$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json) Hash identifier: DleetyjfWhGEWQhxVg8SIeixKunJijTvsC66ezaApWI= Subject key identifier: D6:5E:92:8D:5E:37:9A:15:BF:44:50:BB:60:BC:38:D7:88:41:16:2E Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft Manifest number: 0C49 Signing time: Fri 22 Aug 2025 18:47:32 +0000 Manifest this update: Fri 22 Aug 2025 18:47:32 +0000 Manifest next update: Fri 29 Aug 2025 18:47:32 +0000 Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: HC9HAI+1XYap2KcwRDpslEBVFb3Dl1MfMXekymYSLlc=) 2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 4znOjftmOLUP9F0sqZtn3shUbp4rIvm9xbYnsSSpuqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Validity Not Before: Aug 22 18:47:32 2025 GMT Not After : Aug 29 18:47:32 2025 GMT Subject: CN=68a8bb44-8053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:82:70:a9:7f:d9:94:43:ed:3c:b2:5d:a8:86: 85:df:4f:5f:c2:23:f4:d2:9d:d7:77:db:14:3d:42: e5:64:8a:ea:ee:9a:6d:a2:8a:e1:7f:ea:35:a1:77: a8:9a:d5:a0:71:f9:9a:7f:8c:56:a8:8b:14:cd:47: 6b:dc:e4:d6:29:66:74:9f:4d:d0:fd:73:65:7a:16: f3:7c:ef:ca:2c:5e:81:05:01:c1:17:35:45:50:26: 58:69:7e:bb:77:49:db:71:d5:a1:02:a1:e1:4c:78: 94:a9:a2:80:be:3f:31:41:5e:89:b3:b4:0b:c8:1c: 40:34:e1:bf:23:d2:6a:41:8a:90:58:00:f2:25:5a: c1:e3:33:d6:31:b5:77:60:7d:e5:b9:62:63:f1:14: fe:11:c8:ec:f9:14:48:73:ab:3c:95:0f:f0:79:d1: 39:37:11:5a:2b:ea:85:94:80:67:46:bf:c0:10:3e: b0:e9:37:a0:00:6a:e3:69:b4:46:6c:6e:68:cc:f9: dc:14:b5:e9:6e:5d:f9:ad:99:92:8b:fe:81:b2:e4: 02:cd:57:e3:08:5e:e2:2d:d4:3e:bc:16:a3:b1:07: 0b:e9:0c:27:86:23:e1:c7:35:72:b9:c2:0d:03:0f: 0d:d6:89:ea:3c:41:f7:76:6f:06:13:ee:06:fb:09: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5E:92:8D:5E:37:9A:15:BF:44:50:BB:60:BC:38:D7:88:41:16:2E X509v3 Authority Key Identifier: keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7d:db:9f:51:81:14:dc:1f:33:c2:5c:ff:70:14:05:fd:a5: da:79:d3:8e:76:c0:72:3b:a7:96:87:9d:da:6c:39:a7:96:f6: f8:49:a6:3a:80:72:67:ba:74:e0:32:4f:34:cc:6e:2c:9a:65: 55:3f:85:65:54:30:68:63:e8:db:90:da:76:97:88:97:cd:d9: cf:9f:7f:8a:01:8c:45:c3:e7:41:b7:e3:3d:e4:28:86:85:25: e9:90:d2:27:38:26:48:41:07:8b:0f:cf:d0:af:fa:83:c6:10: b2:39:0a:58:3b:65:96:f6:29:1a:a4:33:30:11:d5:ee:15:50: 9c:b8:26:8b:b8:5f:cc:b9:43:8c:27:c7:e3:8b:7d:d5:d1:7e: 5d:0e:67:e8:62:c5:f1:0f:b4:81:11:8e:ec:73:59:e1:d8:d1: 97:c5:c0:f6:3b:4d:99:49:c4:f1:bc:7f:86:da:29:30:67:34: 4d:1f:a0:37:79:49:b9:f4:3c:85:ad:33:6b:d9:ef:bd:3f:c7: 09:98:40:16:4b:f8:21:dd:08:74:ce:e2:b0:91:83:34:28:36: 8f:16:97:7f:89:1f:c3:52:9c:9a:0d:6e:aa:27:5d:e5:b4:9f: 43:a1:9b:71:f9:3e:35:a5:f1:09:70:f7:21:c9:79:c1:96:be: 2e:90:fd:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3 NDkwQjBBQjkwHhcNMjUwODIyMTg0NzMyWhcNMjUwODI5MTg0NzMyWjAYMRYwFAYD VQQDEw02OGE4YmI0NC04MDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oJwqX/ZlEPtPLJdqIaF309fwiP00p3Xd9sUPULlZIrq7pptoorhf+o1oXeo mtWgcfmaf4xWqIsUzUdr3OTWKWZ0n03Q/XNlehbzfO/KLF6BBQHBFzVFUCZYaX67 d0nbcdWhAqHhTHiUqaKAvj8xQV6Js7QLyBxANOG/I9JqQYqQWADyJVrB4zPWMbV3 YH3luWJj8RT+Ecjs+RRIc6s8lQ/wedE5NxFaK+qFlIBnRr/AED6w6TegAGrjabRG bG5ozPncFLXpbl35rZmSi/6BsuQCzVfjCF7iLdQ+vBajsQcL6QwnhiPhxzVyucIN Aw8N1onqPEH3dm8GE+4G+wkNnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZeko1e N5oVv0RQu2C8ONeIQRYuMB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyfdufUYEU3B8zwlz/cBQF/aXaedOOdsByO6eWh53abDmnlvb4SaY6 gHJnunTgMk80zG4smmVVP4VlVDBoY+jbkNp2l4iXzdnPn3+KAYxFw+dBt+M95CiG hSXpkNInOCZIQQeLD8/Qr/qDxhCyOQpYO2WW9ikapDMwEdXuFVCcuCaLuF/MuUOM J8fji33V0X5dDmfoYsXxD7SBEY7sc1nh2NGXxcD2O02ZScTxvH+G2ikwZzRNH6A3 eUm59DyFrTNr2e+9P8cJmEAWS/gh3Qh0zuKwkYM0KDaPFpd/iR/DUpyaDW6qJ13l tJ9DoZtx+T41pfEJcPchyXnBlr4ukP0W -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:11 2025 by rpki-client