$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: Qb6MfY+MI67rmyB+pUz0W1ZRlgf002pZCVPnynkUD0c= Subject key identifier: A1:CF:E1:BB:DA:43:61:74:87:9E:14:C6:CC:12:FA:75:B4:B3:13:F1 Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: D1 Signing time: Sat 23 Aug 2025 05:48:56 +0000 Manifest this update: Sat 23 Aug 2025 05:48:56 +0000 Manifest next update: Sat 30 Aug 2025 05:48:56 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: 25ZtrMLWAf+WuPiaBz4k0T6x0KCHfFjqgxb8kl4Ci1s=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Aug 23 05:48:56 2025 GMT Not After : Aug 30 05:48:56 2025 GMT Subject: CN=68a95648-bf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:02:53:74:36:bb:14:9c:30:46:5a:4d:90: ef:d8:cc:a1:f0:4f:82:d2:0c:5e:d7:d1:64:9a:5b: f1:a7:01:d9:89:b4:ad:bb:c5:84:f0:e5:f0:bc:75: e4:5a:af:48:8e:e7:44:26:68:51:9e:8d:9e:dc:25: 53:db:5e:b6:3c:34:7a:25:c3:cf:ab:ca:25:26:72: 15:94:6c:c4:1e:2e:ce:15:cf:18:91:5d:f2:da:d5: fd:91:f1:bf:a6:69:02:cb:8c:c7:27:4b:06:d9:3c: 7c:27:5d:cd:ad:fa:c2:59:27:e8:4f:04:b6:5c:56: e0:f8:9e:c0:41:09:8a:a1:6a:b8:75:30:0c:c1:b6: a4:82:54:f4:96:b1:cc:0d:f0:16:85:05:cf:f3:a5: d8:a7:85:d8:52:d1:96:b1:19:03:f2:3a:5c:c5:eb: 2d:8d:58:cf:a3:5a:ec:86:6f:b8:a0:72:79:41:14: af:2e:1c:d9:00:be:40:2d:2a:16:11:95:77:a4:69: eb:a5:58:1c:3a:5f:4e:6e:62:de:44:ad:42:70:c3: b8:8d:0d:11:0b:e7:70:58:59:1e:31:aa:b4:85:d0: 06:65:11:e5:a8:05:3c:b3:3a:7c:f9:9f:c8:7d:43: 0a:eb:fa:cb:51:d7:1a:ff:af:b5:82:79:fc:64:d5: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CF:E1:BB:DA:43:61:74:87:9E:14:C6:CC:12:FA:75:B4:B3:13:F1 X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e9:3d:30:2c:e7:8f:19:8b:5a:08:8f:f2:1a:9c:f4:bf:ee: ea:9e:26:9c:2b:a5:18:d8:30:c1:c3:a5:da:e1:57:39:9a:c4: f5:9c:28:af:8d:8a:a3:5b:b1:4f:2d:fa:a8:70:1e:97:69:85: 62:af:6a:52:90:0d:21:1b:03:1d:53:de:66:c3:79:65:34:cb: 14:cf:72:7e:40:ea:12:8a:17:48:7e:cf:51:8d:ca:9f:c1:83: 92:2e:c2:fb:4e:7a:53:2c:8e:f2:b6:b4:11:a1:34:ef:94:78: cd:7c:47:aa:fb:4b:58:ef:60:22:7e:83:e8:2d:96:1e:c3:d1: e9:cf:1f:1f:16:e1:0a:07:7e:88:01:2c:e7:02:2f:6a:98:f5: 84:f1:24:0d:16:3a:7b:65:14:70:53:ec:53:56:60:da:b5:04: be:99:33:5b:86:3f:c3:ad:3f:e5:d8:77:b0:67:d5:4c:ac:0b: 56:e3:f1:0f:bc:52:c5:e1:40:5c:d1:ee:1a:96:bb:fe:f2:8f: 93:b1:97:82:40:e3:a3:bc:35:81:c8:6f:43:47:f8:95:14:01: 49:0e:1a:c0:82:94:14:32:76:51:a3:74:86:e3:ad:22:d2:37: 79:0e:a5:75:e7:4a:1a:55:4a:86:fc:e1:ff:31:44:e2:51:f1: 4a:c1:ac:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjUwODIzMDU0ODU2WhcNMjUwODMwMDU0ODU2WjAYMRYwFAYD VQQDEw02OGE5NTY0OC1iZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfgCU3Q2uxScMEZaTZDv2Myh8E+C0gxe19FkmlvxpwHZibStu8WE8OXwvHXk Wq9IjudEJmhRno2e3CVT2162PDR6JcPPq8olJnIVlGzEHi7OFc8YkV3y2tX9kfG/ pmkCy4zHJ0sG2Tx8J13NrfrCWSfoTwS2XFbg+J7AQQmKoWq4dTAMwbakglT0lrHM DfAWhQXP86XYp4XYUtGWsRkD8jpcxestjVjPo1rshm+4oHJ5QRSvLhzZAL5ALSoW EZV3pGnrpVgcOl9ObmLeRK1CcMO4jQ0RC+dwWFkeMaq0hdAGZRHlqAU8szp8+Z/I fUMK6/rLUdca/6+1gnn8ZNW1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHP4bva Q2F0h54UxswS+nW0sxPxMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq6T0wLOePGYtaCI/yGpz0v+7qniacK6UY2DDBw6Xa4Vc5msT1nCiv jYqjW7FPLfqocB6XaYVir2pSkA0hGwMdU95mw3llNMsUz3J+QOoSihdIfs9Rjcqf wYOSLsL7TnpTLI7ytrQRoTTvlHjNfEeq+0tY72AifoPoLZYew9Hpzx8fFuEKB36I ASznAi9qmPWE8SQNFjp7ZRRwU+xTVmDatQS+mTNbhj/DrT/l2HewZ9VMrAtW4/EP vFLF4UBc0e4alrv+8o+TsZeCQOOjvDWByG9DR/iVFAFJDhrAgpQUMnZRo3SG460i 0jd5DqV150oaVUqG/OH/MUTiUfFKwazg -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:24 2025 by rpki-client