$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: mtJFZ8ZOjFTA5qog4qW9eMq/wohC2ijQCQyuLasVyfU= Subject key identifier: 02:9D:C8:AA:AD:BA:2A:58:6C:8D:AD:51:86:04:96:F2:53:47:D3:36 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 01B5 Signing time: Sat 23 Aug 2025 03:15:18 +0000 Manifest this update: Sat 23 Aug 2025 03:15:18 +0000 Manifest next update: Sat 30 Aug 2025 03:15:18 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: WCVaQKLvKPH38rH4tTjpSBh2PneA++okXDCoyE3Wo0g=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: Obgr2Zd1OVsSRpdsU4YgCxrRpE7FbkGE3q8rgEYfK/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: Aug 23 03:15:18 2025 GMT Not After : Aug 30 03:15:18 2025 GMT Subject: CN=68a93246-612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:29:59:62:26:39:95:3f:81:47:fa:c0:3e:10: 51:21:43:7f:4c:4c:b1:8d:45:d1:2e:33:b4:e6:07: 8b:ab:48:ff:29:6a:20:03:7f:be:cb:df:05:92:3d: 40:f3:44:37:eb:ea:c2:a6:81:34:6f:e7:75:67:18: fd:de:b0:96:34:11:e3:35:58:4c:64:dc:b2:86:28: 36:e0:b4:84:9f:a6:69:39:e0:6e:f0:2c:70:25:50: 5f:3e:e5:e9:f0:de:8b:35:b2:c5:c4:7d:21:7c:6b: d7:b4:ff:c3:7b:c4:3d:75:ec:e3:5a:3f:40:38:a2: 02:27:ea:08:c5:0b:66:d2:e6:e4:7d:45:a8:5e:18: 99:c8:15:2a:e5:42:69:b8:a7:81:df:f6:0a:f8:f1: cf:1b:05:ca:c6:21:49:71:f3:d2:68:ee:b7:90:2b: f1:88:52:d6:d2:04:a1:0a:0a:8a:8f:39:12:12:dd: 8e:45:70:c9:1b:db:a9:77:5b:6e:2d:1f:5a:e1:43: 6e:3b:7a:bd:a6:5a:d1:bf:e4:3b:fe:04:23:dc:e2: 37:33:33:9c:14:9b:80:1a:43:c2:81:00:60:20:fa: ef:cc:87:90:5f:f8:34:7b:09:24:2a:ab:d4:73:a8: 70:31:ab:ac:d7:73:24:37:24:9f:52:8e:a9:fd:e5: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9D:C8:AA:AD:BA:2A:58:6C:8D:AD:51:86:04:96:F2:53:47:D3:36 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4d:db:7e:86:9b:84:f1:35:fe:32:dd:e1:69:8b:a2:0e:90: 3f:95:1f:a6:f7:8e:f9:ec:ce:96:d5:cd:b5:a4:16:cc:bc:b5: 28:99:21:51:8f:24:27:87:11:d0:81:16:ad:dd:16:6d:c4:03: 80:a8:1f:5d:4c:13:5a:72:03:a1:bf:98:f2:95:21:31:22:26: 00:58:c3:44:86:3c:fb:97:bd:ab:cf:cf:d2:98:e4:20:db:1f: 07:01:4c:22:f4:30:8c:b8:9e:da:bf:49:21:60:42:10:3f:73: c3:f8:e7:bb:09:25:8b:f5:ae:6c:3e:46:e2:54:c7:ed:5b:37: ee:64:26:87:f6:d9:f9:0d:eb:4a:4a:e6:d0:1c:3a:62:32:44: 9b:22:ab:71:4e:85:8a:88:2f:20:3a:eb:ef:d3:e5:d0:63:28: 59:79:14:fd:33:bd:23:4a:65:ff:fa:aa:02:3f:8f:7b:bc:77: 51:1a:75:96:02:06:ca:b7:a7:29:97:33:f8:01:ea:2d:2f:95: 42:76:7c:cf:c2:18:e9:10:46:ed:3b:01:9d:02:54:69:0b:12: c1:5c:cf:99:de:2a:a7:14:30:ff:74:82:69:99:df:79:46:93: 70:da:6d:8c:81:97:27:b6:bd:d7:50:55:59:2e:55:9d:6d:95: e8:08:d4:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUwODIzMDMxNTE4WhcNMjUwODMwMDMxNTE4WjAYMRYwFAYD VQQDEw02OGE5MzI0Ni02MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ilZYiY5lT+BR/rAPhBRIUN/TEyxjUXRLjO05geLq0j/KWogA3++y98Fkj1A 80Q36+rCpoE0b+d1Zxj93rCWNBHjNVhMZNyyhig24LSEn6ZpOeBu8CxwJVBfPuXp 8N6LNbLFxH0hfGvXtP/De8Q9dezjWj9AOKICJ+oIxQtm0ubkfUWoXhiZyBUq5UJp uKeB3/YK+PHPGwXKxiFJcfPSaO63kCvxiFLW0gShCgqKjzkSEt2ORXDJG9upd1tu LR9a4UNuO3q9plrRv+Q7/gQj3OI3MzOcFJuAGkPCgQBgIPrvzIeQX/g0ewkkKqvU c6hwMaus13MkNySfUo6p/eWHDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKdyKqt uipYbI2tUYYElvJTR9M2MB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUTdt+hpuE8TX+Mt3haYuiDpA/lR+m94757M6W1c21pBbMvLUomSFR jyQnhxHQgRat3RZtxAOAqB9dTBNacgOhv5jylSExIiYAWMNEhjz7l72rz8/SmOQg 2x8HAUwi9DCMuJ7av0khYEIQP3PD+Oe7CSWL9a5sPkbiVMftWzfuZCaH9tn5DetK SubQHDpiMkSbIqtxToWKiC8gOuvv0+XQYyhZeRT9M70jSmX/+qoCP497vHdRGnWW AgbKt6cplzP4AeotL5VCdnzPwhjpEEbtOwGdAlRpCxLBXM+Z3iqnFDD/dIJpmd95 RpNw2m2MgZcntr3XUFVZLlWdbZXoCNQz -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:03 2025 by rpki-client