$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: 3waHIyNg4W3MAOG9M8Hov+wPRYCBeqsJBr/t5UADV8s= Subject key identifier: EE:82:C6:4B:89:A8:3C:43:F2:C6:46:E8:33:CB:78:E6:E7:6C:BF:C1 Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 01B9 Signing time: Sat 23 Aug 2025 03:14:54 +0000 Manifest this update: Sat 23 Aug 2025 03:14:54 +0000 Manifest next update: Sat 30 Aug 2025 03:14:54 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: v2jH2SrYuNeoFcIxU8WG5nQHZMhXPPu1Zme1ZZGz/r8=) 2: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=) 3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Aug 23 03:14:54 2025 GMT Not After : Aug 30 03:14:54 2025 GMT Subject: CN=68a9322e-a0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:85:22:83:8d:e6:c7:6c:33:2b:ba:ad:32: bd:7e:68:0d:d4:e0:b1:83:f5:8a:ff:27:90:7b:d6: 51:93:ac:c0:1c:49:79:93:9e:c4:71:28:83:a4:0e: 39:3c:d3:7f:f3:7f:e1:6c:0d:8f:3c:cc:86:e4:08: ba:e7:54:58:48:7e:df:ec:0a:ed:8b:7e:65:72:2b: d5:55:4e:1e:0e:07:a3:81:5e:2d:6f:a6:8d:75:66: 1e:6e:eb:3c:b8:17:78:08:9f:01:4b:3f:e8:d1:be: 3d:e5:43:59:05:48:37:e1:c4:a8:db:d0:ae:95:47: 20:6f:5c:10:a0:7b:e6:e0:77:45:fc:5d:23:c5:54: bc:02:85:30:ae:bd:ab:3b:ee:fc:35:34:26:4c:41: 8d:8e:81:85:49:82:de:11:8a:de:2a:3f:8b:31:18: 84:b1:92:b8:51:b8:01:3a:b6:3f:2e:c4:4c:22:f8: 76:ae:cb:a5:3f:d8:20:5c:60:46:22:78:1c:5d:90: 69:cf:62:aa:e5:7d:bf:1d:cc:02:9e:65:d8:8e:82: b2:0d:bb:c2:ad:7b:75:7d:ff:eb:df:b4:77:c9:87: d5:fb:2b:69:85:92:5a:5f:8f:14:87:7d:5c:4d:c4: 29:52:a3:e3:bd:07:69:d8:de:70:d8:ab:64:e4:fe: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:C6:4B:89:A8:3C:43:F2:C6:46:E8:33:CB:78:E6:E7:6C:BF:C1 X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:84:b6:9c:5a:4e:5b:55:1c:36:0f:8a:0c:ea:97:f9:64:35: 82:aa:59:6a:d4:af:51:c4:f6:d0:69:b1:c7:37:f2:37:46:db: 93:d0:9b:12:8a:0b:be:2f:3a:49:d0:3b:b4:f0:b3:0d:63:97: 7f:ee:4b:5c:ee:02:cc:5a:99:24:31:c0:92:68:fb:2f:4a:21: 71:8b:d4:d1:ff:8a:5d:49:54:d9:99:3d:d7:99:73:0e:ee:71: d0:99:db:bf:02:7c:e0:5f:80:f6:2c:8d:2a:0f:85:22:94:3e: 1a:dd:9f:d0:fe:40:2d:87:7a:5f:07:1a:d8:4b:78:2b:7e:8e: 03:2d:c1:bb:06:bf:09:c0:8a:a7:19:31:85:18:8c:bb:76:3a: eb:63:66:f8:6d:9e:30:fa:4d:13:0f:91:cb:15:59:49:73:b2: 20:23:09:bf:e4:61:6b:69:e4:67:ab:0d:5d:3b:f3:b2:0d:3a: b8:a9:00:17:a8:45:b1:ea:f4:a2:c5:0b:8c:01:bb:36:e7:8f: 9e:93:39:ff:24:be:f3:ab:e3:34:1b:68:01:fd:cc:27:0f:8a: e2:f7:d2:46:bf:db:2d:34:8e:cc:1a:08:e9:85:88:ee:b4:bb: bd:c8:31:af:64:08:a1:d6:0b:ea:25:b0:6b:18:76:14:27:43: ac:d9:47:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjUwODIzMDMxNDU0WhcNMjUwODMwMDMxNDU0WjAYMRYwFAYD VQQDEw02OGE5MzIyZS1hMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZyFIoON5sdsMyu6rTK9fmgN1OCxg/WK/yeQe9ZRk6zAHEl5k57EcSiDpA45 PNN/83/hbA2PPMyG5Ai651RYSH7f7Arti35lcivVVU4eDgejgV4tb6aNdWYebus8 uBd4CJ8BSz/o0b495UNZBUg34cSo29CulUcgb1wQoHvm4HdF/F0jxVS8AoUwrr2r O+78NTQmTEGNjoGFSYLeEYreKj+LMRiEsZK4UbgBOrY/LsRMIvh2rsulP9ggXGBG IngcXZBpz2Kq5X2/HcwCnmXYjoKyDbvCrXt1ff/r37R3yYfV+ytphZJaX48Uh31c TcQpUqPjvQdp2N5w2Ktk5P6TMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6CxkuJ qDxD8sZG6DPLeObnbL/BMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7hLacWk5bVRw2D4oM6pf5ZDWCqllq1K9RxPbQabHHN/I3RtuT0JsS igu+LzpJ0Du08LMNY5d/7ktc7gLMWpkkMcCSaPsvSiFxi9TR/4pdSVTZmT3XmXMO 7nHQmdu/AnzgX4D2LI0qD4UilD4a3Z/Q/kAth3pfBxrYS3grfo4DLcG7Br8JwIqn GTGFGIy7djrrY2b4bZ4w+k0TD5HLFVlJc7IgIwm/5GFraeRnqw1dO/OyDTq4qQAX qEWx6vSixQuMAbs254+ekzn/JL7zq+M0G2gB/cwnD4ri99JGv9stNI7MGgjphYju tLu9yDGvZAih1gvqJbBrGHYUJ0Os2Uc1 -----END CERTIFICATE-----Generated at Sun Aug 24 04:59:43 2025 by rpki-client