$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: 5jAxwk/2nfZLB7SE0+7952eEyDtqfz3qdEfBOwK0P+k= Subject key identifier: 36:1B:79:28:5A:23:CF:4E:7D:76:E3:39:8D:A3:04:2E:73:F3:6F:6A Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 01DE Signing time: Mon 11 Aug 2025 02:48:36 +0000 Manifest this update: Mon 11 Aug 2025 02:48:36 +0000 Manifest next update: Mon 18 Aug 2025 02:48:36 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: lru85ptccUkJhF/zVwcwTUq5cqP96iZKifxpJ9vPFpk=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Aug 11 02:48:36 2025 GMT Not After : Aug 18 02:48:36 2025 GMT Subject: CN=68995a04-9363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:04:57:78:9e:c3:21:a7:be:83:7a:ed:58: e0:d8:28:1f:c0:e2:d4:c7:08:e2:69:4e:bc:d6:1f: 69:d4:44:79:93:c8:8c:48:30:13:6a:e9:86:13:3d: 01:90:c4:b9:a9:f8:cc:e8:43:be:89:ec:cb:6b:7e: 7a:ec:a2:a3:2a:3b:a5:26:c3:46:da:49:11:54:8b: 16:e2:4c:4d:14:1c:98:3f:dc:8f:af:71:55:ff:0a: bb:19:fe:6c:ae:47:6d:6f:15:3a:38:d7:e6:f6:b8: 1c:37:31:42:ff:9b:8d:5f:97:09:c1:66:c0:c7:2e: 90:7b:51:29:35:60:29:40:86:1e:12:82:1c:33:07: 68:34:e9:b5:00:27:10:57:11:09:8a:d2:fe:eb:62: 9f:b1:c1:88:b9:77:41:35:3c:58:30:6b:b8:af:79: 5f:49:1b:dc:59:16:0d:e8:2f:ba:55:72:a2:63:66: 2a:ec:6f:93:cb:64:cd:0a:53:95:fd:e2:8b:6e:41: 82:6a:1e:17:5e:b7:4b:ab:0f:f0:a5:45:84:96:29: 2a:da:fb:3b:34:19:71:30:69:45:d4:44:12:d1:9e: 24:4e:2c:83:73:32:41:c9:84:f9:ce:43:c3:fe:d2: b2:83:c4:3c:90:ec:c8:bb:91:91:c9:fc:92:9f:56: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1B:79:28:5A:23:CF:4E:7D:76:E3:39:8D:A3:04:2E:73:F3:6F:6A X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:ba:d1:95:0e:75:70:3d:10:53:88:d8:3c:03:ff:28:11:6c: 31:30:db:57:68:aa:04:2e:6b:b1:42:34:ed:b4:ca:a1:8c:0a: 7c:96:da:ea:3a:33:71:32:89:66:ac:80:1f:7d:aa:d9:21:08: e4:c2:c8:77:b9:34:67:44:44:c2:4f:83:df:ba:57:2e:c8:fe: ae:c2:eb:6b:53:86:89:24:94:94:d9:aa:c4:89:6a:1f:e3:c5: 2d:0b:22:43:4a:63:86:28:8f:8d:79:0d:0d:4a:90:e6:29:10: b1:b1:29:f4:10:2c:06:a8:19:7b:89:44:a5:65:f4:f4:2a:8e: 85:d6:37:af:e1:8e:aa:1f:ba:85:cf:ed:c8:6b:74:16:02:55: f7:76:21:71:31:1f:1d:75:9c:47:b7:0e:61:bf:4f:bc:9d:4d: 56:7c:c0:6e:3a:7a:fa:3b:f1:1e:c0:c4:c6:4f:9d:ed:e6:08: fd:57:49:3d:82:7c:3f:c4:77:9e:2c:f3:9d:f7:12:99:d8:7c: 27:4a:51:42:75:6a:67:e3:99:8a:31:80:fa:6e:66:5d:70:de: 0e:26:ee:cb:83:ae:83:d4:6e:35:28:35:19:68:99:7e:74:2c: 0a:0c:24:40:aa:da:18:dc:33:3a:d3:6a:49:3c:4f:bc:fb:66: e2:d5:ee:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUwODExMDI0ODM2WhcNMjUwODE4MDI0ODM2WjAYMRYwFAYD VQQDEw02ODk5NWEwNC05MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdYEV3iewyGnvoN67Vjg2CgfwOLUxwjiaU681h9p1ER5k8iMSDATaumGEz0B kMS5qfjM6EO+iezLa3567KKjKjulJsNG2kkRVIsW4kxNFByYP9yPr3FV/wq7Gf5s rkdtbxU6ONfm9rgcNzFC/5uNX5cJwWbAxy6Qe1EpNWApQIYeEoIcMwdoNOm1ACcQ VxEJitL+62KfscGIuXdBNTxYMGu4r3lfSRvcWRYN6C+6VXKiY2Yq7G+Ty2TNClOV /eKLbkGCah4XXrdLqw/wpUWElikq2vs7NBlxMGlF1EQS0Z4kTiyDczJByYT5zkPD /tKyg8Q8kOzIu5GRyfySn1Y28QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYbeSha I89OfXbjOY2jBC5z829qMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLutGVDnVwPRBTiNg8A/8oEWwxMNtXaKoELmuxQjTttMqhjAp8ltrq OjNxMolmrIAffarZIQjkwsh3uTRnRETCT4PfulcuyP6uwutrU4aJJJSU2arEiWof 48UtCyJDSmOGKI+NeQ0NSpDmKRCxsSn0ECwGqBl7iUSlZfT0Ko6F1jev4Y6qH7qF z+3Ia3QWAlX3diFxMR8ddZxHtw5hv0+8nU1WfMBuOnr6O/EewMTGT53t5gj9V0k9 gnw/xHeeLPOd9xKZ2HwnSlFCdWpn45mKMYD6bmZdcN4OJu7Lg66D1G41KDUZaJl+ dCwKDCRAqtoY3DM602pJPE+8+2bi1e6O -----END CERTIFICATE-----Generated at Mon Aug 11 07:39:38 2025 by rpki-client