$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: 9WuOMiGCY8oyq0KS1uuZ3OSWAMhaHirSNVOsLcVDvvY= Subject key identifier: D6:9D:AF:7E:9D:3A:1D:58:78:67:C5:C3:DA:0A:20:EA:81:DC:98:26 Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 016B Signing time: Sat 23 Aug 2025 03:57:51 +0000 Manifest this update: Sat 23 Aug 2025 03:57:50 +0000 Manifest next update: Sat 30 Aug 2025 03:57:50 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: WD63Kqr2IFDAJJoSVITZd2uOwItREagDVjAofjgrUfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Aug 23 03:57:50 2025 GMT Not After : Aug 30 03:57:50 2025 GMT Subject: CN=68a93c3e-d081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:e3:e6:c7:f8:f2:ae:38:ca:83:91:15:44: 86:b5:69:78:cb:e3:51:01:e7:5b:c3:80:bd:02:62: e1:7e:0d:58:82:ad:9a:ba:2f:c8:ed:dd:ba:04:20: 66:89:dc:12:1c:10:ba:ae:8d:b2:d6:5e:f8:d7:f3: 20:19:7e:7c:3e:24:bd:6f:00:58:bd:32:d1:26:0a: 65:68:0c:1a:26:c3:b6:51:0d:b8:97:c1:e0:99:dd: d0:53:f9:07:40:b8:07:3e:d6:00:b0:39:bc:4f:4d: da:24:11:0b:f3:46:ba:95:69:fe:67:fe:4c:4a:73: d8:1f:1f:7a:ca:b8:32:14:e1:06:b8:72:29:c5:ef: d7:0d:83:04:ed:d4:93:75:2d:fd:05:87:f0:dc:6e: 74:80:0a:92:06:b6:eb:04:04:88:21:f9:6c:48:fc: c5:da:f2:d2:3f:3c:1b:13:e9:b8:31:88:a6:10:90: 80:4c:18:e6:d5:47:d7:93:15:ba:f8:26:b2:1b:f3: 58:5a:53:70:43:50:a3:4d:71:ad:be:d4:c3:ea:a2: c7:21:da:c9:53:23:e7:0e:f7:62:a4:e3:2d:e6:7f: 61:c5:3f:c4:28:f3:e8:31:3a:ab:a4:ef:06:77:90: 24:d7:ef:7c:55:12:ab:dc:44:2a:bd:ed:10:42:ff: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9D:AF:7E:9D:3A:1D:58:78:67:C5:C3:DA:0A:20:EA:81:DC:98:26 X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c9:d5:ed:19:e8:50:8c:7d:c2:6b:c8:d1:8c:31:f1:b3:0a: 4e:29:bc:d4:8b:2c:b6:9b:ec:6f:8d:40:49:55:56:7d:0b:fc: 62:7b:2d:fc:13:ba:e7:8a:d4:c0:ba:3b:22:1b:bd:41:85:68: 7c:dc:7d:fb:0b:1c:10:28:83:c2:05:d2:fb:9d:a6:72:a5:e8: 5a:f9:ab:c2:dd:f8:71:e2:b4:95:c6:3b:67:1b:70:9a:a2:b1: 25:54:24:8c:fd:76:5e:9a:b2:71:09:27:57:94:1a:a8:be:91: dc:38:98:36:8d:9b:c0:81:65:bd:57:50:07:2f:64:38:4c:be: b0:fb:82:1d:c8:74:81:84:c3:23:38:8f:af:ba:f3:77:91:0d: dd:dd:f6:a9:fb:8f:69:d2:be:42:35:c2:65:76:22:2c:24:1a: 86:62:14:86:52:8e:3a:10:28:18:ab:56:84:b7:90:37:73:89: a9:cd:fb:f6:54:c6:e4:57:d8:bf:81:c2:fc:35:a1:4b:1f:ce: 39:af:11:e6:d7:8a:66:c9:cd:9d:d8:e7:9b:d3:7d:8c:e2:df: 69:9b:8c:6f:b6:6f:08:8d:4b:8b:04:90:88:c4:9d:59:9d:21: b7:e2:b3:ca:60:ff:b3:7e:5f:f4:27:b9:14:ea:e1:73:3d:10: 2d:4a:f3:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjUwODIzMDM1NzUwWhcNMjUwODMwMDM1NzUwWjAYMRYwFAYD VQQDEw02OGE5M2MzZS1kMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRvj5sf48q44yoORFUSGtWl4y+NRAedbw4C9AmLhfg1Ygq2aui/I7d26BCBm idwSHBC6ro2y1l741/MgGX58PiS9bwBYvTLRJgplaAwaJsO2UQ24l8Hgmd3QU/kH QLgHPtYAsDm8T03aJBEL80a6lWn+Z/5MSnPYHx96yrgyFOEGuHIpxe/XDYME7dST dS39BYfw3G50gAqSBrbrBASIIflsSPzF2vLSPzwbE+m4MYimEJCATBjm1UfXkxW6 +CayG/NYWlNwQ1CjTXGtvtTD6qLHIdrJUyPnDvdipOMt5n9hxT/EKPPoMTqrpO8G d5Ak1+98VRKr3EQqve0QQv/aCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNadr36d Oh1YeGfFw9oKIOqB3JgmMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuydXtGehQjH3Ca8jRjDHxswpOKbzUiyy2m+xvjUBJVVZ9C/xiey38 E7rnitTAujsiG71BhWh83H37CxwQKIPCBdL7naZypeha+avC3fhx4rSVxjtnG3Ca orElVCSM/XZemrJxCSdXlBqovpHcOJg2jZvAgWW9V1AHL2Q4TL6w+4IdyHSBhMMj OI+vuvN3kQ3d3fap+49p0r5CNcJldiIsJBqGYhSGUo46ECgYq1aEt5A3c4mpzfv2 VMbkV9i/gcL8NaFLH845rxHm14pmyc2d2Oeb032M4t9pm4xvtm8IjUuLBJCIxJ1Z nSG34rPKYP+zfl/0J7kU6uFzPRAtSvMw -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:20 2025 by rpki-client