$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: e60rXlZFO2i/2lDk69O3rCsi6tOXpt1/pHJf6Ob7YCc= Subject key identifier: F8:C7:D8:8C:44:EE:13:25:7F:BC:B1:F1:68:14:7F:43:D6:61:85:8A Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: B9 Signing time: Sat 23 Aug 2025 06:07:57 +0000 Manifest this update: Sat 23 Aug 2025 06:07:56 +0000 Manifest next update: Sat 30 Aug 2025 06:07:56 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: g0/n8ATV+tv0MSWx3DWAXp9cZ1OhubGRwJzMVYxP6B4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Aug 23 06:07:56 2025 GMT Not After : Aug 30 06:07:56 2025 GMT Subject: CN=68a95abd-b9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:36:57:7f:e9:ba:ba:ed:99:b3:da:23:98: 63:d9:ec:b5:cb:8e:e4:2d:34:1e:01:f7:dc:ca:ec: a6:37:22:3b:44:00:8c:ba:f2:ec:7d:12:39:22:ea: 85:59:5a:72:7f:98:f4:b3:35:be:65:62:1f:eb:39: 9f:52:06:1e:76:3f:fe:a6:79:11:4e:a1:79:3d:81: a9:f6:ef:39:ed:4a:fa:58:88:3c:ed:a8:98:aa:d3: 62:97:fd:3a:5a:72:63:ad:2b:79:25:ee:2f:2f:e9: 64:3d:a5:6f:38:98:9a:4f:90:a8:43:94:85:a8:0b: 78:b5:d2:56:67:57:c1:21:1c:61:bd:5f:d4:3e:f4: d8:e2:d7:26:a6:ee:7a:bf:b1:3e:f3:a2:29:4e:29: 9b:00:da:8a:c2:a1:09:9d:5f:00:6e:7b:41:6d:ea: 27:d4:49:6a:55:4e:ef:16:34:f8:7f:dc:77:66:a0: 2e:f8:ed:e4:9d:fd:ba:48:39:88:0f:16:3c:54:f3: 4e:08:c5:27:b4:3c:a1:60:0f:ac:5e:c4:eb:76:5b: cc:ae:63:bf:06:52:69:02:1a:6c:54:42:e1:b0:2b: 9c:ae:b4:fb:4b:9c:77:cc:c3:85:ba:be:50:a0:48: 8e:6e:b8:52:dc:ea:d4:6a:a3:f9:aa:15:e1:05:c1: 95:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:D8:8C:44:EE:13:25:7F:BC:B1:F1:68:14:7F:43:D6:61:85:8A X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:58:80:7a:f4:cf:7b:a7:d7:22:de:db:94:cb:a7:b3:5b:98: b8:17:57:61:5c:4a:72:39:5c:9d:15:2b:9b:8e:bf:c8:49:57: f2:a0:b8:f9:53:fd:83:64:4e:ff:da:6b:a8:f5:11:53:62:c8: 08:d4:d6:80:69:0e:93:26:75:d6:a9:69:c7:7e:29:78:b8:b4: ed:18:64:bb:89:2b:b9:cb:8c:ae:bd:60:c4:85:d6:5d:21:5b: 39:9a:31:30:e9:e1:9b:00:4b:81:5f:34:17:13:1c:ee:10:9e: ed:29:ea:44:47:29:ad:5d:61:1c:69:61:4e:b8:db:c7:2c:3e: 85:c4:a4:70:34:6f:26:ab:16:e5:b7:aa:18:3f:6d:20:ae:dc: cc:12:7a:d3:b1:14:83:c7:78:00:a1:92:45:e3:ae:1a:67:83: 56:dd:15:d9:d9:f9:28:df:63:23:00:4d:ed:67:64:dd:82:8c: b5:ee:6d:97:ae:24:06:0d:c9:fc:da:c2:e5:bd:0d:00:ae:e3: b4:f9:14:71:22:6a:99:55:4d:c3:4c:ec:6b:e1:30:91:fb:a9: 31:51:03:1e:dd:17:c2:03:f7:ff:e5:51:27:db:b6:25:e5:0d: f3:b1:3e:d3:aa:ec:32:f3:e7:c8:2e:f7:e7:05:27:bd:92:98: 91:e0:60:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUwODIzMDYwNzU2WhcNMjUwODMwMDYwNzU2WjAYMRYwFAYD VQQDEw02OGE5NWFiZC1iOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rM2V3/purrtmbPaI5hj2ey1y47kLTQeAffcyuymNyI7RACMuvLsfRI5IuqF WVpyf5j0szW+ZWIf6zmfUgYedj/+pnkRTqF5PYGp9u857Ur6WIg87aiYqtNil/06 WnJjrSt5Je4vL+lkPaVvOJiaT5CoQ5SFqAt4tdJWZ1fBIRxhvV/UPvTY4tcmpu56 v7E+86IpTimbANqKwqEJnV8AbntBbeon1ElqVU7vFjT4f9x3ZqAu+O3knf26SDmI DxY8VPNOCMUntDyhYA+sXsTrdlvMrmO/BlJpAhpsVELhsCucrrT7S5x3zMOFur5Q oEiObrhS3OrUaqP5qhXhBcGVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjH2IxE 7hMlf7yx8WgUf0PWYYWKMB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/WIB69M97p9ci3tuUy6ezW5i4F1dhXEpyOVydFSubjr/ISVfyoLj5 U/2DZE7/2muo9RFTYsgI1NaAaQ6TJnXWqWnHfil4uLTtGGS7iSu5y4yuvWDEhdZd IVs5mjEw6eGbAEuBXzQXExzuEJ7tKepERymtXWEcaWFOuNvHLD6FxKRwNG8mqxbl t6oYP20grtzMEnrTsRSDx3gAoZJF464aZ4NW3RXZ2fko32MjAE3tZ2Tdgoy17m2X riQGDcn82sLlvQ0AruO0+RRxImqZVU3DTOxr4TCR+6kxUQMe3RfCA/f/5VEn27Yl 5Q3zsT7Tquwy8+fILvfnBSe9kpiR4GAA -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:32 2025 by rpki-client