$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: GpVdidHswaBw486wXF5083n+roNhcYNIijHbL6F8igc= Subject key identifier: 88:D7:47:ED:9E:A7:32:73:F7:A8:96:A5:35:76:D2:D4:25:38:F0:C4 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0B8E Signing time: Fri 22 Aug 2025 19:07:30 +0000 Manifest this update: Fri 22 Aug 2025 19:07:29 +0000 Manifest next update: Fri 29 Aug 2025 19:07:29 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: EhjgCrwaajNLfiThGzVRy/O6PvVAKdsLNAJMLARrvFk=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Aug 22 19:07:29 2025 GMT Not After : Aug 29 19:07:29 2025 GMT Subject: CN=68a8bff1-9f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:ec:99:5f:27:db:87:b7:de:bf:57:ba:82: d7:be:82:1e:6a:b9:9e:c4:77:c5:2f:39:23:a2:bc: 76:86:be:ae:19:b1:3f:db:c7:9a:a8:d4:6d:bc:89: ed:de:d9:77:73:ec:96:ef:59:b0:3d:1d:28:88:99: 07:91:c3:98:8b:3f:de:e0:c6:fe:c0:a8:48:a3:03: 09:d9:b9:a1:39:cb:39:a4:2f:0f:32:24:da:1b:86: 59:49:3e:14:43:14:c9:cb:6c:1f:5c:4f:bb:27:26: 97:f9:0e:6d:ce:13:10:31:46:0b:b7:1b:0b:4c:a9: cc:4f:17:40:1c:d5:af:34:cd:54:7e:35:bf:f2:98: 7c:3b:6a:79:98:83:ca:b7:2a:f1:fd:2b:e2:f8:4a: fe:86:ad:67:7f:3c:7c:4f:c9:61:ee:76:45:b8:89: 2f:27:ae:93:bb:76:42:bb:6f:e1:42:0c:3b:1b:e8: 51:cc:fb:77:aa:9f:59:e8:4f:17:1f:c9:4e:f1:61: 0b:8f:e2:35:3a:5e:f4:a2:e5:74:2b:39:f7:a1:cd: 63:b4:75:37:25:7d:fb:1d:a6:a0:e3:be:f5:97:30: 82:bd:5c:48:56:ae:d1:06:9d:d6:d6:6c:a0:6c:8e: 30:87:b4:ed:12:2c:b4:0d:b9:b4:65:e8:95:0b:c9: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D7:47:ED:9E:A7:32:73:F7:A8:96:A5:35:76:D2:D4:25:38:F0:C4 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:28:d1:c4:bd:68:99:d5:c9:f8:4f:7d:f3:d5:62:f6:77:48: ef:43:9e:ab:15:ba:cf:ba:02:e7:00:be:dc:fb:0c:a8:ca:a9: 39:4c:03:95:52:b4:41:ef:4a:83:9e:2f:f2:da:8c:eb:0c:e3: 9b:5f:bc:47:fd:4e:b4:7f:4a:32:a7:9e:cd:0b:0d:e1:5d:76: 29:07:44:79:62:67:61:63:5e:dd:85:f8:1d:b1:1f:de:c4:b4: 9c:94:c8:0e:ee:cd:94:1c:0e:48:12:85:82:82:c2:6e:b7:37: 6a:33:63:f4:a8:99:b8:52:d6:37:16:54:92:16:1a:01:a8:f5: c8:83:22:c7:77:4a:db:1e:67:74:54:87:d6:d3:2b:d8:33:14: e1:38:ed:0e:93:5e:d5:ef:3c:21:39:e3:e3:e8:85:3a:6c:95: 0c:6c:07:02:df:1b:73:35:30:f8:44:6d:c0:0f:46:cb:fd:5c: a0:ef:31:cb:fd:75:0b:a3:f6:1c:fe:d9:da:3a:d1:2d:6f:40: f0:60:77:38:21:dc:9e:b6:00:d0:10:db:a5:16:de:92:2c:b7: 3d:5a:ad:4c:e2:a8:cd:d6:72:b2:0b:0c:6d:5e:9d:92:c9:e1: 0f:8a:81:31:9d:a9:5c:af:8e:58:97:4c:eb:4c:45:de:e6:4a: a9:65:ca:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjUwODIyMTkwNzI5WhcNMjUwODI5MTkwNzI5WjAYMRYwFAYD VQQDEw02OGE4YmZmMS05Zjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArArsmV8n24e33r9XuoLXvoIearmexHfFLzkjorx2hr6uGbE/28eaqNRtvInt 3tl3c+yW71mwPR0oiJkHkcOYiz/e4Mb+wKhIowMJ2bmhOcs5pC8PMiTaG4ZZST4U QxTJy2wfXE+7JyaX+Q5tzhMQMUYLtxsLTKnMTxdAHNWvNM1UfjW/8ph8O2p5mIPK tyrx/Svi+Er+hq1nfzx8T8lh7nZFuIkvJ66Tu3ZCu2/hQgw7G+hRzPt3qp9Z6E8X H8lO8WELj+I1Ol70ouV0Kzn3oc1jtHU3JX37Haag4771lzCCvVxIVq7RBp3W1myg bI4wh7TtEiy0Dbm0ZeiVC8loxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjXR+2e pzJz96iWpTV20tQlOPDEMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfKNHEvWiZ1cn4T33z1WL2d0jvQ56rFbrPugLnAL7c+wyoyqk5TAOV UrRB70qDni/y2ozrDOObX7xH/U60f0oyp57NCw3hXXYpB0R5YmdhY17dhfgdsR/e xLSclMgO7s2UHA5IEoWCgsJutzdqM2P0qJm4UtY3FlSSFhoBqPXIgyLHd0rbHmd0 VIfW0yvYMxThOO0Ok17V7zwhOePj6IU6bJUMbAcC3xtzNTD4RG3AD0bL/Vyg7zHL /XULo/Yc/tnaOtEtb0DwYHc4IdyetgDQENulFt6SLLc9Wq1M4qjN1nKyCwxtXp2S yeEPioExnalcr45Yl0zrTEXe5kqpZcpJ -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:16 2025 by rpki-client