$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json) Hash identifier: 6QFKbuamJQJ2HsitzhxgVlgSQht+HEuIwUZGM3/EK8U= Subject key identifier: 16:A3:7C:C7:E7:78:84:60:27:C5:B6:B1:63:29:33:89:9C:AB:57:59 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft Manifest number: 0215 Signing time: Mon 11 Aug 2025 02:21:03 +0000 Manifest this update: Mon 11 Aug 2025 02:21:01 +0000 Manifest next update: Mon 18 Aug 2025 02:21:01 +0000 Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: 2O2ZW4yTrfq7jI8M4k1xIMnDUryPI/PWZKYY2sprzkw=) 2: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: up6WHjnsfS0bIxQesxTATm4WYD2tutF7YiezZwJi2Bc=) 3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: NqrZmcVp/US1PncX6fEsquuB9U+PwjdNaQFtiMmKje0=) 4: D45117DEEBF311EEAECC405FC4F9AE02.roa (hash: L3m+NQNaRyXNu/ZiemkthKYLeI1gIGN4M/qfSkh3IEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Aug 11 02:21:01 2025 GMT Not After : Aug 18 02:21:01 2025 GMT Subject: CN=6899538f-bf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:57:c7:dd:26:ee:c8:57:7e:be:b9:3d:b1: 06:a9:cd:45:ef:c3:ee:d8:58:d7:be:c6:88:b1:fc: d6:9b:48:33:44:03:c5:16:db:da:81:1a:f6:57:50: 96:02:70:3f:3e:8c:44:1d:99:87:23:27:7e:08:84: b2:bd:c1:0c:30:c7:4d:5a:52:ed:f9:23:25:d6:7b: 72:53:20:2b:17:a8:0a:8f:a7:bf:85:42:c6:93:49: fc:65:fa:85:0f:2d:1f:19:fe:86:f0:31:6f:e5:43: 57:d9:94:50:52:99:4c:31:68:23:7b:72:b4:f1:43: b6:30:8a:75:e6:17:2d:7b:d5:0e:fd:d4:32:f2:8b: d0:88:c8:3d:05:a2:56:61:4e:a9:f5:f6:de:ad:83: e7:52:a0:84:1c:80:bf:d5:a8:26:ba:a2:e0:b6:71: 67:87:65:7f:09:3a:c5:2f:fe:e5:7d:57:b4:22:08: 58:98:3e:8e:ec:de:f2:b3:f9:0a:af:14:76:86:3c: 5a:16:b2:ce:f3:9c:bc:e7:5f:ac:6c:b4:3a:a4:0d: f9:98:45:ce:94:34:ef:bf:75:e8:ca:98:42:ab:0d: 87:fa:59:11:df:1c:16:6e:af:11:6a:7e:91:ab:8b: 4a:7a:38:a0:79:d9:fa:82:49:10:2f:00:7d:d8:4c: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A3:7C:C7:E7:78:84:60:27:C5:B6:B1:63:29:33:89:9C:AB:57:59 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b2:be:e0:57:f1:72:f2:80:99:0d:90:5a:e4:eb:9e:d1:3f: 4d:29:d4:00:e6:c1:9e:b3:84:31:e7:db:36:89:e2:f2:9a:7f: 22:44:b3:8d:77:58:be:dd:0c:dc:92:ce:1e:90:6f:cc:2f:de: 23:a8:82:55:5c:f7:35:f6:ad:51:30:49:c6:ef:ac:cf:3e:8b: ac:6f:ec:ac:46:0c:10:1f:b1:db:f0:78:c5:d5:dd:fe:dc:f0: 18:6d:34:d3:a8:77:e6:6a:f6:96:39:cc:d1:13:24:e6:db:67: c6:cb:43:eb:8f:e6:56:51:8b:e6:39:dc:a7:5a:bc:5b:f5:48: 20:13:d5:83:fd:f2:f1:c1:9e:c8:e5:e0:5e:e0:19:e5:e9:65: d2:bd:8e:27:0f:34:28:17:75:06:09:2f:e9:91:6e:fb:13:b1: ae:94:ca:cd:52:97:31:bb:5c:5e:ae:7a:3a:a0:c6:95:ed:95: ce:70:73:bd:d8:52:78:0f:97:40:31:17:5d:2d:34:ac:00:b1: 7e:5c:2c:bc:da:79:24:1f:8d:7a:9a:22:9e:ef:6b:a4:88:ae: e9:3d:b1:82:2c:74:b6:17:75:b0:96:c5:e1:98:77:04:29:9f: 1b:6d:ab:7e:30:10:64:7d:3a:41:36:cd:b6:b9:a6:73:8f:f9: b8:5a:df:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUwODExMDIyMTAxWhcNMjUwODE4MDIyMTAxWjAYMRYwFAYD VQQDEw02ODk5NTM4Zi1iZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NtXx90m7shXfr65PbEGqc1F78Pu2FjXvsaIsfzWm0gzRAPFFtvagRr2V1CW AnA/PoxEHZmHIyd+CISyvcEMMMdNWlLt+SMl1ntyUyArF6gKj6e/hULGk0n8ZfqF Dy0fGf6G8DFv5UNX2ZRQUplMMWgje3K08UO2MIp15hcte9UO/dQy8ovQiMg9BaJW YU6p9fberYPnUqCEHIC/1agmuqLgtnFnh2V/CTrFL/7lfVe0IghYmD6O7N7ys/kK rxR2hjxaFrLO85y851+sbLQ6pA35mEXOlDTvv3XoyphCqw2H+lkR3xwWbq8Ran6R q4tKejigedn6gkkQLwB92EylewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBajfMfn eIRgJ8W2sWMpM4mcq1dZMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf TTM5d1FORGozeEZCd1dGaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALsr7gV/Fy8oCZDZBa5Oue0T9NKdQA5sGes4Qx59s2ieLymn8iRLON d1i+3Qzcks4ekG/ML94jqIJVXPc19q1RMEnG76zPPousb+ysRgwQH7Hb8HjF1d3+ 3PAYbTTTqHfmavaWOczREyTm22fGy0Prj+ZWUYvmOdynWrxb9UggE9WD/fLxwZ7I 5eBe4Bnl6WXSvY4nDzQoF3UGCS/pkW77E7GulMrNUpcxu1xerno6oMaV7ZXOcHO9 2FJ4D5dAMRddLTSsALF+XCy82nkkH416miKe72ukiK7pPbGCLHS2F3WwlsXhmHcE KZ8bbat+MBBkfTpBNs22uaZzj/m4Wt/g -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:42 2025 by rpki-client