$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: w3hOc94ixWLSW1Cf/XruXORjABOSAOqpF/poajGdYwQ= Subject key identifier: 5A:EC:DE:08:F7:E5:8E:37:1D:E8:58:3D:3A:B4:5F:A4:78:31:AB:17 Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 0149 Signing time: Sat 23 Aug 2025 04:28:37 +0000 Manifest this update: Sat 23 Aug 2025 04:28:36 +0000 Manifest next update: Sat 30 Aug 2025 04:28:36 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: 8Egd+pejfJuTja7Zj/OpwUcE/REIbyUOvh1mGxQ7ksI=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: Aug 23 04:28:36 2025 GMT Not After : Aug 30 04:28:36 2025 GMT Subject: CN=68a94374-e7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:56:f3:03:ad:6a:c4:a7:1b:9b:54:7a:60: a3:13:4e:d7:d0:bc:fa:16:16:9c:12:bf:a7:bc:0b: 41:9e:3f:f5:fe:4b:37:e9:b7:ca:5d:98:5a:f3:3a: 60:d3:24:02:1b:8b:3a:23:77:7a:ed:d8:98:e9:30: 67:77:c3:29:56:75:d7:bb:a4:3b:a8:cf:ce:aa:c4: 0c:2c:43:6e:fc:5b:fd:4f:97:e2:ae:a1:6a:e8:07: 4a:33:55:a3:38:4b:1e:79:70:ce:9a:db:b3:d7:00: 54:5f:88:28:a3:8c:26:f5:70:6f:ff:e9:1a:31:85: 71:94:ff:a0:2d:9e:d4:9c:93:28:49:ec:77:e1:69: 77:3b:58:85:4e:9b:5e:8a:65:b5:98:66:8a:32:e4: 49:dd:54:f8:ab:73:fb:1e:d6:e9:d5:0f:df:90:65: 1f:6f:dc:a9:aa:02:5e:62:d1:eb:3e:53:af:c5:c2: 08:96:63:d8:72:98:df:97:9d:0f:2a:76:d5:32:b9: c7:90:44:a1:05:7a:d8:bd:3a:18:48:0e:4e:5e:c7: a6:f7:d7:34:ae:d8:5b:a7:32:5b:36:37:39:b7:80: 19:a3:b0:d3:c7:d8:40:c7:b7:90:d1:2e:7e:31:4c: df:52:cf:f4:8a:ca:9a:3a:3d:77:02:80:d4:ad:c4: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EC:DE:08:F7:E5:8E:37:1D:E8:58:3D:3A:B4:5F:A4:78:31:AB:17 X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e9:6e:26:c4:0d:8a:6c:b9:05:cb:24:13:ea:56:bf:77:61: e3:0c:fc:a2:0b:7a:d4:d1:96:1a:39:9c:d8:fa:80:6c:bc:d9: 75:2b:9a:b0:cb:ca:6c:a7:d2:df:99:5c:b3:af:1d:2c:a5:52: e7:86:90:54:af:4b:cd:c9:13:72:93:be:f0:94:8c:dc:1d:10: 14:67:8c:bd:e5:27:73:46:32:d9:b1:57:8e:d5:09:e6:ac:bb: df:d2:d7:42:7c:de:03:08:d1:3a:66:49:6d:70:e3:cd:40:81: fe:71:46:22:ae:91:e6:a7:4b:25:e5:c9:93:8f:48:f9:5b:ab: d6:65:72:c2:49:e7:b6:b5:b1:5e:c6:c9:0b:06:e0:83:9a:fe: e5:cc:eb:46:9e:24:45:b6:3d:c2:d6:39:17:c7:76:7b:e7:a4: 05:c7:20:55:04:5b:c7:63:cf:b6:46:ce:c0:14:fe:3c:72:a9: 57:a6:1c:79:e9:a3:93:bb:77:b3:6a:9a:0a:50:eb:cb:0b:07: 55:fe:f2:0e:ad:04:33:15:d9:e8:5a:73:b9:1f:e5:cf:69:6b: f0:e4:32:51:b1:32:25:3b:a4:40:af:3b:b1:32:c0:9d:f3:c2: b9:4c:9b:25:40:16:b8:0a:59:0a:7f:76:cb:ee:9b:ee:89:2b: b0:09:c5:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjUwODIzMDQyODM2WhcNMjUwODMwMDQyODM2WjAYMRYwFAYD VQQDEw02OGE5NDM3NC1lN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVhW8wOtasSnG5tUemCjE07X0Lz6FhacEr+nvAtBnj/1/ks36bfKXZha8zpg 0yQCG4s6I3d67diY6TBnd8MpVnXXu6Q7qM/OqsQMLENu/Fv9T5firqFq6AdKM1Wj OEseeXDOmtuz1wBUX4goo4wm9XBv/+kaMYVxlP+gLZ7UnJMoSex34Wl3O1iFTpte imW1mGaKMuRJ3VT4q3P7Htbp1Q/fkGUfb9ypqgJeYtHrPlOvxcIIlmPYcpjfl50P KnbVMrnHkEShBXrYvToYSA5OXsem99c0rthbpzJbNjc5t4AZo7DTx9hAx7eQ0S5+ MUzfUs/0isqaOj13AoDUrcQeLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrs3gj3 5Y43HehYPTq0X6R4MasXMB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjRGNi9FMUNGM0M1NjkwREIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJ OFNiQWJvS1hEcnRJdGtZOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs6W4mxA2KbLkFyyQT6la/d2HjDPyiC3rU0ZYaOZzY+oBsvNl1K5qw y8psp9LfmVyzrx0spVLnhpBUr0vNyRNyk77wlIzcHRAUZ4y95SdzRjLZsVeO1Qnm rLvf0tdCfN4DCNE6ZkltcOPNQIH+cUYirpHmp0sl5cmTj0j5W6vWZXLCSee2tbFe xskLBuCDmv7lzOtGniRFtj3C1jkXx3Z756QFxyBVBFvHY8+2Rs7AFP48cqlXphx5 6aOTu3ezapoKUOvLCwdV/vIOrQQzFdnoWnO5H+XPaWvw5DJRsTIlO6RArzuxMsCd 88K5TJslQBa4ClkKf3bL7pvuiSuwCcW0 -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:09 2025 by rpki-client