$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: O3JaKpGVKfUwL/a/NLwilbznmrSvGRHFGMkE5NHsjiI= Subject key identifier: 44:D8:23:D9:E3:57:D2:E5:DB:B8:12:C5:83:6D:85:7B:46:73:6F:B6 Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0A63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0A59 Signing time: Fri 22 Aug 2025 19:49:24 +0000 Manifest this update: Fri 22 Aug 2025 19:49:23 +0000 Manifest next update: Fri 29 Aug 2025 19:49:23 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: fPMMYyLbZOSi7WmcfD4wU9swvususVykfNwSbWKaspM=) 2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: r0RKRgF0/rDGEDAesBgC29Z43qYpMBwutyEjFMfF0YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2659 (0xa63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Aug 22 19:49:23 2025 GMT Not After : Aug 29 19:49:23 2025 GMT Subject: CN=68a8c9c4-63a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:3a:d0:c4:86:4a:39:b6:cd:2a:3f:cb:df: 52:86:98:fd:02:4b:62:1a:37:2a:1b:86:ad:fe:51: e4:12:8d:41:21:a3:3b:1c:81:1e:b8:c6:1d:14:e4: ff:ec:19:40:85:04:3f:6b:fc:69:ea:86:ee:ac:6e: 25:b8:90:90:14:2f:c3:42:15:4f:23:c7:62:6c:1e: 06:df:55:ec:4d:ca:d0:39:81:b3:34:4c:c3:bc:5c: f2:77:e7:57:72:9d:ff:32:c2:2d:93:38:37:40:79: 46:41:74:c0:0b:44:bf:90:13:71:93:ea:90:af:18: 24:63:8e:4d:46:a4:79:4f:6e:ac:fe:7b:6d:da:8d: 34:7d:f3:3f:95:a3:6f:78:66:9b:d3:8e:c6:85:57: c2:8c:4e:c3:7c:62:fb:c4:42:46:0e:2a:1f:4c:47: 7c:0c:06:9c:19:97:54:cc:82:b6:93:83:64:e4:ca: fc:c0:e0:2b:c0:c8:fa:27:8f:98:7f:f5:15:af:93: 8f:20:d3:48:69:6f:fd:28:fc:2e:6e:cc:78:df:df: d9:a1:12:dd:a8:8a:ab:51:15:53:20:0e:31:64:d2: f6:c2:59:04:b3:cb:4f:29:27:1f:70:de:6c:44:f0: 30:17:9b:70:67:a7:6c:bc:3d:e3:d4:1b:2f:f3:59: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D8:23:D9:E3:57:D2:E5:DB:B8:12:C5:83:6D:85:7B:46:73:6F:B6 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d7:e5:df:d4:b9:89:f5:6f:b4:a8:5c:96:b9:86:eb:15:31: 70:00:ce:af:c6:80:73:28:5f:af:35:28:4b:4d:32:a8:2d:2a: 9a:2f:26:2c:14:0e:46:3b:5f:41:94:fa:65:56:70:5b:f9:26: 5a:ce:25:b8:43:66:5a:44:75:0d:2a:fa:14:8a:7b:d7:4d:65: 33:f8:56:56:dc:60:bc:cc:2f:b1:e2:05:69:31:b6:2a:eb:87: f1:06:a9:f0:ab:92:8c:44:38:89:c6:79:59:73:6e:f8:2a:75: da:ba:ca:71:91:47:b7:9c:b7:9f:7b:a7:3e:bc:e2:cd:7c:6c: cf:86:33:c6:59:0d:56:04:39:01:ca:e5:70:05:54:a9:d4:2c: ec:39:2a:89:07:c7:a0:a4:a7:86:3f:08:c2:2a:46:ca:99:e0: f3:3e:98:4e:af:03:9d:21:da:7a:08:81:c6:89:88:48:51:a0: 1f:b3:c7:5c:bd:64:85:83:28:a3:66:32:9a:94:bd:4c:a1:6e: d1:f8:18:d0:7a:23:c2:ff:b4:0a:63:83:71:4e:c1:fb:79:e7: 25:02:ec:e6:a7:4e:e2:04:6e:0b:4c:c1:e9:5b:70:21:17:02: f4:45:c0:50:1a:27:41:db:9c:ba:f7:91:54:f5:4a:8c:e7:7f: aa:11:61:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUwODIyMTk0OTIzWhcNMjUwODI5MTk0OTIzWjAYMRYwFAYD VQQDEw02OGE4YzljNC02M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApco60MSGSjm2zSo/y99Shpj9AktiGjcqG4at/lHkEo1BIaM7HIEeuMYdFOT/ 7BlAhQQ/a/xp6oburG4luJCQFC/DQhVPI8dibB4G31XsTcrQOYGzNEzDvFzyd+dX cp3/MsItkzg3QHlGQXTAC0S/kBNxk+qQrxgkY45NRqR5T26s/ntt2o00ffM/laNv eGab047GhVfCjE7DfGL7xEJGDiofTEd8DAacGZdUzIK2k4Nk5Mr8wOArwMj6J4+Y f/UVr5OPINNIaW/9KPwubsx439/ZoRLdqIqrURVTIA4xZNL2wlkEs8tPKScfcN5s RPAwF5twZ6dsvD3j1Bsv81kdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETYI9nj V9Ll27gSxYNthXtGc2+2MB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI1+Xf1LmJ9W+0qFyWuYbrFTFwAM6vxoBzKF+vNShLTTKoLSqaLyYs FA5GO19BlPplVnBb+SZaziW4Q2ZaRHUNKvoUinvXTWUz+FZW3GC8zC+x4gVpMbYq 64fxBqnwq5KMRDiJxnlZc274KnXauspxkUe3nLefe6c+vOLNfGzPhjPGWQ1WBDkB yuVwBVSp1CzsOSqJB8egpKeGPwjCKkbKmeDzPphOrwOdIdp6CIHGiYhIUaAfs8dc vWSFgyijZjKalL1MoW7R+BjQeiPC/7QKY4NxTsH7eeclAuzmp07iBG4LTMHpW3Ah FwL0RcBQGidB25y695FU9UqM53+qEWHU -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:53 2025 by rpki-client