$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: DLI46/bLB2luqa+84Csx7n9uqa6g54YTr2Nu6KhfTlw= Subject key identifier: FE:9C:DE:78:7A:0B:31:CD:87:5F:CB:44:42:10:C9:D1:81:DD:4D:DE Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 02B3 Signing time: Sat 23 Aug 2025 01:44:29 +0000 Manifest this update: Sat 23 Aug 2025 01:44:28 +0000 Manifest next update: Sat 30 Aug 2025 01:44:28 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: LGInwKl2o8VawBOBmqwFItLUWFdM553Kn3Wp1pwzYzs=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Aug 23 01:44:28 2025 GMT Not After : Aug 30 01:44:28 2025 GMT Subject: CN=68a91cfc-e2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:fb:a8:e5:58:20:e7:0b:72:10:37:2c:ef: 21:3b:49:a3:37:54:dd:f2:bb:0a:6b:78:42:75:54: c9:db:60:20:65:63:03:9a:64:4c:10:09:ed:3d:21: 81:ec:c3:a7:ea:42:62:68:75:f3:18:51:68:4a:5e: fd:a8:4b:54:00:14:db:d2:b6:ae:05:ef:54:66:e6: 89:76:36:80:3f:a9:14:25:8a:95:eb:34:89:2e:e0: 64:9a:db:63:f2:61:bd:27:e5:4d:c4:c7:2a:bf:79: 70:42:3d:44:da:f0:bf:7f:ee:0a:c6:cc:17:a5:29: eb:c3:14:ec:91:72:81:75:7b:cc:4a:a7:ef:a4:2d: eb:21:83:3a:d8:10:78:29:33:5f:ed:b5:35:a8:b7: 3e:5c:26:d1:4d:64:f3:a5:db:ea:6a:ce:9e:ae:b1: 42:f1:a3:49:5d:9a:6a:28:ef:ef:0e:0b:e5:65:b4: 05:c6:db:32:60:34:bb:7d:46:17:f5:69:12:b8:f4: eb:b9:2b:cf:7d:de:3e:dc:01:bd:02:be:72:05:03: a7:ad:13:b4:13:e2:ca:8b:a3:a7:9f:a5:95:56:44: a3:26:2d:cd:9b:b5:6c:85:85:b7:e8:78:06:70:25: 34:f6:88:ec:b0:52:c7:77:4d:19:66:66:79:29:e8: 62:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9C:DE:78:7A:0B:31:CD:87:5F:CB:44:42:10:C9:D1:81:DD:4D:DE X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:06:36:af:1e:1a:68:bd:2a:02:26:92:b8:09:48:78:09:06: 7b:b7:1e:8a:59:74:ac:e3:93:41:ae:82:05:20:f6:4a:f3:00: 83:b5:ea:84:1e:c0:88:06:f5:c1:be:5d:43:aa:35:ba:d0:38: 86:28:84:d3:53:03:78:8b:3b:0b:fa:c2:bd:90:3f:50:6a:c8: 4c:57:a1:b7:30:ec:18:33:39:ba:19:5b:31:49:76:50:14:cf: 8f:02:07:d2:99:12:47:73:d6:0f:b4:1b:a5:b3:b5:88:b0:8d: cf:8c:a7:94:0a:98:fa:ba:de:6a:3b:c3:1e:8c:6c:6c:d8:e3: 78:0a:10:f0:14:e0:b1:94:8c:2e:44:5e:08:b7:f0:bb:7a:1a: 63:e5:c2:63:5e:fa:84:9e:3d:f4:6a:5b:23:64:93:07:6f:7c: f9:bc:0f:2e:77:15:7a:7f:7b:aa:d6:12:35:1b:cd:fe:51:07: 51:53:cc:f9:85:ca:0b:ed:25:dd:2a:14:af:ea:00:90:c3:40: 9f:9d:c0:c6:d3:01:d1:a6:91:d5:bc:b0:d8:d3:cc:b1:3e:59: 00:e4:81:30:cf:a0:38:92:d3:58:b5:ce:f8:7f:ee:1c:a2:f4: 87:cb:7d:77:15:f8:df:98:f0:82:bd:8e:92:b3:4f:f5:b0:17: ef:d3:69:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUwODIzMDE0NDI4WhcNMjUwODMwMDE0NDI4WjAYMRYwFAYD VQQDEw02OGE5MWNmYy1lMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJT7qOVYIOcLchA3LO8hO0mjN1Td8rsKa3hCdVTJ22AgZWMDmmRMEAntPSGB 7MOn6kJiaHXzGFFoSl79qEtUABTb0rauBe9UZuaJdjaAP6kUJYqV6zSJLuBkmttj 8mG9J+VNxMcqv3lwQj1E2vC/f+4KxswXpSnrwxTskXKBdXvMSqfvpC3rIYM62BB4 KTNf7bU1qLc+XCbRTWTzpdvqas6errFC8aNJXZpqKO/vDgvlZbQFxtsyYDS7fUYX 9WkSuPTruSvPfd4+3AG9Ar5yBQOnrRO0E+LKi6Onn6WVVkSjJi3Nm7VshYW36HgG cCU09ojssFLHd00ZZmZ5Kehi3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6c3nh6 CzHNh1/LREIQydGB3U3eMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjBjavHhpovSoCJpK4CUh4CQZ7tx6KWXSs45NBroIFIPZK8wCDteqE HsCIBvXBvl1DqjW60DiGKITTUwN4izsL+sK9kD9QashMV6G3MOwYMzm6GVsxSXZQ FM+PAgfSmRJHc9YPtBuls7WIsI3PjKeUCpj6ut5qO8MejGxs2ON4ChDwFOCxlIwu RF4It/C7ehpj5cJjXvqEnj30alsjZJMHb3z5vA8udxV6f3uq1hI1G83+UQdRU8z5 hcoL7SXdKhSv6gCQw0CfncDG0wHRppHVvLDY08yxPlkA5IEwz6A4ktNYtc74f+4c ovSHy313FfjfmPCCvY6Ss0/1sBfv02nG -----END CERTIFICATE-----Generated at Sun Aug 24 06:34:05 2025 by rpki-client