$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: w01ZfhZ4QasNt7j/DzV+1WNz+4JKOneScbbMJUCIQ+M= Subject key identifier: 53:32:4F:98:A5:00:0F:5B:95:B4:92:4E:DB:F1:F7:15:57:5A:C5:72 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: B1 Signing time: Sat 23 Aug 2025 06:18:40 +0000 Manifest this update: Sat 23 Aug 2025 06:18:40 +0000 Manifest next update: Sat 30 Aug 2025 06:18:40 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: W6NxTxFu1n25l4POx45c3hjvYkNLpOTxAK20q23KHv8=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: /HTBqf5H3Uz657hsatlKZqGr2vioW9ZJotjtVpnDq5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Aug 23 06:18:40 2025 GMT Not After : Aug 30 06:18:40 2025 GMT Subject: CN=68a95d40-4bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:4a:bb:77:e8:71:a4:5f:f9:24:e8:55:f6: 4e:e6:eb:09:1b:80:8a:a9:d7:a6:76:13:bf:dc:0b: 5e:ca:d9:c6:12:5c:c0:ab:be:e2:5a:94:4b:5c:a7: 5f:fd:19:e7:ad:77:1c:fe:6b:fa:5f:fc:a4:4d:a9: 15:71:c4:18:8d:00:de:eb:36:fb:7e:e2:9e:42:3c: 16:61:34:06:07:e6:bc:23:75:71:eb:76:c7:07:1e: fb:93:16:e6:eb:a3:49:c7:bb:f1:cc:69:06:f8:99: 7e:72:c2:11:32:98:de:22:84:c8:6a:10:e6:8b:e7: 3b:a3:41:6d:01:4d:d3:3e:de:91:9d:1f:ca:c2:62: fd:da:ef:2c:2f:5d:04:45:db:75:68:2c:21:3a:17: 29:85:b6:8b:fd:6a:00:ad:2d:90:6e:ef:a7:0a:51: 20:b3:b1:6b:57:bd:45:de:12:88:a5:c8:40:44:06: 4c:31:47:78:77:d6:ce:2c:a4:90:49:17:e1:2c:7a: de:b3:56:3b:52:36:9b:f4:8d:74:40:06:69:cd:60: f8:4b:5b:c1:d0:57:a8:3f:2e:d1:94:1f:c4:5a:a8: b3:27:e9:b9:79:84:02:cc:40:55:2d:56:34:30:a9: 20:a8:9d:38:4d:f0:20:cd:db:07:ea:f8:04:a3:c3: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:32:4F:98:A5:00:0F:5B:95:B4:92:4E:DB:F1:F7:15:57:5A:C5:72 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c2:4f:c8:34:c1:4f:6c:41:a2:e9:77:af:8c:e0:03:b3:47: dc:af:e1:53:8a:96:46:81:f3:33:9b:a0:73:63:98:87:ed:0a: 9f:00:56:e9:6a:5a:c6:35:c3:53:e8:b1:8e:06:05:0e:1a:44: fb:18:b2:81:57:63:cb:bf:dd:74:82:02:cc:c7:55:63:a0:d9: a5:91:aa:5b:b5:74:ce:14:ee:e1:02:15:bc:03:4f:75:df:0b: b6:6d:7f:5f:be:e8:cf:fd:83:aa:54:d4:d3:e8:16:c4:97:cf: 68:fa:73:55:e1:cd:04:01:c0:a7:26:3a:19:2d:d5:e1:f6:77: bf:d1:48:40:26:b5:97:ee:66:cb:2f:d6:0e:87:9d:02:c7:a1: 48:22:de:10:f6:45:c8:2e:b9:92:d8:b1:a5:26:90:de:23:9b: 5e:fa:e7:a5:1d:1a:66:0a:c2:c5:f4:ce:89:7e:00:9e:da:86: 8b:ae:62:49:df:8e:bc:02:87:8f:87:11:30:72:54:07:71:8f: b9:53:0a:5f:bb:5d:ac:12:66:d3:1a:2d:4f:e0:7a:b3:f8:29: 76:38:b3:8a:d7:9d:96:30:24:a7:af:09:a2:da:db:12:8f:28: 81:14:e1:5f:15:68:af:1e:d5:7e:82:33:b3:0b:0f:14:1e:0b: c0:5d:ea:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDhERDQxNDQ4NTkxN0NENEM4MDE2N0JEQTE5RDcyNDk2 NDZCMDY3MjUwHhcNMjUwODIzMDYxODQwWhcNMjUwODMwMDYxODQwWjAYMRYwFAYD VQQDEw02OGE5NWQ0MC00YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnhKu3focaRf+SToVfZO5usJG4CKqdemdhO/3AteytnGElzAq77iWpRLXKdf /RnnrXcc/mv6X/ykTakVccQYjQDe6zb7fuKeQjwWYTQGB+a8I3Vx63bHBx77kxbm 66NJx7vxzGkG+Jl+csIRMpjeIoTIahDmi+c7o0FtAU3TPt6RnR/KwmL92u8sL10E Rdt1aCwhOhcphbaL/WoArS2Qbu+nClEgs7FrV71F3hKIpchARAZMMUd4d9bOLKSQ SRfhLHres1Y7Ujab9I10QAZpzWD4S1vB0FeoPy7RlB/EWqizJ+m5eYQCzEBVLVY0 MKkgqJ04TfAgzdsH6vgEo8O8xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMyT5il AA9blbSSTtvx9xVXWsVyMB8GA1UdIwQYMBaAFI3UFEhZF81MgBZ72hnXJJZGsGcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EMjdDOTE1Qzc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpVeUFGbnZhR2Rja2xrYXda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EMjdDOTE1Qzc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpV eUFGbnZhR2Rja2xrYXdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMwk/INMFPbEGi6XevjOADs0fcr+FTipZGgfMzm6BzY5iH7QqfAFbp alrGNcNT6LGOBgUOGkT7GLKBV2PLv910ggLMx1VjoNmlkapbtXTOFO7hAhW8A091 3wu2bX9fvujP/YOqVNTT6BbEl89o+nNV4c0EAcCnJjoZLdXh9ne/0UhAJrWX7mbL L9YOh50Cx6FIIt4Q9kXILrmS2LGlJpDeI5te+uelHRpmCsLF9M6JfgCe2oaLrmJJ 3468AoePhxEwclQHcY+5Uwpfu12sEmbTGi1P4Hqz+Cl2OLOK152WMCSnrwmi2tsS jyiBFOFfFWivHtV+gjOzCw8UHgvAXeq3 -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:10 2025 by rpki-client