$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft File: RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json) Hash identifier: B8YGbhpv+UaUOm11htrgCS5+tECpXHLB03zyZqDGNq4= Subject key identifier: 85:62:3D:1B:32:2F:04:75:D8:A7:F0:BF:74:72:05:7B:FF:9C:12:E3 Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF Certificate issuer: /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF Certificate serial: 035E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft Manifest number: 0356 Signing time: Sat 23 Aug 2025 01:15:36 +0000 Manifest this update: Sat 23 Aug 2025 01:15:36 +0000 Manifest next update: Sat 30 Aug 2025 01:15:36 +0000 Files and hashes: 1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: BafOA4cqhOPpeSFTXEIOg7NlsOiG0SFGqdlRwKWmBok=) 2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: bs5+XFoKF15//AFAKd1GGD7hmAgwTgeLUC9v0U9PGwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF Validity Not Before: Aug 23 01:15:36 2025 GMT Not After : Aug 30 01:15:36 2025 GMT Subject: CN=68a91638-79f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:b0:69:25:83:80:a0:43:e2:b5:35:bd:df: 4e:2a:f4:67:c8:c0:80:c0:a4:48:0e:2e:f6:7c:b4: 8f:b8:ea:66:87:50:3b:ce:65:3e:ce:f9:c4:6c:bf: d2:69:52:5c:37:e6:04:6d:65:46:c9:88:45:92:1f: b8:ed:dd:c6:42:bb:b2:6c:81:3a:86:54:bb:46:87: 13:d1:45:69:f2:01:62:ea:bf:44:a3:74:2a:d5:b8: c2:f5:02:e0:2e:68:7b:90:4d:e1:ca:da:0b:63:00: 79:48:02:36:25:0f:68:11:b4:48:2f:ce:76:37:02: c7:6b:96:bb:eb:9c:9d:27:3d:9b:f1:e7:99:53:70: 4e:26:cf:71:eb:ae:37:52:50:91:bd:a9:48:e4:74: 21:9d:37:3a:0b:a4:42:61:c4:b4:9f:27:ad:1a:f4: 28:cf:b6:28:90:d3:95:a4:d7:fe:75:20:0b:c4:81: bc:6e:bb:55:39:b9:a7:77:d9:c6:9d:20:e5:23:71: 6b:3b:80:0f:d9:ae:79:d8:4f:42:9d:b8:c2:79:b4: b3:7d:00:9d:00:c0:06:c2:c0:da:66:fe:b2:37:b7: fa:0b:bd:73:f1:74:b5:fc:04:2b:e5:c4:b8:69:57: 32:02:3d:2c:24:25:71:9c:82:43:d9:a9:62:73:ff: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:3D:1B:32:2F:04:75:D8:A7:F0:BF:74:72:05:7B:FF:9C:12:E3 X509v3 Authority Key Identifier: keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:91:61:51:0a:c8:46:b6:35:ae:49:8b:e2:21:04:87:1d:fc: f4:71:83:2f:71:25:36:2d:2e:9e:c3:78:11:48:4d:5f:50:ba: 1e:01:32:4f:c5:64:7b:50:81:f0:71:e9:88:42:d4:90:fa:4b: 95:82:99:70:2f:84:25:73:de:22:70:c5:4b:1a:fd:51:c3:cb: 8b:16:1b:42:73:15:f3:4c:37:15:99:f5:7b:a9:53:9c:9c:5a: 3d:2c:78:b9:b8:9a:26:25:41:dc:17:ea:ce:8a:62:87:ed:67: 78:f7:c1:91:b7:87:2d:a3:e7:26:1e:ec:a1:a2:45:0b:6a:a7: fe:8e:3b:3f:55:a6:66:72:e8:f0:7f:a7:ea:3c:88:f9:99:3b: 0a:48:10:36:60:e2:d2:dc:e6:38:64:5c:73:1b:b7:33:6e:2e: bb:9e:82:5d:6e:93:f3:50:9f:89:d0:d1:b4:b3:6b:09:9d:d7: 02:c0:ef:a2:d6:cf:3b:d3:77:34:89:dc:aa:3b:07:07:f9:e3: 74:ba:ef:77:b4:53:ee:d8:a4:6a:2b:6f:02:d8:a2:a7:29:35: 37:54:d4:db:38:02:b3:82:2d:ef:81:96:d9:ba:5b:7d:df:2d: 78:8c:a5:fa:9d:06:a0:41:86:df:15:1c:c1:29:d2:82:1a:7b: 7a:f1:60:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzExMTAvBgNVBAUTKDQ2MzlEMjkwOTg2RjRGMDA1NEZEQzA1OTAxNDQ0MTYy MUQzQUJCRkYwHhcNMjUwODIzMDExNTM2WhcNMjUwODMwMDExNTM2WjAYMRYwFAYD VQQDEw02OGE5MTYzOC03OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN+waSWDgKBD4rU1vd9OKvRnyMCAwKRIDi72fLSPuOpmh1A7zmU+zvnEbL/S aVJcN+YEbWVGyYhFkh+47d3GQruybIE6hlS7RocT0UVp8gFi6r9Eo3Qq1bjC9QLg Lmh7kE3hytoLYwB5SAI2JQ9oEbRIL852NwLHa5a765ydJz2b8eeZU3BOJs9x6643 UlCRvalI5HQhnTc6C6RCYcS0nyetGvQoz7YokNOVpNf+dSALxIG8brtVObmnd9nG nSDlI3FrO4AP2a552E9CnbjCebSzfQCdAMAGwsDaZv6yN7f6C71z8XS1/AQr5cS4 aVcyAj0sJCVxnIJD2alic/+9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIViPRsy LwR12Kfwv3RyBXv/nBLjMB8GA1UdIwQYMBaAFEY50pCYb08AVP3AWQFEQWIdOrv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3MS9GNTQwN0QxQ0NB QjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3QlVfY0JaQVVSQlloMDZ1 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqblNrSmh2VHdCVV9jQlpBVVJCWWgwNnVfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3MS9GNTQwN0QxQ0NBQjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3 QlVfY0JaQVVSQlloMDZ1XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBskWFRCshGtjWuSYviIQSHHfz0cYMvcSU2LS6ew3gRSE1fULoeATJP xWR7UIHwcemIQtSQ+kuVgplwL4Qlc94icMVLGv1Rw8uLFhtCcxXzTDcVmfV7qVOc nFo9LHi5uJomJUHcF+rOimKH7Wd498GRt4cto+cmHuyhokULaqf+jjs/VaZmcujw f6fqPIj5mTsKSBA2YOLS3OY4ZFxzG7czbi67noJdbpPzUJ+J0NG0s2sJndcCwO+i 1s8703c0idyqOwcH+eN0uu93tFPu2KRqK28C2KKnKTU3VNTbOAKzgi3vgZbZult9 3y14jKX6nQagQYbfFRzBKdKCGnt68WCU -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:55 2025 by rpki-client