$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json) Hash identifier: QJF9wXwkx2YHtDtoI1eijfpZtxuYnJhHJygw4kZ9SBI= Subject key identifier: D1:24:F3:0B:22:00:39:72:79:B3:03:5D:0C:1C:BD:8D:1E:0E:E3:37 Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft Manifest number: 02AA Signing time: Sat 23 Aug 2025 01:46:13 +0000 Manifest this update: Sat 23 Aug 2025 01:46:13 +0000 Manifest next update: Sat 30 Aug 2025 01:46:13 +0000 Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: Vv1donlF7Xs/CdRN8XNysnqCeKDnYFoQxjytIGayQzk=) 2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: hJkxXQfC6FPhKQvUl8F7nqWwJZPrWQsil7QshGWSWw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Validity Not Before: Aug 23 01:46:13 2025 GMT Not After : Aug 30 01:46:13 2025 GMT Subject: CN=68a91d65-66b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:c1:b0:70:6b:f8:9d:24:39:91:0c:b4:a9: e1:fa:ca:5b:7d:ef:36:3d:1f:50:5c:46:f4:6e:99: 18:7f:57:52:74:9e:93:d2:a9:63:7d:2a:45:6f:30: 2b:39:d6:2c:69:aa:90:86:79:28:c0:1b:95:b6:f6: 74:fd:46:f9:92:d3:c0:86:cb:53:12:74:32:74:d2: f6:29:cc:9b:5a:39:8a:ca:19:f3:fc:ba:a6:c6:85: 96:0c:f5:01:30:85:68:c0:00:51:9d:4c:e6:10:ce: f8:a6:d2:7b:5b:ff:ab:f1:d6:ba:50:34:d6:51:d3: 69:81:f8:8e:b5:f8:23:b1:1a:5e:2e:57:ba:19:92: 0f:17:6b:88:d0:d0:36:62:07:81:f5:2b:7a:ee:e9: 2a:80:85:3b:15:e7:a0:f6:ab:6b:51:43:01:1a:f1: 81:d8:1b:12:a9:b3:86:7e:37:b4:f8:05:2f:47:67: 83:e5:52:3a:dd:63:8d:7c:18:f7:50:52:46:e6:f7: a3:23:cc:a5:59:13:94:a4:dc:d2:6a:97:27:17:d6: ea:a5:14:84:b8:dc:bf:47:95:8f:47:57:74:04:7a: 34:b4:82:20:f1:ed:98:ff:4c:a8:92:c5:8c:48:f6: ea:7d:2d:b2:9d:80:4d:13:bf:3d:ba:9b:04:c1:29: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:F3:0B:22:00:39:72:79:B3:03:5D:0C:1C:BD:8D:1E:0E:E3:37 X509v3 Authority Key Identifier: keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5d:3e:eb:1d:c6:20:6f:5d:bb:5f:95:fa:c2:7c:96:11:3a: dd:ae:fb:99:49:e8:9e:9d:79:4e:d8:11:3b:fc:f3:d0:b8:55: b2:2c:32:e9:37:fa:73:a3:e8:92:60:7c:f1:fb:f8:ce:dc:6b: a6:a7:b3:41:53:42:be:1b:00:11:c7:0f:a9:e7:45:21:b7:8a: 16:89:2f:ac:99:de:5b:c9:47:5e:3f:60:04:7e:2b:2b:76:a3: 86:f9:bf:75:55:60:d6:08:00:d9:6f:05:1a:b3:57:2c:47:5a: 2e:46:68:1f:5e:2f:7e:18:b4:b8:1e:cb:54:6f:31:8f:95:cf: 33:f3:0d:62:c7:68:8e:09:07:df:c1:fa:66:0b:db:60:df:9e: b7:45:24:79:60:69:fb:46:4f:55:5c:fa:20:da:54:00:09:9a: f0:98:32:a1:02:f5:90:e2:26:f1:60:ae:57:e6:8e:25:42:01: 3f:bb:5e:9a:c1:b4:b0:96:5f:7b:d6:ec:b3:a8:8c:d6:0d:34: 47:e4:9a:f1:7d:7b:94:2c:7d:c7:04:08:b8:13:5f:0a:c0:9a: bf:70:77:be:82:11:d6:cf:84:b3:b8:7e:04:a3:e6:eb:89:5b: a2:f2:75:60:b0:59:0b:e2:cb:06:4a:cc:0f:34:c7:97:ac:57: 9b:7d:4c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcwQjcxMTAvBgNVBAUTKDI3Nzc3OUFDNjkzNkEyRDMyMTRBNUYxNzQwMjEzRkRC OTI1NkM2QTMwHhcNMjUwODIzMDE0NjEzWhcNMjUwODMwMDE0NjEzWjAYMRYwFAYD VQQDEw02OGE5MWQ2NS02NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfzBsHBr+J0kOZEMtKnh+spbfe82PR9QXEb0bpkYf1dSdJ6T0qljfSpFbzAr OdYsaaqQhnkowBuVtvZ0/Ub5ktPAhstTEnQydNL2KcybWjmKyhnz/LqmxoWWDPUB MIVowABRnUzmEM74ptJ7W/+r8da6UDTWUdNpgfiOtfgjsRpeLle6GZIPF2uI0NA2 YgeB9St67ukqgIU7Feeg9qtrUUMBGvGB2BsSqbOGfje0+AUvR2eD5VI63WONfBj3 UFJG5vejI8ylWROUpNzSapcnF9bqpRSEuNy/R5WPR1d0BHo0tIIg8e2Y/0yoksWM SPbqfS2ynYBNE789upsEwSlaZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEk8wsi ADlyebMDXQwcvY0eDuM3MB8GA1UdIwQYMBaAFCd3eaxpNqLTIUpfF0AhP9uSVsaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzBCNy9BNTI2NEVFMDBC REQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90TWhTbDhYUUNFXzI1Sld4 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozZDVyR2syb3RNaFNsOFhRQ0VfMjVKV3hxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzBCNy9BNTI2NEVFMDBCREQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90 TWhTbDhYUUNFXzI1Sld4cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPXT7rHcYgb127X5X6wnyWETrdrvuZSeienXlO2BE7/PPQuFWyLDLp N/pzo+iSYHzx+/jO3Gump7NBU0K+GwARxw+p50Uht4oWiS+smd5byUdeP2AEfisr dqOG+b91VWDWCADZbwUas1csR1ouRmgfXi9+GLS4HstUbzGPlc8z8w1ix2iOCQff wfpmC9tg3563RSR5YGn7Rk9VXPog2lQACZrwmDKhAvWQ4ibxYK5X5o4lQgE/u16a wbSwll971uyzqIzWDTRH5JrxfXuULH3HBAi4E18KwJq/cHe+ghHWz4SzuH4Eo+br iVui8nVgsFkL4ssGSswPNMeXrFebfUxd -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:22 2025 by rpki-client