$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: hbUrjdVrnYyd0OoXHfjABDPRfulplcizEbfz8tFSh0g= Subject key identifier: EF:70:ED:DC:B1:F5:06:E9:C5:70:75:09:40:2F:97:38:91:19:DE:29 Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C8A Signing time: Fri 22 Aug 2025 18:23:01 +0000 Manifest this update: Fri 22 Aug 2025 18:23:01 +0000 Manifest next update: Fri 29 Aug 2025 18:23:01 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: X2wlClW721n/ugAD4oA1rlomVoFeVfa08/wwWxBGUMs=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Aug 22 18:23:01 2025 GMT Not After : Aug 29 18:23:01 2025 GMT Subject: CN=68a8b585-2d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:c8:bd:1a:58:77:6e:39:40:22:dd:17:57: 22:ae:43:a9:15:35:c4:e0:bb:8f:7e:25:e6:e9:67: 54:ae:97:5c:49:58:c1:b3:d0:33:6b:33:78:b6:cc: ee:c3:43:9c:ef:2d:29:33:90:3b:8e:bc:5d:71:8e: 3f:38:5d:45:d4:21:1b:29:0d:b2:fb:f9:38:dd:0a: fc:38:9a:12:9e:c8:02:ad:24:f8:4d:a9:2e:f5:6b: a5:7c:54:fc:14:c0:49:3e:e8:32:40:5b:50:4d:e1: 32:f9:75:ce:6f:29:c7:05:76:72:32:4f:82:df:61: a4:28:f8:36:8b:49:9c:47:f0:0f:db:9f:e3:74:e9: 08:01:26:c6:c4:55:fc:14:da:78:34:59:01:c2:96: 2e:d2:01:d4:85:14:2c:5f:9a:fb:56:71:01:fc:37: c1:cb:a2:ba:31:c4:c8:59:5e:e7:47:fb:8e:da:3a: ec:93:63:44:11:2f:6d:24:4c:9c:98:ea:c1:7b:c9: b1:49:28:ae:ab:8e:f8:99:69:f5:39:78:b6:59:2d: 05:22:b0:9a:3a:1d:a2:fd:b5:00:fe:d7:4d:97:85: ee:33:dc:80:72:e6:45:22:41:17:88:20:a6:9f:44: 66:98:17:63:dc:56:3d:b7:c0:10:0e:18:80:36:a1: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:70:ED:DC:B1:F5:06:E9:C5:70:75:09:40:2F:97:38:91:19:DE:29 X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:75:35:39:07:29:b6:7d:53:04:06:64:d9:f9:f5:60:67:94: 53:31:84:d3:42:f7:e0:42:1e:bd:de:38:29:1e:8b:f7:60:8b: 1d:b4:cf:cc:6d:31:2b:13:d2:52:e8:84:6d:3a:17:d8:4e:0a: 42:3e:33:3f:3b:42:26:ad:8a:60:6c:1e:d1:d2:79:b1:72:d7: 1c:17:7e:92:17:3d:eb:c3:65:f7:54:c4:54:55:e9:c1:19:1b: 56:b4:b3:02:64:f5:fa:1e:e2:4b:6b:9e:8d:e9:75:bb:6c:41: b2:bf:61:ab:da:e2:bf:84:15:90:5f:8b:ad:2f:d0:b5:a1:9e: 9e:30:ce:25:76:79:5b:8f:a7:20:9f:4e:4f:e1:65:68:a4:64: c8:d5:13:cf:2d:5b:d3:1e:8b:b5:9d:90:69:9b:a7:4b:64:4d: f5:02:e1:ca:63:ca:42:e7:42:de:5d:15:bb:c2:8e:3f:6d:67: fd:8c:42:95:10:39:54:bc:93:f4:a2:3e:2d:78:a4:e7:d7:10: 53:d8:76:41:51:52:a8:f6:44:5c:53:20:3f:00:18:44:53:e4: 3b:ab:a1:cd:cb:a6:fc:51:9e:03:f8:b8:5a:7c:76:b8:d7:82: ae:c8:eb:dc:df:17:20:4a:8c:70:5e:e6:c5:59:c6:fd:a2:61: 1d:aa:04:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwODIyMTgyMzAxWhcNMjUwODI5MTgyMzAxWjAYMRYwFAYD VQQDEw02OGE4YjU4NS0yZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotTIvRpYd245QCLdF1cirkOpFTXE4LuPfiXm6WdUrpdcSVjBs9AzazN4tszu w0Oc7y0pM5A7jrxdcY4/OF1F1CEbKQ2y+/k43Qr8OJoSnsgCrST4Taku9WulfFT8 FMBJPugyQFtQTeEy+XXObynHBXZyMk+C32GkKPg2i0mcR/AP25/jdOkIASbGxFX8 FNp4NFkBwpYu0gHUhRQsX5r7VnEB/DfBy6K6McTIWV7nR/uO2jrsk2NEES9tJEyc mOrBe8mxSSiuq474mWn1OXi2WS0FIrCaOh2i/bUA/tdNl4XuM9yAcuZFIkEXiCCm n0RmmBdj3FY9t8AQDhiANqFZUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9w7dyx 9QbpxXB1CUAvlziRGd4pMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/dTU5Bym2fVMEBmTZ+fVgZ5RTMYTTQvfgQh693jgpHov3YIsdtM/M bTErE9JS6IRtOhfYTgpCPjM/O0ImrYpgbB7R0nmxctccF36SFz3rw2X3VMRUVenB GRtWtLMCZPX6HuJLa56N6XW7bEGyv2Gr2uK/hBWQX4utL9C1oZ6eMM4ldnlbj6cg n05P4WVopGTI1RPPLVvTHou1nZBpm6dLZE31AuHKY8pC50LeXRW7wo4/bWf9jEKV EDlUvJP0oj4teKTn1xBT2HZBUVKo9kRcUyA/ABhEU+Q7q6HNy6b8UZ4D+LhafHa4 14KuyOvc3xcgSoxwXubFWcb9omEdqgS7 -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:18 2025 by rpki-client