0000 Manifest next update: Fri 15 Aug 2025 23:59:38 +0000 Files and hashes: 1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: CJCLT+Pab2O6rBWXti5F7xKL1+5F6PpfukRF0GwhUTA=) 2: 4F3ABD0EE1BE11EFBB23912EC4F9AE02.roa (hash: dz/S8eDbHmndjXTOuJkGfGiQYc10aVqQzusp0F+1yvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1369 (0x559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6 Validity Not Before: Aug 8 23:59:38 2025 GMT Not After : Aug 15 23:59:38 2025 GMT Subject: CN=68968f6a-ca8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:b7:18:47:23:80:2b:10:d6:97:86:ff:52: 2e:90:5b:48:1f:e6:14:4c:32:45:22:69:1b:35:db: 0b:44:b0:2b:e5:05:e9:53:3d:29:2d:78:a0:02:2e: 00:e6:8a:51:6a:b5:d2:12:fa:56:69:16:ea:7e:93: 73:1e:8e:39:8a:ba:0d:03:e9:cf:4c:bc:e7:3b:95: 41:ab:c7:92:5c:4e:d7:a8:1e:89:1b:d7:b7:b6:7b: 0e:6e:f3:6d:2e:db:e5:f6:9c:1f:c1:98:43:93:65: eb:98:a5:19:22:36:fa:67:1b:75:3a:ca:f6:bf:ce: f2:06:c1:41:76:e6:6c:e1:05:3f:cf:de:bf:ec:88: d5:bc:30:ac:e8:7a:a6:e3:91:09:00:eb:bb:7b:e2: 25:10:db:41:19:f2:e0:8d:8d:57:67:0c:ba:f3:96: 80:04:29:01:eb:50:9d:1c:e2:d5:f0:ad:94:75:b8: 6c:56:6d:c0:73:17:2f:c1:48:2b:fd:82:77:db:e3: 79:a6:cd:a7:b8:59:bf:b2:0e:f1:61:98:59:7a:c3: 35:59:a4:4f:be:a4:12:0d:4f:68:89:80:57:20:e3: 3b:4a:a0:f7:40:85:07:43:d7:7b:e7:9c:51:44:19: 0d:af:f7:f1:87:2f:6b:c7:00:3b:2e:f3:15:5f:5a: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:0B:D3:97:FB:AD:1D:4D:2A:4F:F9:EB:86:1A:FF:02:70:C3:D7 X509v3 Authority Key Identifier: keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3c:3c:38:f6:b9:e7:81:5a:c4:4f:74:86:a9:f4:38:4d:df: e8:19:bf:32:68:41:dd:1d:42:7c:89:3d:1d:1d:3b:43:99:d1: 14:99:85:d2:2c:fd:6c:b1:68:80:63:32:78:13:d2:5f:ac:b9: 44:17:ae:b2:73:fb:54:58:c2:c3:24:06:68:e5:1b:ed:da:e6: cc:ae:41:1d:09:39:00:30:17:eb:2b:fd:df:a1:10:b6:d7:81: dc:69:27:69:d7:3d:48:5a:bf:9a:e5:04:c3:08:1e:d1:9a:31: c7:21:79:0b:52:19:e2:b0:ad:54:70:10:1e:41:98:97:e4:9d: 61:1b:71:ae:a4:8d:da:61:5b:05:7d:c0:b4:03:85:c2:10:4b: 42:5e:96:78:94:37:98:93:b7:1d:fb:47:06:c9:03:bd:fe:02: 32:48:6a:b4:a3:db:11:e9:9a:b7:29:57:d8:f2:36:ce:c1:4d: 82:1e:eb:97:70:26:bd:57:e9:23:39:47:05:d4:69:a6:3c:6b: 1c:47:e6:9c:7d:e5:f2:33:ce:bc:95:07:b6:0c:68:bc:88:83: a6:13:c1:61:47:fd:fa:24:88:4a:36:ca:f2:e9:e8:c8:26:bb: 12:0e:f9:f8:9f:e6:25:ef:ab:25:a6:11:bd:0b:aa:02:bf:ca: 72:64:8a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyOTAxMTAvBgNVBAUTKDhENUJBQjM3MENBOTJFNEY1RkQ3ODlGQzIyNzMzMTBG OUFFQTM4RjYwHhcNMjUwODA4MjM1OTM4WhcNMjUwODE1MjM1OTM4WjAYMRYwFAYD VQQDEw02ODk2OGY2YS1jYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreS3GEcjgCsQ1peG/1IukFtIH+YUTDJFImkbNdsLRLAr5QXpUz0pLXigAi4A 5opRarXSEvpWaRbqfpNzHo45iroNA+nPTLznO5VBq8eSXE7XqB6JG9e3tnsObvNt Ltvl9pwfwZhDk2XrmKUZIjb6Zxt1Osr2v87yBsFBduZs4QU/z96/7IjVvDCs6Hqm 45EJAOu7e+IlENtBGfLgjY1XZwy685aABCkB61CdHOLV8K2UdbhsVm3AcxcvwUgr /YJ32+N5ps2nuFm/sg7xYZhZesM1WaRPvqQSDU9oiYBXIOM7SqD3QIUHQ9d755xR RBkNr/fxhy9rxwA7LvMVX1q8lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqqC9OX +60dTSpP+euGGv8CcMPXMB8GA1UdIwQYMBaAFI1bqzcMqS5PX9eJ/CJzMQ+a6jj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzI5MC9GNjgxNDFFMDBC MDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExrOWYxNG44SW5NeEQ1cnFP UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdXJOd3lwTGs5ZjE0bjhJbk14RDVycU9QWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzI5MC9GNjgxNDFFMDBCMDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExr OWYxNG44SW5NeEQ1cnFPUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+PDw49rnngVrET3SGqfQ4Td/oGb8yaEHdHUJ8iT0dHTtDmdEUmYXS LP1ssWiAYzJ4E9JfrLlEF66yc/tUWMLDJAZo5Rvt2ubMrkEdCTkAMBfrK/3foRC2 14HcaSdp1z1IWr+a5QTDCB7RmjHHIXkLUhnisK1UcBAeQZiX5J1hG3GupI3aYVsF fcC0A4XCEEtCXpZ4lDeYk7cd+0cGyQO9/gIySGq0o9sR6Zq3KVfY8jbOwU2CHuuX cCa9V+kjOUcF1GmmPGscR+acfeXyM868lQe2DGi8iIOmE8FhR/36JIhKNsry6ejI JrsSDvn4n+Yl76slphG9C6oCv8pyZIqs -----END CERTIFICATE-----Generated at Sun Aug 10 05:43:26 2025 by rpki-client