$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft File: 1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json) Hash identifier: Cs1ex3dWPW76BbTHYKuTtArg0CMGi2pWvcp3XckHuPg= Subject key identifier: 99:57:61:D4:C8:15:19:2E:C7:10:E5:D0:F2:65:7B:7B:84:01:6D:0B Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft Manifest number: 0431 Signing time: Sat 23 Aug 2025 00:44:35 +0000 Manifest this update: Sat 23 Aug 2025 00:44:35 +0000 Manifest next update: Sat 30 Aug 2025 00:44:35 +0000 Files and hashes: 1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: 7N8Y6cXqhOnMRnWvJUF6hnwAl8y8Gx/qrtFnjNfzNhY=) 2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: 85cGKhcFvfLsa3fKkS4OSkRQ0VqdCtjeFSWGED/065w=) 3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: AFhkaTS9H9SYq32LCGLZ0ybHnkII09gZHj0VVB5f314=) 4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=) 5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: 1tRgJ3aPzibyR+z50Gw9nZnYt8M73G+bJYsVfkg2zT8=) 6: BA39BBAE524E11F099DE067AC4F9AE02.roa (hash: 3gyaglTVkQAZrKCW3DJx9ZXnt7qwYMNYwDnPoFgmgCI=) 7: 1DFB74B4693511F098DA961FC4F9AE02.roa (hash: +wi0BCEeoJnor4MtXH8ycoVvwZa312lSfWT/315c9pI=) 8: F563D916248D11EF93237035C4F9AE02.roa (hash: B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=) 9: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K8HM6DIcOQOpn7mr5HRxJGQ+LZPGnSM+a9C5ehvgnkk=) 10: B5036DB4694211F08D05BF0AC4F9AE02.roa (hash: MWZ03MCYEsPEDqOZK8DYjxUyBuzhJ3tn8RO/bgSukdQ=) 11: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 7nV+jajMliwqjNqYG+S6G7SOAx0aeStohPloUPjdM80=) 12: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=) 13: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: 4TUF4fCsd6U4sl8CKjbb5lEPYX8IdLYlZccOBdKP5o0=) 14: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 5jFOXz91ZZ50fpVnfRxRJl436xHddATVpaygKT2CLho=) 15: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=) 16: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: zGN2nOJQWd9Hxkuu+Xvwm7K9HCh0xLUXhnRjE+idexs=) 17: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: Aug 23 00:44:35 2025 GMT Not After : Aug 30 00:44:35 2025 GMT Subject: CN=68a90ef3-b47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:66:77:d3:de:94:78:fe:fe:63:25:02:a0: 21:e0:d9:c2:7b:23:0c:08:01:11:15:fa:5b:55:6e: 10:e7:08:ea:ce:0f:13:09:08:8e:f7:92:bf:7e:b4: 1c:81:75:b0:02:32:67:5a:48:6d:2d:da:bf:ad:20: 49:01:3d:0b:5e:c8:b4:d7:b4:03:25:b5:1b:4a:55: 29:24:8b:64:95:84:3b:10:bb:10:a5:59:20:1b:51: 6f:e7:a0:29:96:9a:87:4c:62:4a:03:23:1a:52:5d: e6:a6:b9:6e:5b:dd:fd:5a:f8:37:72:56:98:07:c8: 2c:66:1b:88:7d:87:e3:33:2b:ca:1d:dd:12:47:db: ce:4f:5c:dc:a9:2c:c8:bf:77:6f:ba:22:08:0d:bf: c7:af:45:31:99:11:1a:a0:58:6e:9b:e5:d2:18:a4: b8:8e:4e:27:43:e8:19:78:60:b5:3c:61:70:77:c1: fe:86:6c:68:6f:50:72:eb:14:27:ab:14:40:99:5d: 15:c1:80:1c:dc:d0:e2:9a:eb:3b:ce:1e:73:d0:07: e5:8f:ee:8b:5c:fb:fd:b1:c5:b6:0a:37:ad:4a:49: 74:54:00:43:12:72:92:e9:cc:5f:c0:73:41:ab:f3: 3a:84:fa:f3:51:68:0e:b9:9f:32:ec:15:a3:e8:77: 4f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:57:61:D4:C8:15:19:2E:C7:10:E5:D0:F2:65:7B:7B:84:01:6D:0B X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:74:96:ef:bb:cb:23:57:c1:6d:de:fa:99:68:bd:a8:e3:1a: 89:8b:42:5d:68:b1:2b:43:2e:c7:5b:cd:19:c2:a0:8b:44:39: d6:9e:c2:84:ed:7d:13:00:82:e3:38:48:cf:ab:cf:7b:36:af: 84:01:d0:9b:8c:02:cf:36:c3:74:c7:91:b7:69:7b:07:f6:b4: 53:77:ab:56:f1:82:d7:8d:bd:1e:60:0f:a9:9a:48:c7:e5:3f: 89:ee:a5:8c:8b:1a:b4:ea:97:da:1e:c5:9e:8d:2c:81:94:f2: fc:d1:cc:05:3d:02:ba:01:40:2f:12:6c:03:16:b1:b1:a1:12: 72:32:4a:80:45:fb:05:6f:f3:71:4d:be:06:98:2b:4c:4b:82: f0:62:9f:48:46:53:ee:46:53:d1:ec:3e:ce:fe:05:36:e2:e4: 2f:7a:56:6b:84:88:b5:52:5c:89:1f:a8:82:cf:a7:4d:08:d2: cd:5d:cf:85:cc:d8:dd:b8:1f:47:39:e8:ed:4b:91:c3:5e:fa: 94:b7:e6:c4:48:1d:ba:77:16:f9:35:ce:85:fa:39:0f:98:a4: 1a:a0:1a:c9:0f:8b:45:1f:f0:fe:76:74:fc:d6:05:fb:c0:e0: e8:77:d4:93:6c:43:2c:0a:30:1b:39:90:40:1d:5a:24:89:19: 90:68:f8:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjUwODIzMDA0NDM1WhcNMjUwODMwMDA0NDM1WjAYMRYwFAYD VQQDEw02OGE5MGVmMy1iNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBRmd9PelHj+/mMlAqAh4NnCeyMMCAERFfpbVW4Q5wjqzg8TCQiO95K/frQc gXWwAjJnWkhtLdq/rSBJAT0LXsi017QDJbUbSlUpJItklYQ7ELsQpVkgG1Fv56Ap lpqHTGJKAyMaUl3mprluW939Wvg3claYB8gsZhuIfYfjMyvKHd0SR9vOT1zcqSzI v3dvuiIIDb/Hr0UxmREaoFhum+XSGKS4jk4nQ+gZeGC1PGFwd8H+hmxob1By6xQn qxRAmV0VwYAc3NDimus7zh5z0Aflj+6LXPv9scW2CjetSkl0VABDEnKS6cxfwHNB q/M6hPrzUWgOuZ8y7BWj6HdPzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlXYdTI FRkuxxDl0PJle3uEAW0LMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhdJbvu8sjV8Ft3vqZaL2o4xqJi0JdaLErQy7HW80ZwqCLRDnWnsKE 7X0TAILjOEjPq897Nq+EAdCbjALPNsN0x5G3aXsH9rRTd6tW8YLXjb0eYA+pmkjH 5T+J7qWMixq06pfaHsWejSyBlPL80cwFPQK6AUAvEmwDFrGxoRJyMkqARfsFb/Nx Tb4GmCtMS4LwYp9IRlPuRlPR7D7O/gU24uQvelZrhIi1UlyJH6iCz6dNCNLNXc+F zNjduB9HOejtS5HDXvqUt+bESB26dxb5Nc6F+jkPmKQaoBrJD4tFH/D+dnT81gX7 wODod9STbEMsCjAbOZBAHVokiRmQaPgX -----END CERTIFICATE-----Generated at Sat Aug 23 09:16:42 2025 by rpki-client