$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft File: 1juG48_JVWPv58rwdR2YQCZK2lY.mft (raw, json) Hash identifier: ugs72sQC8Vpv2dGtVjhGL0hSM4AiUr59h2b7vM+T1Co= Subject key identifier: C4:03:79:06:F2:32:C6:3E:12:20:69:AF:72:47:D6:18:4D:60:2B:61 Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56 Certificate issuer: /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft Manifest number: 1C Signing time: Sat 23 Aug 2025 08:08:31 +0000 Manifest this update: Sat 23 Aug 2025 08:08:30 +0000 Manifest next update: Sat 30 Aug 2025 08:08:30 +0000 Files and hashes: 1: 1juG48_JVWPv58rwdR2YQCZK2lY.crl (hash: 8edBdzNbl/wbGwjRk2Binv1HrtOmdfFhwtcisUyWoKs=) 2: 39044E9E58B311F084F3982DC4F9AE02.roa (hash: Ia+Jmu8TncD8IiScdaf8hIm9nx7VvvKZ6Drg9K1HDyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56 Validity Not Before: Aug 23 08:08:30 2025 GMT Not After : Aug 30 08:08:30 2025 GMT Subject: CN=68a976ff-663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:23:12:37:d1:91:42:38:db:40:82:80:cc: a5:15:ee:2d:89:59:d4:e4:7a:c4:0d:7a:a6:dc:09: 8b:8e:3d:b2:5e:ca:8d:ac:1d:af:93:20:ee:6a:45: 43:00:0e:16:69:97:c7:1d:f9:ef:52:24:14:b9:17: b3:ac:d9:28:3f:a1:f1:ea:89:a1:b1:ec:87:e4:da: 96:97:a7:1b:cc:39:3b:24:f4:9a:6a:a9:85:48:92: be:a1:76:fe:76:bc:d5:4d:d1:c3:93:6e:63:04:a2: 92:58:e1:6e:7d:97:40:c8:4a:0c:13:81:d7:5d:4f: 02:9d:50:8a:38:0b:cc:2b:2c:a8:d2:71:b6:db:59: 65:47:bd:e9:15:61:46:0f:12:0e:c8:72:ae:25:16: 4b:1f:75:b6:ed:04:d9:3e:cc:2b:95:d6:0d:d3:4a: 64:a3:01:17:fe:84:4c:7f:93:42:65:6e:4d:e7:b0: 2f:33:26:4f:9f:38:c6:72:c0:a7:24:76:76:34:50: 17:8c:ff:71:a0:2b:38:d9:90:66:d1:ae:c5:72:87: 1a:96:d9:94:dd:72:04:76:84:5a:d9:0e:ef:af:1d: b6:97:8e:34:05:04:a8:7e:7b:34:df:bc:2d:96:3e: 0c:8f:f1:cb:81:66:15:c6:40:84:f1:d9:30:b7:b4: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:03:79:06:F2:32:C6:3E:12:20:69:AF:72:47:D6:18:4D:60:2B:61 X509v3 Authority Key Identifier: keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:49:e3:e7:ac:07:c5:b8:2d:5d:05:0f:bc:0f:8e:b4:f2:be: a0:06:ca:51:3b:b1:f4:10:55:92:82:5c:b8:81:c4:86:0c:1a: 7e:eb:0a:33:7c:c1:da:4b:cb:fd:16:c0:7a:d7:02:9e:f5:07: f9:77:ca:08:98:5c:3a:cc:f1:81:0c:d7:1c:5a:28:04:6d:4b: e5:09:ec:f6:60:b7:52:db:c0:1f:c8:8d:eb:89:84:da:e4:a0: 05:66:6b:92:28:0d:2f:56:a1:34:86:d1:52:a9:0c:3a:d1:b7: e5:c6:af:38:d0:fc:03:d9:c9:6a:ce:c4:d8:50:45:7b:ca:f3: 90:e2:90:6f:6e:d0:37:c1:24:39:31:2c:63:1f:1e:7d:ff:6b: c9:9c:58:3c:f4:f1:5b:29:9a:c7:e9:b8:24:0e:48:e7:1b:ac: a3:e0:5c:cf:0d:dd:94:a3:bd:69:95:8f:77:df:09:3d:ac:88: 89:38:70:29:d5:c3:5a:e5:da:98:cf:1e:05:02:17:5e:f5:92: 7a:01:0f:87:96:4f:58:5c:9a:a2:34:53:7a:69:f8:02:7f:72: 47:fd:72:da:17:b4:53:f6:3a:9c:3e:00:ab:ec:1a:ba:f2:34: b4:9b:b3:0d:20:ea:e5:cb:27:ea:1d:70:b5:83:b4:c2:15:2e: 33:70:b6:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzQ1NTExMC8GA1UEBRMoRDYzQjg2RTNDRkM5NTU2M0VGRTdDQUYwNzUxRDk4NDAy NjRBREE1NjAeFw0yNTA4MjMwODA4MzBaFw0yNTA4MzAwODA4MzBaMBgxFjAUBgNV BAMTDTY4YTk3NmZmLTY2M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE0CMSN9GRQjjbQIKAzKUV7i2JWdTkesQNeqbcCYuOPbJeyo2sHa+TIO5qRUMA DhZpl8cd+e9SJBS5F7Os2Sg/ofHqiaGx7Ifk2paXpxvMOTsk9JpqqYVIkr6hdv52 vNVN0cOTbmMEopJY4W59l0DISgwTgdddTwKdUIo4C8wrLKjScbbbWWVHvekVYUYP Eg7Icq4lFksfdbbtBNk+zCuV1g3TSmSjARf+hEx/k0Jlbk3nsC8zJk+fOMZywKck dnY0UBeM/3GgKzjZkGbRrsVyhxqW2ZTdcgR2hFrZDu+vHbaXjjQFBKh+ezTfvC2W PgyP8cuBZhXGQITx2TC3tPG3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxAN5BvIy xj4SIGmvckfWGE1gK2EwHwYDVR0jBBgwFoAU1juG48/JVWPv58rwdR2YQCZK2lYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzNDU1L0ExNjg0QjNBNThC MjExRjA5OUVFNzUyQ0M0RjlBRTAyLzFqdUc0OF9KVldQdjU4cndkUjJZUUNaSzJs WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWp1RzQ4X0pWV1B2NThyd2RSMllRQ1pLMmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz NDU1L0ExNjg0QjNBNThCMjExRjA5OUVFNzUyQ0M0RjlBRTAyLzFqdUc0OF9KVldQ djU4cndkUjJZUUNaSzJsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMBJ4+esB8W4LV0FD7wPjrTyvqAGylE7sfQQVZKCXLiBxIYMGn7rCjN8 wdpLy/0WwHrXAp71B/l3ygiYXDrM8YEM1xxaKARtS+UJ7PZgt1LbwB/IjeuJhNrk oAVma5IoDS9WoTSG0VKpDDrRt+XGrzjQ/APZyWrOxNhQRXvK85DikG9u0DfBJDkx LGMfHn3/a8mcWDz08VspmsfpuCQOSOcbrKPgXM8N3ZSjvWmVj3ffCT2siIk4cCnV w1rl2pjPHgUCF171knoBD4eWT1hcmqI0U3pp+AJ/ckf9ctoXtFP2Opw+AKvsGrry NLSbsw0g6uXLJ+odcLWDtMIVLjNwtko= -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:04 2025 by rpki-client