$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: TP9CBR9joQFEns6pwaipq64HpFSrznWcwH9lx7AEiWM= Subject key identifier: 24:3B:26:BC:66:A4:B2:D4:6F:41:2B:E0:2A:4E:3E:BB:D3:9C:F8:FA Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 06D4 Signing time: Mon 04 Aug 2025 22:25:35 +0000 Manifest this update: Mon 04 Aug 2025 22:25:35 +0000 Manifest next update: Mon 11 Aug 2025 22:25:35 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: Wu1/zwmHZsfsHzhrBEZbZaCoajw+CEMrTC4+MzFJsGM=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Aug 4 22:25:35 2025 GMT Not After : Aug 11 22:25:35 2025 GMT Subject: CN=6891335f-ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:9c:cf:6b:5a:05:25:eb:b6:9d:bf:55:66: a6:76:6f:0a:41:6d:5d:28:5c:4b:b9:06:49:07:25: 48:b8:a5:72:19:bc:be:63:2b:8c:4b:e2:7e:7d:aa: 28:25:42:6e:85:97:3e:89:79:01:68:34:6e:71:e2: 4d:9f:73:f9:08:13:5d:71:64:a2:8d:47:2d:2a:f2: 8d:f9:33:32:62:e8:ff:91:bf:35:38:39:92:c5:5a: c2:e5:4e:85:8e:a4:3a:cf:fc:dd:9e:1a:dc:1a:82: 97:ad:fe:b6:90:bc:53:63:3a:ca:49:19:96:05:ff: 02:7a:40:de:f9:78:27:bf:a4:23:30:5d:94:06:11: 12:eb:84:d2:d7:75:66:57:84:f7:6a:ab:0a:7c:93: 1d:8c:24:6b:08:c4:44:5e:a4:36:71:81:72:95:14: fb:d2:8b:0c:ab:34:f7:da:09:69:37:70:fb:ca:23: 80:2c:85:57:1d:6a:ec:b8:78:be:f1:a2:ea:40:df: 85:03:0b:9c:bb:b7:56:78:d1:be:45:d8:c6:fc:24: e5:5d:59:1a:b9:7e:94:2b:59:a1:c6:e7:da:0d:8a: 09:6a:55:6b:0a:c9:1b:d2:b5:e1:af:ac:95:67:f5: f7:63:08:52:ad:e6:05:a8:07:ab:07:14:f0:5b:9e: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:26:BC:66:A4:B2:D4:6F:41:2B:E0:2A:4E:3E:BB:D3:9C:F8:FA X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:4c:8c:df:84:71:4a:af:c3:f0:be:b3:44:1b:12:3c:a1:e1: 24:1d:5e:60:5f:66:b4:65:72:ec:42:78:95:e7:c1:a6:07:60: 40:25:e3:15:f8:fe:ac:98:e8:55:a5:12:dd:fe:42:40:ee:74: 2b:26:d8:3c:19:d6:53:4f:a3:c0:6e:c5:91:0b:67:d7:e7:a8: ac:68:ea:62:98:84:0d:d8:0c:02:9c:df:c3:86:29:b9:8a:bf: 23:ae:71:2a:f5:76:9a:82:83:e1:a8:11:f3:d1:73:6c:e5:61: 0e:16:49:88:1e:1c:6b:33:21:c3:6d:b9:f8:7c:29:55:39:5d: b5:00:07:71:52:86:9a:c8:73:2a:00:a7:04:93:6f:77:84:8c: 78:75:73:62:b4:f9:0d:c5:62:d7:da:f5:86:c9:cb:a8:e6:08: 2c:72:1f:55:ae:db:45:b0:5b:77:f1:0c:51:70:4b:5e:3f:47: 90:8e:f7:b1:99:52:01:16:90:c6:a2:ee:d7:75:ea:47:57:15: e1:a9:1e:25:23:30:ed:47:49:0d:36:71:2a:97:97:f9:b2:5d: fb:6f:9f:5c:40:11:37:bd:73:b9:64:a0:53:f8:53:59:bf:f7: 1b:cc:8b:59:42:b4:9b:5c:77:5c:56:f8:b1:2f:52:b2:75:27: 02:2a:0c:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUwODA0MjIyNTM1WhcNMjUwODExMjIyNTM1WjAYMRYwFAYD VQQDEw02ODkxMzM1Zi1jZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlGcz2taBSXrtp2/VWamdm8KQW1dKFxLuQZJByVIuKVyGby+YyuMS+J+faoo JUJuhZc+iXkBaDRuceJNn3P5CBNdcWSijUctKvKN+TMyYuj/kb81ODmSxVrC5U6F jqQ6z/zdnhrcGoKXrf62kLxTYzrKSRmWBf8CekDe+Xgnv6QjMF2UBhES64TS13Vm V4T3aqsKfJMdjCRrCMREXqQ2cYFylRT70osMqzT32glpN3D7yiOALIVXHWrsuHi+ 8aLqQN+FAwucu7dWeNG+RdjG/CTlXVkauX6UK1mhxufaDYoJalVrCskb0rXhr6yV Z/X3YwhSreYFqAerBxTwW55zzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQ7Jrxm pLLUb0Er4CpOPrvTnPj6MB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASTIzfhHFKr8PwvrNEGxI8oeEkHV5gX2a0ZXLsQniV58GmB2BAJeMV +P6smOhVpRLd/kJA7nQrJtg8GdZTT6PAbsWRC2fX56isaOpimIQN2AwCnN/Dhim5 ir8jrnEq9XaagoPhqBHz0XNs5WEOFkmIHhxrMyHDbbn4fClVOV21AAdxUoaayHMq AKcEk293hIx4dXNitPkNxWLX2vWGycuo5ggsch9VrttFsFt38QxRcEteP0eQjvex mVIBFpDGou7XdepHVxXhqR4lIzDtR0kNNnEql5f5sl37b59cQBE3vXO5ZKBT+FNZ v/cbzItZQrSbXHdcVvixL1KydScCKgxH -----END CERTIFICATE-----Generated at Wed Aug 6 16:08:05 2025 by rpki-client