$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: CmpHD5/kQu1SjjXoNgjoBgOvkpmtG/CcpJy5hvhZb1g= Subject key identifier: 6A:EF:A0:11:BE:ED:C1:85:84:51:EE:74:99:CF:D7:BC:F9:39:73:B7 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34C0 Signing time: Fri 22 Aug 2025 14:22:27 +0000 Manifest this update: Fri 22 Aug 2025 14:22:27 +0000 Manifest next update: Fri 29 Aug 2025 14:22:27 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: wZHKG1zmQIug39/uQDObAIF0qJgYWY/RIUfxkbQfbW4=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13512 (0x34c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Aug 22 14:22:27 2025 GMT Not After : Aug 29 14:22:27 2025 GMT Subject: CN=68a87d23-e710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:1b:97:d6:4f:3e:1c:0c:b6:ef:3d:d5:3a: 5a:f7:bd:72:94:5a:3d:f4:ed:f4:cf:88:21:cf:a7: 8b:51:17:74:19:6d:23:7c:15:7c:03:f1:6d:5c:3b: 6c:bf:24:80:7f:9d:ff:df:78:65:27:98:b8:bc:a9: 22:e0:f5:80:30:f8:b4:7d:0d:cd:a4:d1:ae:28:fd: 46:c0:a3:fb:21:51:98:2d:ae:29:fa:21:9f:b9:23: fb:c7:68:c7:05:eb:74:38:d3:6f:59:95:6b:8d:3f: 1d:e3:49:84:b0:5b:36:5d:df:50:3f:df:99:2d:ab: 81:81:d7:99:5a:c9:f1:c2:c1:f4:3c:9e:17:04:1b: 4c:80:b4:9d:51:11:ba:68:ae:3e:2d:e1:cf:6b:e6: c3:43:73:9e:c4:a2:63:08:09:52:27:38:81:a3:09: fc:3d:de:86:13:80:06:b8:d2:27:b2:9b:f2:58:6a: 20:7c:31:f4:1a:28:47:b4:79:e0:e6:d7:51:fa:24: 5b:f8:25:dc:ba:28:7b:7e:d3:3a:4f:84:3c:80:a3: 20:6f:ca:02:80:dc:e9:bb:0f:a1:25:d0:d1:22:9b: c8:02:63:04:52:f8:9c:e5:f3:ed:b5:ec:fd:b1:f4: 5a:95:8e:64:95:52:8b:2e:41:91:61:ce:58:f6:19: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EF:A0:11:BE:ED:C1:85:84:51:EE:74:99:CF:D7:BC:F9:39:73:B7 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d8:0d:6e:83:9b:cf:41:ad:27:8d:06:75:fd:e3:7d:f0:1e: a4:3a:62:bb:3f:c2:1b:13:ba:a4:af:30:98:ea:07:50:6b:e1: e7:ca:3f:a0:f7:db:35:38:14:c7:98:94:cf:4e:3a:8c:5c:10: a8:8c:9b:f7:df:77:eb:b4:e7:07:95:3b:5c:38:1f:a8:17:56: df:22:fa:24:25:dd:27:35:d0:da:7b:ef:89:e0:f6:32:d6:4b: c2:85:b5:57:0e:e1:72:c0:f6:f6:25:c1:d7:23:17:02:88:c5: 7e:d2:fb:96:c0:65:ed:26:9a:aa:18:04:ab:75:9b:3e:4f:43: 82:f8:e5:b8:7a:a8:80:d3:8f:0d:80:28:a8:28:9c:d6:34:65: 09:10:d0:f8:26:bc:1b:74:4b:02:89:2d:68:bc:c5:22:48:66: 6b:ae:b7:e3:94:3f:d8:48:a0:87:4b:87:01:7b:02:b9:8d:54: 67:49:2e:81:7f:93:d2:72:65:7e:3f:db:38:0c:e7:87:99:82: 29:b7:52:0a:a0:e3:69:1f:c2:eb:20:08:31:6e:0c:b1:4d:00: 62:d8:62:0a:72:04:bf:41:af:c9:ee:ff:0b:c0:71:12:2b:3a: 28:c7:18:c4:d4:7e:05:7f:da:50:51:b2:b5:03:39:21:6f:49: a1:cb:26:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwODIyMTQyMjI3WhcNMjUwODI5MTQyMjI3WjAYMRYwFAYD VQQDEw02OGE4N2QyMy1lNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufkbl9ZPPhwMtu891Tpa971ylFo99O30z4ghz6eLURd0GW0jfBV8A/FtXDts vySAf53/33hlJ5i4vKki4PWAMPi0fQ3NpNGuKP1GwKP7IVGYLa4p+iGfuSP7x2jH Bet0ONNvWZVrjT8d40mEsFs2Xd9QP9+ZLauBgdeZWsnxwsH0PJ4XBBtMgLSdURG6 aK4+LeHPa+bDQ3OexKJjCAlSJziBown8Pd6GE4AGuNInspvyWGogfDH0GihHtHng 5tdR+iRb+CXcuih7ftM6T4Q8gKMgb8oCgNzpuw+hJdDRIpvIAmMEUvic5fPttez9 sfRalY5klVKLLkGRYc5Y9hmnHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrvoBG+ 7cGFhFHudJnP17z5OXO3MB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt2A1ug5vPQa0njQZ1/eN98B6kOmK7P8IbE7qkrzCY6gdQa+Hnyj+g 99s1OBTHmJTPTjqMXBCojJv333frtOcHlTtcOB+oF1bfIvokJd0nNdDae++J4PYy 1kvChbVXDuFywPb2JcHXIxcCiMV+0vuWwGXtJpqqGASrdZs+T0OC+OW4eqiA048N gCioKJzWNGUJEND4JrwbdEsCiS1ovMUiSGZrrrfjlD/YSKCHS4cBewK5jVRnSS6B f5PScmV+P9s4DOeHmYIpt1IKoONpH8LrIAgxbgyxTQBi2GIKcgS/Qa/J7v8LwHES KzooxxjE1H4Ff9pQUbK1Azkhb0mhyybY -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:51 2025 by rpki-client