$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: YIGmKjTrkZ515IIGYC4FE9XjDVSeSppa5SzTdg+iatI= Subject key identifier: 75:16:45:91:78:97:BB:55:6F:7D:40:9E:B7:A0:65:71:D0:51:2A:86 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1CCF Signing time: Fri 22 Aug 2025 16:14:32 +0000 Manifest this update: Fri 22 Aug 2025 16:14:32 +0000 Manifest next update: Fri 29 Aug 2025 16:14:32 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: hLd7hGhtBqP6l/5TyS97pNHUeUpN8R9Ld8pSFzyGxeI=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7407 (0x1cef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Aug 22 16:14:32 2025 GMT Not After : Aug 29 16:14:32 2025 GMT Subject: CN=68a89768-b4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:71:47:80:f3:89:76:bc:2a:65:b0:60:52: 97:7d:82:b6:0f:0e:3c:5c:af:8c:45:aa:99:6c:6f: 74:b7:a6:e5:ca:36:b2:3a:c1:85:a0:93:b4:ef:b7: 9c:6a:d9:a8:d2:61:7f:41:fb:e0:ee:f4:0b:c5:21: 7e:b3:aa:1d:d4:e0:80:5e:44:d4:b4:7f:eb:29:58: 0a:01:2c:ca:fb:19:19:cd:27:64:82:5c:a4:d7:3a: ca:ae:0d:6e:ed:0d:84:4a:cb:dd:41:b4:6b:87:a5: a8:61:92:5e:35:9c:d0:84:24:21:46:12:90:d5:0e: b7:67:ac:ce:0e:c5:e7:a3:d8:3b:d5:a0:e4:da:58: 45:95:0f:4b:23:d6:fc:d8:90:26:e0:82:87:b3:20: 32:df:7e:4a:44:e7:a0:f8:ce:59:f6:e1:e2:23:6b: 7f:da:ae:e4:66:45:24:20:a0:2d:79:1e:62:03:7a: 62:ba:22:ed:be:50:af:5d:cc:02:bb:1d:8b:a8:77: 49:97:46:33:39:78:ae:be:71:a8:e2:7d:2b:20:f4: e2:7d:eb:fb:7d:89:1c:93:71:0d:26:2a:56:7e:de: 57:a5:19:e0:8f:2f:31:c0:27:46:bd:a7:b5:30:71: 7c:61:4b:51:a1:c0:fe:90:56:59:f5:26:9f:5f:eb: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:16:45:91:78:97:BB:55:6F:7D:40:9E:B7:A0:65:71:D0:51:2A:86 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:96:e4:02:e3:cb:c1:98:16:51:e5:6c:72:fe:73:1b:4d:7d: 73:cf:3a:3b:1b:4c:b3:15:07:e0:34:40:d6:80:14:eb:bb:aa: 1e:1a:8d:de:59:55:75:fd:55:28:5e:5a:a0:38:49:87:9d:09: 47:3d:e2:c4:77:2b:97:dd:8c:a2:ce:1f:18:cb:38:5b:87:13: 69:e2:1e:18:73:57:da:26:24:e0:aa:de:69:90:54:eb:21:70: 88:38:79:71:ef:cc:24:62:f1:bf:c8:23:22:67:a9:9f:f5:e6: a2:7f:b0:08:e5:e6:88:7d:35:98:6c:3d:0c:85:60:c4:0f:41: 93:73:e3:03:88:79:57:6a:55:fc:31:6d:eb:72:f9:c9:4a:4d: a6:47:68:09:d6:08:e9:bd:26:57:99:a6:b4:a7:08:9f:83:59: 41:f0:1f:b1:b2:b3:d5:1d:0a:e5:03:df:ff:34:17:95:c1:96: 4c:75:81:7d:fb:0d:13:6f:d1:04:bf:b9:60:89:cd:01:ec:12: 29:af:41:4f:11:dc:d6:78:9b:65:86:a9:57:36:91:cd:c5:b9: b3:db:86:76:3f:7c:08:2a:d8:97:e8:e4:5e:c6:66:de:b4:ff: 66:fb:6d:2e:44:41:1f:57:c4:df:de:3d:78:09:87:a6:24:c2: 77:a1:59:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwODIyMTYxNDMyWhcNMjUwODI5MTYxNDMyWjAYMRYwFAYD VQQDEw02OGE4OTc2OC1iNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMlxR4DziXa8KmWwYFKXfYK2Dw48XK+MRaqZbG90t6blyjayOsGFoJO077ec atmo0mF/Qfvg7vQLxSF+s6od1OCAXkTUtH/rKVgKASzK+xkZzSdkglyk1zrKrg1u 7Q2ESsvdQbRrh6WoYZJeNZzQhCQhRhKQ1Q63Z6zODsXno9g71aDk2lhFlQ9LI9b8 2JAm4IKHsyAy335KROeg+M5Z9uHiI2t/2q7kZkUkIKAteR5iA3piuiLtvlCvXcwC ux2LqHdJl0YzOXiuvnGo4n0rIPTifev7fYkck3ENJipWft5XpRngjy8xwCdGvae1 MHF8YUtRocD+kFZZ9SafX+t7rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUWRZF4 l7tVb31AnregZXHQUSqGMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmluQC48vBmBZR5Wxy/nMbTX1zzzo7G0yzFQfgNEDWgBTru6oeGo3e WVV1/VUoXlqgOEmHnQlHPeLEdyuX3Yyizh8YyzhbhxNp4h4Yc1faJiTgqt5pkFTr IXCIOHlx78wkYvG/yCMiZ6mf9eaif7AI5eaIfTWYbD0MhWDED0GTc+MDiHlXalX8 MW3rcvnJSk2mR2gJ1gjpvSZXmaa0pwifg1lB8B+xsrPVHQrlA9//NBeVwZZMdYF9 +w0Tb9EEv7lgic0B7BIpr0FPEdzWeJtlhqlXNpHNxbmz24Z2P3wIKtiX6ORexmbe tP9m+20uREEfV8Tf3j14CYemJMJ3oVk1 -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:01 2025 by rpki-client