$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: taDI/YrsgN4UhruI9nw+kOZiElDxQ1dbbrVgX4y8alU= Subject key identifier: 9A:7A:C6:4F:A7:18:EA:E1:BE:64:E9:E9:B5:69:95:40:0C:EB:EE:43 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 72 Signing time: Sat 23 Aug 2025 07:05:51 +0000 Manifest this update: Sat 23 Aug 2025 07:05:51 +0000 Manifest next update: Sat 30 Aug 2025 07:05:51 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: suhx4Nj1L8f+AyT0QzGrOBTTXfAvEmgnh4SpFHaXYTo=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Aug 23 07:05:51 2025 GMT Not After : Aug 30 07:05:51 2025 GMT Subject: CN=68a9684f-e179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1a:5b:0f:69:12:d7:29:84:8c:aa:03:e2:09: 7d:a5:bf:6d:18:74:9d:cc:8c:35:23:76:43:d8:ba: 37:7d:a8:be:da:3a:dc:df:f1:fa:a4:e0:0b:81:87: 0e:a4:53:c5:7b:23:3c:2e:76:40:ce:02:a2:e2:92: 88:92:2c:f8:ed:04:20:d2:d9:49:05:c0:96:c9:1b: e5:79:e7:52:a4:95:cf:25:98:23:ac:0a:5c:e9:7d: c4:42:16:0d:0c:b1:5d:49:cb:b0:20:fc:a4:e2:45: be:0b:29:8b:97:96:ce:b3:fb:41:30:a9:e5:7c:d8: 56:46:a2:17:73:cc:05:1d:6a:f0:27:56:68:7b:6c: 67:42:c4:b4:eb:7a:d0:62:cd:6b:d1:c5:41:c8:ce: e5:d5:51:60:7d:10:c8:53:90:a2:60:53:7b:1d:99: 3c:34:e7:ec:3c:e8:ab:27:e2:73:79:28:81:59:8a: 71:67:ef:96:f7:50:d7:64:f2:c9:ff:53:95:f6:73: b3:5c:ac:ec:42:20:92:0e:5f:b2:e7:99:45:7d:81: 06:65:65:49:14:a2:9b:fb:c4:08:1e:b8:a3:fb:41: e8:75:f6:e7:63:3c:b8:55:cf:d0:da:5b:28:5a:0d: 75:d8:3b:ab:d4:15:cd:59:46:9b:4f:ec:8d:b3:9f: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7A:C6:4F:A7:18:EA:E1:BE:64:E9:E9:B5:69:95:40:0C:EB:EE:43 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:53:c1:ff:0b:ec:22:29:86:8d:fb:96:ee:e8:b5:44:45:ec: 2a:7c:84:cf:59:ac:7c:46:96:56:f3:40:3d:18:54:90:64:d5: 1c:62:da:ac:f1:26:53:38:84:0b:3f:d0:d5:2f:90:43:f9:c6: d2:ea:ea:10:c2:69:27:f3:07:5f:a0:10:1a:f6:6a:de:bc:7e: 05:83:68:1b:25:da:d7:00:b8:a5:8b:89:5d:5b:f5:b3:d7:7f: df:a4:22:a0:a4:ec:b8:c6:5f:73:65:3f:8d:bf:27:fe:f0:32: c1:fc:9b:b4:5a:43:d8:0e:93:89:03:ed:1f:16:d6:c2:ea:a8: b7:7f:05:82:95:9a:0a:6b:4a:68:41:28:e5:47:90:36:76:89: 97:73:04:c1:e5:9a:6b:16:92:bd:59:67:0a:74:72:81:dd:f2: 2c:c5:76:8a:de:6f:17:d9:6f:44:41:67:b3:d6:7f:d7:60:5e: a3:94:01:5f:92:2e:83:e8:81:e1:27:bc:99:d0:b3:0c:df:a6: 6e:1c:7e:0c:ad:67:af:6a:8b:7b:b9:93:77:e9:f6:9d:46:30: a4:f6:08:a9:37:25:69:35:0e:2a:ba:e5:a9:6a:bd:e0:6c:44: e1:6a:56:66:49:94:51:00:8b:ea:22:50:45:5c:5f:2e:8f:de: 4f:c1:da:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYzNjM0NEY3MTU2 MDBEOUE1ODAeFw0yNTA4MjMwNzA1NTFaFw0yNTA4MzAwNzA1NTFaMBgxFjAUBgNV BAMTDTY4YTk2ODRmLWUxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwGlsPaRLXKYSMqgPiCX2lv20YdJ3MjDUjdkPYujd9qL7aOtzf8fqk4AuBhw6k U8V7IzwudkDOAqLikoiSLPjtBCDS2UkFwJbJG+V551Kklc8lmCOsClzpfcRCFg0M sV1Jy7Ag/KTiRb4LKYuXls6z+0EwqeV82FZGohdzzAUdavAnVmh7bGdCxLTretBi zWvRxUHIzuXVUWB9EMhTkKJgU3sdmTw05+w86Ksn4nN5KIFZinFn75b3UNdk8sn/ U5X2c7NcrOxCIJIOX7LnmUV9gQZlZUkUopv7xAgeuKP7Qeh19udjPLhVz9DaWyha DXXYO6vUFc1ZRptP7I2zn2xdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmnrGT6cY 6uG+ZOnptWmVQAzr7kMwHwYDVR0jBBgwFoAUJ23PPyNBrcfQvEbzY0T3FWANmlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNEI5L0NFODQwNTY4RDIz NTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1s Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjIzUFB5TkJyY2ZRdkVielkwVDNGV0FObWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NEI5L0NFODQwNTY4RDIzNTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNm UXZFYnpZMFQzRldBTm1sZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALJTwf8L7CIpho37lu7otURF7Cp8hM9ZrHxGllbzQD0YVJBk1Rxi2qzx JlM4hAs/0NUvkEP5xtLq6hDCaSfzB1+gEBr2at68fgWDaBsl2tcAuKWLiV1b9bPX f9+kIqCk7LjGX3NlP42/J/7wMsH8m7RaQ9gOk4kD7R8W1sLqqLd/BYKVmgprSmhB KOVHkDZ2iZdzBMHlmmsWkr1ZZwp0coHd8izFdorebxfZb0RBZ7PWf9dgXqOUAV+S LoPogeEnvJnQswzfpm4cfgytZ69qi3u5k3fp9p1GMKT2CKk3JWk1Diq65alqveBs ROFqVmZJlFEAi+oiUEVcXy6P3k/B2sc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:03:06 2025 by rpki-client