$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: BFNwyrwX8Mz/HLb9Sj51KhCC8eI4K5mcX2aMggxSAIs= Subject key identifier: FA:06:3A:78:94:3E:5D:2D:5A:6D:49:3B:3E:F0:8C:98:83:5A:1C:CF Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 04C7 Signing time: Sat 23 Aug 2025 00:03:38 +0000 Manifest this update: Sat 23 Aug 2025 00:03:38 +0000 Manifest next update: Sat 30 Aug 2025 00:03:38 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: lmCNNjDzseufww/2XXEA6baNT2WjpA3TEiy6sZ/g968=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: Aug 23 00:03:38 2025 GMT Not After : Aug 30 00:03:38 2025 GMT Subject: CN=68a9055a-0a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:12:4e:7f:27:5e:fe:56:b3:72:d4:e9:a1: 1d:9f:f2:49:5b:6f:ec:2c:aa:87:40:53:15:1e:39: 35:98:15:fc:57:f7:be:f7:8b:02:4c:3c:f6:10:a5: 94:81:ec:f9:c3:ed:7b:d5:9a:6b:72:d4:cb:d7:92: e4:6d:73:d7:a1:87:e3:93:c8:6c:06:b9:42:ee:1c: f1:4d:37:16:57:0e:cd:a3:e3:01:e2:2b:a8:6e:0c: cf:e5:b2:cb:23:9c:0d:be:3a:e2:48:30:17:d2:3c: ab:6e:c7:d5:1c:cc:e1:8d:c2:d3:d7:f5:88:d3:2b: 5e:c1:71:6b:10:77:13:cb:9c:e8:c3:a6:ff:7b:9b: 69:ac:90:4e:75:a2:17:cc:16:5b:1c:a1:2f:ce:95: 00:62:f7:0c:95:df:3e:b9:a2:42:ad:1e:7d:6c:aa: aa:d9:f0:87:fe:9a:9e:94:12:eb:c3:31:c7:ef:f0: 51:60:4e:2c:f7:2c:f5:f5:10:5a:31:8f:40:a7:3c: 8a:bc:f1:21:62:db:34:c4:b5:93:59:7f:75:a1:6b: 7c:46:5d:b9:ff:19:59:62:74:ff:e6:24:f2:fe:f7: af:9c:53:5f:4a:7b:c3:44:5a:f2:b3:eb:82:58:b3: 41:56:9a:33:46:e7:e6:f8:3c:08:68:19:bf:aa:bc: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:3A:78:94:3E:5D:2D:5A:6D:49:3B:3E:F0:8C:98:83:5A:1C:CF X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:1b:b6:64:2d:c5:7b:a9:ee:a5:bf:fc:47:ad:a8:31:3f:34: 6a:6a:d1:5b:fe:9b:01:0f:48:76:51:74:b6:b2:bb:df:85:67: 8a:0a:03:af:d9:cd:9f:1c:fe:c8:63:87:bb:d6:37:9d:aa:e5: e9:a1:1f:3f:7a:6d:d8:34:a9:14:3c:03:72:ec:04:52:08:d2: 2d:d9:8e:21:7d:c8:ef:a9:b9:b1:42:82:68:02:3b:c4:6f:cb: be:03:1a:cf:25:b4:78:b0:ff:a5:d3:3b:42:7f:3e:1c:50:f9: b3:9e:f2:68:98:48:41:f6:aa:9e:3e:b6:41:c0:55:ed:25:ee: f3:2f:cc:3d:ae:1e:8c:d8:cb:d2:bf:71:7d:c2:3e:2c:6b:53: cb:c0:dc:2b:6b:e5:0b:aa:e8:d2:10:f8:b6:d2:91:e1:aa:c0: af:94:42:85:1b:98:86:a0:59:66:f0:b9:b3:20:f4:63:b1:37: dd:0c:df:62:87:9f:98:89:4a:2e:1d:9b:e1:86:aa:28:10:86: 3d:ac:04:be:90:35:8a:e7:f8:46:f0:3c:33:dc:47:a0:44:11: a7:2a:0a:ca:ab:51:31:47:73:cc:45:59:19:aa:59:ea:a2:32: 29:c1:a3:6a:64:dd:38:16:8b:1e:dc:23:2b:d7:c1:c6:04:b9: 88:44:e7:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwODIzMDAwMzM4WhcNMjUwODMwMDAwMzM4WjAYMRYwFAYD VQQDEw02OGE5MDU1YS0wYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP0STn8nXv5Ws3LU6aEdn/JJW2/sLKqHQFMVHjk1mBX8V/e+94sCTDz2EKWU gez5w+171ZprctTL15LkbXPXoYfjk8hsBrlC7hzxTTcWVw7No+MB4iuobgzP5bLL I5wNvjriSDAX0jyrbsfVHMzhjcLT1/WI0ytewXFrEHcTy5zow6b/e5tprJBOdaIX zBZbHKEvzpUAYvcMld8+uaJCrR59bKqq2fCH/pqelBLrwzHH7/BRYE4s9yz19RBa MY9ApzyKvPEhYts0xLWTWX91oWt8Rl25/xlZYnT/5iTy/vevnFNfSnvDRFrys+uC WLNBVpozRufm+DwIaBm/qryMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoGOniU Pl0tWm1JOz7wjJiDWhzPMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIG7ZkLcV7qe6lv/xHragxPzRqatFb/psBD0h2UXS2srvfhWeKCgOv 2c2fHP7IY4e71jedquXpoR8/em3YNKkUPANy7ARSCNIt2Y4hfcjvqbmxQoJoAjvE b8u+AxrPJbR4sP+l0ztCfz4cUPmznvJomEhB9qqePrZBwFXtJe7zL8w9rh6M2MvS v3F9wj4sa1PLwNwra+ULqujSEPi20pHhqsCvlEKFG5iGoFlm8LmzIPRjsTfdDN9i h5+YiUouHZvhhqooEIY9rAS+kDWK5/hG8Dwz3EegRBGnKgrKq1ExR3PMRVkZqlnq ojIpwaNqZN04Fose3CMr18HGBLmIROdi -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:59 2025 by rpki-client