$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: BDTO/GRiG//jjRmyUa9frhq5xJARcK5j1GVauFapo7Q= Subject key identifier: D6:B6:D0:2F:77:99:15:8E:5C:64:15:12:45:50:67:8F:2C:D4:72:FE Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 09E0 Signing time: Fri 22 Aug 2025 20:04:07 +0000 Manifest this update: Fri 22 Aug 2025 20:04:06 +0000 Manifest next update: Fri 29 Aug 2025 20:04:06 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: HE17nH6mFTd5F76QjitdiQOUD8zXps7tyQeudNtqYgY=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ZlFR2HTwg3fDW4lClQanT4TaI4rdoCBr8+QBrXHDB9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Aug 22 20:04:06 2025 GMT Not After : Aug 29 20:04:06 2025 GMT Subject: CN=68a8cd36-c0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:fb:76:43:83:3e:31:c5:06:26:b6:66:e9: 9b:1a:2f:13:5a:ce:fa:8e:38:9d:d1:9a:df:72:21: d4:26:08:08:80:4f:3e:66:d1:77:2a:bb:ce:de:51: cc:fc:a2:04:2f:f9:a8:63:f6:20:47:73:5a:0a:5a: c9:44:2f:b1:f4:4f:f9:bb:80:b1:6b:63:8f:76:aa: 81:f8:2f:d5:f3:52:42:d7:bc:62:85:91:f8:7d:84: 86:f4:21:f0:06:90:73:ec:b1:8e:c7:fe:79:21:76: 51:f1:02:a8:5c:9d:3b:4d:2d:29:56:99:49:53:4d: 56:76:09:f1:c1:f8:c7:dd:72:91:94:b8:e2:d4:4e: 1f:6a:d1:97:ff:b5:b2:5e:c7:e7:a8:b6:e0:4a:6d: ea:ff:c7:bd:39:80:50:50:d9:a5:d0:64:a9:f9:a7: 07:12:a6:2f:8c:91:69:a5:f9:a0:78:86:5d:44:df: 16:53:ed:26:76:17:6e:12:f5:97:f4:fb:c4:c2:c6: a6:9b:ae:0f:43:d3:9b:33:33:81:2b:9f:ba:20:d4: 7b:36:57:1d:fc:37:1f:22:00:20:32:37:da:13:36: c5:11:24:95:00:8b:85:97:90:e6:d7:a8:f5:3d:62: 7a:89:c4:40:e5:9c:ca:8d:25:45:49:c4:dd:cd:b8: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B6:D0:2F:77:99:15:8E:5C:64:15:12:45:50:67:8F:2C:D4:72:FE X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:15:1f:8b:9c:db:e5:cf:02:cd:42:d9:1d:11:1d:8c:b0:a7: 4b:e8:a2:b5:70:a5:26:14:b2:a0:1f:d2:0e:e9:43:1f:02:55: 5a:a6:9d:93:dc:32:82:ff:17:7b:aa:a8:46:d7:09:24:86:16: f7:2f:e0:10:92:08:92:d9:ca:5a:4b:fa:23:b6:27:7d:9d:49: 9d:27:cf:bf:fc:34:0c:17:f7:9f:60:77:48:a8:ff:67:9a:80: 23:fa:95:82:1e:38:cf:31:93:83:c0:71:ca:6b:ea:ff:d0:e6: ba:00:0f:46:a3:8a:7e:33:9a:e4:9b:99:a4:17:07:7b:a3:b8: ba:1e:f6:3d:97:eb:c3:1e:97:1a:55:5f:63:ff:d4:7f:82:45: 11:bc:23:f4:01:41:ed:08:63:12:07:15:8f:86:87:30:9b:ee: a4:7f:bf:71:3f:ec:61:b3:dd:18:c1:01:23:76:1b:f2:99:0d: 11:4a:e5:50:89:62:d6:2d:e2:80:76:32:9d:0e:d4:37:de:ca: 39:1c:63:12:96:c2:cc:92:45:78:8d:cf:cb:22:85:68:a6:c3: 11:7b:f5:77:02:c0:c8:70:7f:47:ed:f9:26:07:3c:11:4f:02: c2:e2:02:e4:b9:d0:ac:c1:fe:a2:30:bf:68:9d:93:bf:8e:7b: fa:81:5a:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjUwODIyMjAwNDA2WhcNMjUwODI5MjAwNDA2WjAYMRYwFAYD VQQDEw02OGE4Y2QzNi1jMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLn7dkODPjHFBia2ZumbGi8TWs76jjid0ZrfciHUJggIgE8+ZtF3KrvO3lHM /KIEL/moY/YgR3NaClrJRC+x9E/5u4Cxa2OPdqqB+C/V81JC17xihZH4fYSG9CHw BpBz7LGOx/55IXZR8QKoXJ07TS0pVplJU01WdgnxwfjH3XKRlLji1E4fatGX/7Wy XsfnqLbgSm3q/8e9OYBQUNml0GSp+acHEqYvjJFppfmgeIZdRN8WU+0mdhduEvWX 9PvEwsamm64PQ9ObMzOBK5+6INR7Nlcd/DcfIgAgMjfaEzbFESSVAIuFl5Dm16j1 PWJ6icRA5ZzKjSVFScTdzbhZPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa20C93 mRWOXGQVEkVQZ48s1HL+MB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdFR+LnNvlzwLNQtkdER2MsKdL6KK1cKUmFLKgH9IO6UMfAlVapp2T 3DKC/xd7qqhG1wkkhhb3L+AQkgiS2cpaS/ojtid9nUmdJ8+//DQMF/efYHdIqP9n moAj+pWCHjjPMZODwHHKa+r/0Oa6AA9Go4p+M5rkm5mkFwd7o7i6HvY9l+vDHpca VV9j/9R/gkURvCP0AUHtCGMSBxWPhocwm+6kf79xP+xhs90YwQEjdhvymQ0RSuVQ iWLWLeKAdjKdDtQ33so5HGMSlsLMkkV4jc/LIoVopsMRe/V3AsDIcH9H7fkmBzwR TwLC4gLkudCswf6iML9onZO/jnv6gVrJ -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:03 2025 by rpki-client