$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: PqKGXchIaB/O9X+elCVukLAJDt238yMz2YJgdLQaxfg= Subject key identifier: 04:19:8E:79:5D:1E:3C:D8:57:E2:F4:17:3C:84:F1:C5:A2:80:08:DE Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0B2F Signing time: Fri 22 Aug 2025 19:23:57 +0000 Manifest this update: Fri 22 Aug 2025 19:23:57 +0000 Manifest next update: Fri 29 Aug 2025 19:23:57 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: rYjH+YAf1Nd0/Gqdx5SSt7xyFsWAbPNdsM9yi+MUIKc=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Aug 22 19:23:57 2025 GMT Not After : Aug 29 19:23:57 2025 GMT Subject: CN=68a8c3cd-7a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:0a:4f:8c:fb:4b:fd:20:34:b2:eb:b4:32: 9b:b0:c0:08:77:15:d2:82:ee:ed:9a:ec:b1:b3:76: 54:3d:2c:f0:50:b9:e9:4b:e4:82:90:b5:37:24:d4: 41:6d:1a:82:6b:78:5f:6b:d6:0f:08:2c:a4:a6:16: f7:b3:79:49:0c:8e:6c:b8:91:5d:16:25:32:27:19: db:93:af:66:b7:fb:26:3e:4d:bd:68:51:d9:d8:26: 36:02:6b:5e:60:ae:c0:0e:2b:2d:da:c7:9c:66:cc: eb:49:0b:3e:c6:db:d0:55:d9:77:e6:c4:3a:71:f3: 4f:e7:e1:d2:a3:e0:ba:36:9b:19:59:96:23:bf:e8: 71:27:46:d5:d7:d2:f1:9c:d9:10:a5:cc:bc:75:d0: 19:3e:3b:e7:ab:d1:1a:6d:ea:63:59:f5:26:81:b8: 55:06:4d:30:68:ed:da:d4:eb:9f:40:ed:db:03:87: 51:ba:53:6a:98:48:9e:cd:8b:66:66:6b:9e:b6:04: 8f:c3:cb:d8:07:21:9f:62:06:20:84:9a:5e:15:5d: 02:c7:41:a5:a9:2f:ba:d5:86:e3:6f:2e:54:bf:fe: 90:54:37:60:f9:85:ca:26:be:25:4e:3b:0b:ad:bb: d5:b0:fc:1d:5d:bd:d0:1b:e9:35:e9:81:7c:df:12: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:19:8E:79:5D:1E:3C:D8:57:E2:F4:17:3C:84:F1:C5:A2:80:08:DE X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f5:ce:2d:0e:64:47:10:7d:70:29:be:65:be:23:9a:77:06: 73:5f:a3:86:89:36:f7:98:28:1d:c0:4b:d0:c3:97:31:f1:16: b3:f6:c6:8c:00:af:b1:e9:29:81:08:7d:9a:2c:6a:60:10:42: a7:a3:a6:55:f5:09:a9:fe:57:92:07:3c:c6:53:b9:81:e3:da: d1:bd:91:a1:bf:10:97:ca:77:68:96:3a:fc:19:da:3d:1d:93: 4d:20:09:cc:a8:dc:b2:0a:65:ff:b0:bd:fa:2b:7d:3c:26:a8: 83:ff:69:a6:f8:31:4f:a2:81:6f:ea:07:3c:77:ab:d7:dd:4a: ae:01:73:2b:96:a2:be:c5:b8:ab:94:95:ad:e8:fc:4d:c6:f7: 5d:37:d4:37:ca:6b:0d:84:8c:2d:52:4c:f9:09:93:71:58:3e: 27:ad:52:3b:e0:b2:2c:4d:e8:f0:a7:02:93:a8:99:3d:8c:26: a3:df:3d:7e:8b:59:e0:a5:8b:c8:32:b4:35:3b:ed:64:20:84: 0d:9b:5b:44:4c:41:ae:12:6e:de:c5:2f:b9:41:df:e7:c3:a3: aa:78:3c:96:1f:1c:78:cd:bb:97:c5:92:a5:39:f2:39:20:db: 51:96:99:36:2a:f2:34:c4:02:b6:fa:d1:d4:7b:37:35:44:f2: d5:53:e7:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUwODIyMTkyMzU3WhcNMjUwODI5MTkyMzU3WjAYMRYwFAYD VQQDEw02OGE4YzNjZC03YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5h4KT4z7S/0gNLLrtDKbsMAIdxXSgu7tmuyxs3ZUPSzwULnpS+SCkLU3JNRB bRqCa3hfa9YPCCykphb3s3lJDI5suJFdFiUyJxnbk69mt/smPk29aFHZ2CY2Amte YK7ADist2secZszrSQs+xtvQVdl35sQ6cfNP5+HSo+C6NpsZWZYjv+hxJ0bV19Lx nNkQpcy8ddAZPjvnq9EabepjWfUmgbhVBk0waO3a1OufQO3bA4dRulNqmEiezYtm ZmuetgSPw8vYByGfYgYghJpeFV0Cx0GlqS+61Ybjby5Uv/6QVDdg+YXKJr4lTjsL rbvVsPwdXb3QG+k16YF83xLTAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQZjnld HjzYV+L0FzyE8cWigAjeMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB49c4tDmRHEH1wKb5lviOadwZzX6OGiTb3mCgdwEvQw5cx8Raz9saM AK+x6SmBCH2aLGpgEEKno6ZV9Qmp/leSBzzGU7mB49rRvZGhvxCXyndoljr8Gdo9 HZNNIAnMqNyyCmX/sL36K308JqiD/2mm+DFPooFv6gc8d6vX3UquAXMrlqK+xbir lJWt6PxNxvddN9Q3ymsNhIwtUkz5CZNxWD4nrVI74LIsTejwpwKTqJk9jCaj3z1+ i1ngpYvIMrQ1O+1kIIQNm1tETEGuEm7exS+5Qd/nw6OqeDyWHxx4zbuXxZKlOfI5 INtRlpk2KvI0xAK2+tHUezc1RPLVU+cl -----END CERTIFICATE-----Generated at Sun Aug 24 04:56:03 2025 by rpki-client