$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: q88DvP3MAnnxFWHI3zg/j8dZkx0TDbEyzvMJJ2rsA7s= Subject key identifier: 1E:CA:49:05:2B:A5:50:56:2C:31:AE:63:B8:2D:45:09:39:1C:F0:C4 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FC6 Signing time: Fri 22 Aug 2025 17:37:32 +0000 Manifest this update: Fri 22 Aug 2025 17:37:31 +0000 Manifest next update: Fri 29 Aug 2025 17:37:31 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: MSgwN20n5ReSfbczEbb7fw5UN6gSJzA0REdjv/K6J2k=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Aug 22 17:37:31 2025 GMT Not After : Aug 29 17:37:31 2025 GMT Subject: CN=68a8aadc-0ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:34:35:c4:ad:52:07:1a:65:fd:2e:ad:5e: 14:ae:92:1a:e4:76:58:47:03:cf:eb:f2:6a:82:e4: d2:fe:ee:f8:d8:33:c3:eb:76:e5:30:b5:ff:25:59: c5:e8:a2:38:10:52:c5:fb:62:c3:37:1a:a4:ee:83: ee:a1:ea:be:ee:f2:46:d7:5a:69:54:ad:0a:e0:37: 0d:77:cf:d7:37:e8:cf:2a:6e:9c:fa:91:54:fd:8a: e2:43:0a:a3:4b:81:22:fe:8d:42:4a:14:70:1c:29: ee:d4:89:73:3e:fc:c0:b9:f5:4b:5b:41:26:4d:af: ad:3f:1f:7e:f1:cf:1e:a0:f1:eb:e7:34:c8:51:90: a4:92:b8:9b:d4:27:8e:04:73:5f:4a:e9:9d:8a:21: f7:2f:38:60:c1:5b:69:b8:85:d0:96:91:f8:11:f6: 8b:93:d6:eb:f7:cb:fe:b3:85:db:36:c7:35:7e:17: ab:41:7c:e9:fd:34:c6:3b:03:61:a8:a5:81:c6:e2: a0:bd:ef:36:ad:6e:99:4d:e4:36:00:62:db:74:3e: 92:93:95:e4:ab:6a:b8:f3:c8:83:de:91:81:58:4d: 2d:ff:71:b9:49:b9:34:6c:b4:19:67:92:63:52:e9: 3a:3f:c2:a6:c0:a3:65:91:33:1f:f6:85:cb:40:fc: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CA:49:05:2B:A5:50:56:2C:31:AE:63:B8:2D:45:09:39:1C:F0:C4 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2e:3f:32:a3:c2:b0:b1:9c:3c:66:53:aa:77:cc:6d:87:f3: 93:17:50:e5:05:99:5a:fb:2e:c6:7a:5d:c3:a5:ac:89:f8:4d: 66:f3:33:80:72:6c:59:9e:e0:c9:62:40:ec:cb:25:4f:47:4a: f2:4d:71:7f:94:64:af:c3:52:c2:17:b0:44:b4:ad:b1:50:27: b8:4a:78:09:8f:5e:7b:7f:cb:d6:4c:9b:60:53:ce:ae:d8:9e: 4b:ce:e6:c6:c2:8f:b3:3f:c2:8d:56:fd:93:3e:ff:a0:e4:c2: 07:62:26:46:8c:a8:86:d6:c3:0a:4d:47:64:23:2c:0c:f7:2d: 89:cc:de:6b:f8:9e:86:8f:eb:e0:f1:bf:58:c7:87:33:8d:4c: 50:0d:e3:14:06:1e:d1:d9:8d:51:7f:a1:8b:ad:44:24:72:2d: 26:51:2f:4a:b3:ab:fa:d7:2d:1d:15:4d:15:55:86:0f:65:3c: 98:08:f4:6c:1a:f2:91:b8:ed:80:d2:c7:fe:e2:5a:98:4c:3e: b0:f1:07:2b:f9:84:87:77:ac:af:ed:e2:5e:0a:3b:a9:72:3e: 68:2d:2d:6a:f5:c7:2b:89:e9:0c:1b:21:11:72:5f:6a:f6:92: 6e:b8:a7:3b:a7:4c:9c:e9:e7:45:47:ac:c5:66:25:07:ff:7a: 8e:81:95:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwODIyMTczNzMxWhcNMjUwODI5MTczNzMxWjAYMRYwFAYD VQQDEw02OGE4YWFkYy0wY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlC00NcStUgcaZf0urV4UrpIa5HZYRwPP6/JqguTS/u742DPD63blMLX/JVnF 6KI4EFLF+2LDNxqk7oPuoeq+7vJG11ppVK0K4DcNd8/XN+jPKm6c+pFU/YriQwqj S4Ei/o1CShRwHCnu1IlzPvzAufVLW0EmTa+tPx9+8c8eoPHr5zTIUZCkkrib1CeO BHNfSumdiiH3LzhgwVtpuIXQlpH4EfaLk9br98v+s4XbNsc1fherQXzp/TTGOwNh qKWBxuKgve82rW6ZTeQ2AGLbdD6Sk5Xkq2q488iD3pGBWE0t/3G5Sbk0bLQZZ5Jj Uuk6P8KmwKNlkTMf9oXLQPzb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7KSQUr pVBWLDGuY7gtRQk5HPDEMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVLj8yo8KwsZw8ZlOqd8xth/OTF1DlBZla+y7Gel3DpayJ+E1m8zOA cmxZnuDJYkDsyyVPR0ryTXF/lGSvw1LCF7BEtK2xUCe4SngJj157f8vWTJtgU86u 2J5LzubGwo+zP8KNVv2TPv+g5MIHYiZGjKiG1sMKTUdkIywM9y2JzN5r+J6Gj+vg 8b9Yx4czjUxQDeMUBh7R2Y1Rf6GLrUQkci0mUS9Ks6v61y0dFU0VVYYPZTyYCPRs GvKRuO2A0sf+4lqYTD6w8Qcr+YSHd6yv7eJeCjupcj5oLS1q9ccriekMGyERcl9q 9pJuuKc7p0yc6edFR6zFZiUH/3qOgZUu -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:25 2025 by rpki-client