$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: 9Iwmw/rNNh2HTa2zDQB3s4O5O9ILsWvm5SN64zs8fvU= Subject key identifier: F1:EF:96:B1:E2:DE:3B:49:28:DD:AC:BC:6A:B2:A7:B4:25:B6:3A:84 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 012B Signing time: Sat 23 Aug 2025 04:47:14 +0000 Manifest this update: Sat 23 Aug 2025 04:47:13 +0000 Manifest next update: Sat 30 Aug 2025 04:47:13 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: ctLXFGfQYizrhIRVOeENWkXlNEWTuegpgmXKRCZ85CI=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Aug 23 04:47:13 2025 GMT Not After : Aug 30 04:47:13 2025 GMT Subject: CN=68a947d2-3dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bc:37:21:18:16:3a:cb:52:c6:88:8a:93:bf: 4b:04:55:e0:4c:f2:a6:2b:8d:3f:59:a6:84:d7:d5: 00:78:6b:d2:17:57:32:b1:60:9f:8f:1a:a8:a1:2f: 14:f0:2e:8a:9b:c4:c7:d3:fc:52:50:99:af:d5:d0: 51:4f:dd:5e:7a:22:e0:80:ab:38:ae:c8:08:24:2a: 7e:d4:04:46:3d:cb:28:3a:c7:5e:2e:bc:ea:f1:b5: 85:e7:e0:bf:f1:8e:0f:98:aa:3f:59:7b:94:8f:68: 69:89:79:0b:fd:1f:81:c4:96:1a:89:8a:5a:98:d8: a2:ae:aa:90:8b:a9:26:61:bc:82:4b:81:7e:a7:57: a6:b3:f8:0d:b2:43:b9:ed:bb:db:4c:43:0e:6a:49: e6:7f:e0:28:e4:2d:e7:a2:be:ce:40:29:6f:45:e9: 9e:b0:c1:b5:ae:ba:51:56:46:fe:fc:72:e8:03:09: 36:40:ab:f0:61:4d:df:3d:e6:37:15:c3:e2:27:4f: f5:48:f6:d6:c1:3b:f5:0b:73:b1:8c:81:16:c8:6e: 63:77:d9:6b:58:e4:6f:2b:66:5f:1a:6b:68:a2:97: 4a:25:bf:8a:08:a9:d1:e3:02:a7:ba:a0:50:15:c1: 37:b7:f0:53:ad:e6:0d:5f:f2:dd:03:44:7d:a1:cc: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EF:96:B1:E2:DE:3B:49:28:DD:AC:BC:6A:B2:A7:B4:25:B6:3A:84 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:75:f7:cc:46:52:3e:fe:f1:a8:38:15:5b:95:88:98:02:67: 6f:90:0d:cd:e0:93:b3:50:37:96:96:43:87:97:59:1b:ec:3f: 4d:43:88:8b:5e:46:f9:24:1f:b3:6b:47:e3:dd:8f:89:d4:2a: 5c:e7:79:1e:0d:b0:a1:ea:41:c7:cd:62:1a:7e:b6:49:1e:21: 9f:88:f1:50:a6:61:a9:86:fd:51:b3:70:fd:de:41:01:27:11: 9b:57:38:55:38:c0:fe:6e:dc:1d:60:bf:84:3b:8d:52:8c:b1: 3d:af:c2:68:49:42:d0:0b:85:ab:74:b3:dc:a4:6f:ab:71:ae: 37:cf:30:94:bf:af:68:1e:79:b3:e1:29:4c:18:21:fc:bc:8f: c0:83:3a:6f:c1:d1:78:69:62:37:ab:e5:14:ab:6a:02:9c:5e: f2:d1:47:01:9f:51:ed:7d:01:30:e1:aa:3c:ae:11:ad:f0:c5: 2b:f2:c4:60:b9:dc:1c:38:57:f6:1c:67:01:4a:e1:04:70:0f: e4:21:45:e4:3a:6e:ce:20:05:fd:14:6d:1f:a2:98:b5:5c:d8: f9:b5:a6:69:4f:60:b8:91:e5:51:aa:53:61:96:bc:61:45:19: ba:50:22:26:83:e8:e8:a0:92:f1:d6:b4:d8:59:21:88:28:ef: 7c:db:b9:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwODIzMDQ0NzEzWhcNMjUwODMwMDQ0NzEzWjAYMRYwFAYD VQQDEw02OGE5NDdkMi0zZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bw3IRgWOstSxoiKk79LBFXgTPKmK40/WaaE19UAeGvSF1cysWCfjxqooS8U 8C6Km8TH0/xSUJmv1dBRT91eeiLggKs4rsgIJCp+1ARGPcsoOsdeLrzq8bWF5+C/ 8Y4PmKo/WXuUj2hpiXkL/R+BxJYaiYpamNiirqqQi6kmYbyCS4F+p1ems/gNskO5 7bvbTEMOaknmf+Ao5C3nor7OQClvRemesMG1rrpRVkb+/HLoAwk2QKvwYU3fPeY3 FcPiJ0/1SPbWwTv1C3OxjIEWyG5jd9lrWORvK2ZfGmtoopdKJb+KCKnR4wKnuqBQ FcE3t/BTreYNX/LdA0R9ocyheQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHvlrHi 3jtJKN2svGqyp7QltjqEMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqdffMRlI+/vGoOBVblYiYAmdvkA3N4JOzUDeWlkOHl1kb7D9NQ4iL Xkb5JB+za0fj3Y+J1Cpc53keDbCh6kHHzWIafrZJHiGfiPFQpmGphv1Rs3D93kEB JxGbVzhVOMD+btwdYL+EO41SjLE9r8JoSULQC4WrdLPcpG+rca43zzCUv69oHnmz 4SlMGCH8vI/AgzpvwdF4aWI3q+UUq2oCnF7y0UcBn1HtfQEw4ao8rhGt8MUr8sRg udwcOFf2HGcBSuEEcA/kIUXkOm7OIAX9FG0fopi1XNj5taZpT2C4keVRqlNhlrxh RRm6UCImg+jooJLx1rTYWSGIKO9827ll -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:22 2025 by rpki-client