$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json) Hash identifier: Qv2yJs8dkQ0oW0j8mF5KKmMKlFymR+Jb+XITF4gXWAA= Subject key identifier: 82:A4:F9:85:00:64:53:62:F7:C5:3A:2A:C7:88:E4:5D:92:8C:FE:EF Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft Manifest number: E0 Signing time: Sat 23 Aug 2025 05:40:35 +0000 Manifest this update: Sat 23 Aug 2025 05:40:34 +0000 Manifest next update: Sat 30 Aug 2025 05:40:34 +0000 Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: Sgh9zvN2fFiU5KFMhJDF9G8GlFnESoJ1Vza5DEP4rVU=) 2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Validity Not Before: Aug 23 05:40:34 2025 GMT Not After : Aug 30 05:40:34 2025 GMT Subject: CN=68a95453-0c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:23:b2:69:33:0f:ff:2d:36:d5:79:18:61: c8:0b:61:2d:0e:9c:7d:da:17:42:7d:86:e3:45:84: 1d:4c:95:43:a7:a9:6a:5d:44:f8:94:45:11:36:f4: 38:4b:8a:00:22:e3:82:4e:de:d6:9d:f4:58:d0:0c: 90:61:bd:28:3b:a3:a3:d7:ca:bc:de:50:40:e1:36: dd:f5:ae:7b:a6:d6:6e:b9:87:d1:f8:17:b2:3e:d0: 66:56:20:ae:db:15:f6:11:e6:8a:d0:df:83:7f:a6: 8a:c7:7a:02:cc:4a:1b:52:ae:71:ed:fd:bc:05:97: 3d:11:70:0e:f3:fb:c0:b5:11:70:fc:ae:83:a5:20: 1b:0b:18:c1:c1:92:b0:64:3f:71:6b:2a:19:01:39: 50:a4:93:5a:b6:e9:d0:1e:5f:43:3d:6a:cc:96:f9: 07:09:a6:cc:57:6a:c6:55:e8:16:12:c4:7a:88:59: fd:05:a6:88:b4:89:73:ba:ac:e1:5b:9f:6c:8f:ee: 07:d2:a0:ad:64:e2:a6:c6:2b:b6:95:ba:49:93:df: 28:04:1b:d8:2e:06:c1:70:75:d9:0a:52:7a:7a:83: 31:7b:30:d9:b2:e0:28:75:4f:e8:b8:59:d8:8c:99: cf:a9:4b:66:77:83:9c:5b:67:a0:21:d9:fe:4e:74: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A4:F9:85:00:64:53:62:F7:C5:3A:2A:C7:88:E4:5D:92:8C:FE:EF X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4a:a6:b0:cb:57:2e:bb:71:be:56:16:ca:08:54:4d:0d:bc: 6d:b1:bf:a6:60:13:82:cb:7f:d6:ad:a8:01:f0:66:fe:1e:45: ce:13:74:3c:42:a3:27:a0:fb:d4:46:56:f1:42:d3:1f:b9:38: 50:e2:36:cd:8e:54:ac:ee:d8:29:a8:9c:11:79:7f:bb:41:50: 10:c4:59:c5:49:27:93:8f:ba:65:45:ac:af:3e:2d:e2:b7:5a: c5:8e:4b:b0:87:f2:23:b5:98:f4:d3:08:df:dd:b1:74:39:5d: 17:b9:8a:b0:14:56:e9:69:fc:5a:6e:71:ee:2f:07:e4:9b:e0: c5:04:28:df:26:ff:90:97:b9:04:42:6e:42:97:23:76:78:b2: 79:c2:4f:32:63:a3:bd:96:a8:dc:eb:62:6f:0a:0a:5e:a8:2b: 72:63:70:89:64:81:b0:da:8c:21:b6:90:eb:fc:70:99:9d:e3: 45:1b:81:07:b7:1d:b2:dc:9c:f8:f5:4c:de:4c:11:a2:90:21: 47:d4:7d:74:fe:88:60:55:d3:51:e9:ef:cf:38:d4:87:81:c6: 6c:f9:9b:e0:f6:68:74:e3:5f:b0:19:03:23:64:30:08:dd:2a: 6b:44:38:e5:6b:0c:06:7e:e0:61:3e:96:53:41:e2:77:40:d8: b2:7c:af:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx MzgyRTRFNTgwHhcNMjUwODIzMDU0MDM0WhcNMjUwODMwMDU0MDM0WjAYMRYwFAYD VQQDEw02OGE5NTQ1My0wYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nkjsmkzD/8tNtV5GGHIC2EtDpx92hdCfYbjRYQdTJVDp6lqXUT4lEURNvQ4 S4oAIuOCTt7WnfRY0AyQYb0oO6Oj18q83lBA4Tbd9a57ptZuuYfR+BeyPtBmViCu 2xX2EeaK0N+Df6aKx3oCzEobUq5x7f28BZc9EXAO8/vAtRFw/K6DpSAbCxjBwZKw ZD9xayoZATlQpJNatunQHl9DPWrMlvkHCabMV2rGVegWEsR6iFn9BaaItIlzuqzh W59sj+4H0qCtZOKmxiu2lbpJk98oBBvYLgbBcHXZClJ6eoMxezDZsuAodU/ouFnY jJnPqUtmd4OcW2egIdn+TnQcJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKk+YUA ZFNi98U6KseI5F2SjP7vMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBR MzZxT3pzVjV6RklUZ3VUbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdSqawy1cuu3G+VhbKCFRNDbxtsb+mYBOCy3/WragB8Gb+HkXOE3Q8 QqMnoPvURlbxQtMfuThQ4jbNjlSs7tgpqJwReX+7QVAQxFnFSSeTj7plRayvPi3i t1rFjkuwh/IjtZj00wjf3bF0OV0XuYqwFFbpafxabnHuLwfkm+DFBCjfJv+Ql7kE Qm5ClyN2eLJ5wk8yY6O9lqjc62JvCgpeqCtyY3CJZIGw2owhtpDr/HCZneNFG4EH tx2y3Jz49UzeTBGikCFH1H10/ohgVdNR6e/PONSHgcZs+Zvg9mh041+wGQMjZDAI 3SprRDjlawwGfuBhPpZTQeJ3QNiyfK9E -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:16 2025 by rpki-client