$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: VxrVbsiv3Kw2NR2NzEJ/shv8QbpG9LrWCMMOr4LuoKQ= Subject key identifier: C3:14:93:9F:6F:D1:0E:C1:D9:51:B8:DD:CB:B2:40:6D:CD:61:D8:E2 Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: D7 Signing time: Sat 23 Aug 2025 05:43:12 +0000 Manifest this update: Sat 23 Aug 2025 05:43:11 +0000 Manifest next update: Sat 30 Aug 2025 05:43:11 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: 5wCW0zjwWLxakDWtDjFWwR/OjF23kWb1aDJ7TJfwgIo=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Aug 23 05:43:11 2025 GMT Not After : Aug 30 05:43:11 2025 GMT Subject: CN=68a954f0-2e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:04:00:c9:51:8c:36:ea:af:9d:cd:20:e3: a7:f1:3f:95:1b:84:4a:fd:66:22:bc:54:41:30:fe: e5:f3:be:51:79:62:57:0c:6b:a2:79:29:c7:33:8b: 5e:30:3b:a6:8c:11:94:08:3e:8b:91:66:3f:a6:42: 31:26:9a:8f:a7:9b:1b:07:e3:20:eb:6d:17:53:9a: 60:de:1c:12:00:1d:88:52:ed:db:76:cf:94:e1:6b: 64:cb:60:a9:92:77:76:72:b5:c6:9e:8b:44:74:5f: 23:6f:52:3b:ea:fd:98:d2:e5:d3:aa:ad:24:52:62: 0a:eb:b2:b0:7f:2f:da:0d:b7:bf:31:8a:0d:6b:fe: 49:3e:d8:8b:3a:3f:a2:aa:6b:39:f6:fa:71:62:46: 6b:04:0a:33:01:a3:39:82:3c:89:df:c5:23:06:8c: 7e:18:c7:a5:83:58:e5:20:63:32:d6:4e:71:67:8b: 87:e1:81:3d:5d:27:e9:77:39:13:4a:ae:18:b7:13: 3d:7f:78:7f:27:0c:fd:a1:99:d5:24:1e:b1:f0:b7: de:24:a0:c3:89:ca:70:b2:f6:6f:fb:6c:64:78:2a: 26:a2:30:6f:dc:59:c2:e5:fc:23:68:1e:76:d8:ff: 82:b0:c4:31:70:32:ab:11:bc:3e:b7:fc:6d:90:ce: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:14:93:9F:6F:D1:0E:C1:D9:51:B8:DD:CB:B2:40:6D:CD:61:D8:E2 X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b7:db:64:66:cf:7b:d2:65:b5:f4:54:7e:1e:b3:7a:b5:c8: 0a:aa:a0:e1:99:25:07:7e:5b:f2:7b:35:3d:f7:4f:6d:0e:3f: 5a:4b:f1:ff:3b:3b:c3:19:8a:f5:c6:e0:e9:28:7f:f2:2d:a0: fc:5c:8b:d0:f6:ba:46:36:72:cd:5c:23:f7:cd:48:f6:ba:24: 22:6e:21:fa:82:da:67:6b:4b:6f:67:aa:0f:82:16:43:03:57: b5:84:52:df:cc:74:5d:db:d9:bc:32:42:65:c1:3d:72:5f:8f: 3d:a9:aa:ad:12:f7:81:1e:a7:3a:d5:90:40:23:92:92:29:c6: 32:95:d7:fb:a7:ef:31:a8:4e:6a:f9:45:11:38:53:8f:37:f1: 17:99:bf:c9:1a:f8:f9:4c:35:2b:4d:a0:19:7b:4c:7c:a1:94: ab:c4:83:32:8a:87:1b:1b:06:5f:70:69:a0:07:6c:02:22:c8: 32:70:ab:27:19:bc:84:9e:fe:88:60:fa:91:86:86:08:3a:92: f3:f3:9a:93:26:b2:9f:a5:16:00:b4:33:e1:21:09:2b:7b:aa: af:f3:5a:cd:06:87:ce:18:3d:7d:2f:2b:fd:f2:e2:a6:75:80: e9:c5:d3:40:55:21:df:66:c5:ae:74:e6:09:57:a8:42:ba:ca: fe:85:38:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUwODIzMDU0MzExWhcNMjUwODMwMDU0MzExWjAYMRYwFAYD VQQDEw02OGE5NTRmMC0yZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAracEAMlRjDbqr53NIOOn8T+VG4RK/WYivFRBMP7l875ReWJXDGuieSnHM4te MDumjBGUCD6LkWY/pkIxJpqPp5sbB+Mg620XU5pg3hwSAB2IUu3bds+U4Wtky2Cp knd2crXGnotEdF8jb1I76v2Y0uXTqq0kUmIK67Kwfy/aDbe/MYoNa/5JPtiLOj+i qms59vpxYkZrBAozAaM5gjyJ38UjBox+GMelg1jlIGMy1k5xZ4uH4YE9XSfpdzkT Sq4YtxM9f3h/Jwz9oZnVJB6x8LfeJKDDicpwsvZv+2xkeComojBv3FnC5fwjaB52 2P+CsMQxcDKrEbw+t/xtkM7yewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMUk59v 0Q7B2VG43cuyQG3NYdjiMB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQt9tkZs970mW19FR+HrN6tcgKqqDhmSUHflvyezU9909tDj9aS/H/ OzvDGYr1xuDpKH/yLaD8XIvQ9rpGNnLNXCP3zUj2uiQibiH6gtpna0tvZ6oPghZD A1e1hFLfzHRd29m8MkJlwT1yX489qaqtEveBHqc61ZBAI5KSKcYyldf7p+8xqE5q +UUROFOPN/EXmb/JGvj5TDUrTaAZe0x8oZSrxIMyiocbGwZfcGmgB2wCIsgycKsn GbyEnv6IYPqRhoYIOpLz85qTJrKfpRYAtDPhIQkre6qv81rNBofOGD19Lyv98uKm dYDpxdNAVSHfZsWudOYJV6hCusr+hThz -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:44 2025 by rpki-client