$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: J36Erm11QYSvrfwbYFsoICeNVA+oAUX8tfw7IFiak7c= Subject key identifier: 3C:2E:1D:C3:1E:68:25:72:92:26:1A:E3:24:02:9F:97:DE:C5:88:6B Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 08A4 Signing time: Fri 22 Aug 2025 20:40:15 +0000 Manifest this update: Fri 22 Aug 2025 20:40:14 +0000 Manifest next update: Fri 29 Aug 2025 20:40:14 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: QA+VubMHL2RSAaC+ZTWrpYi51kiU6Fj+sVnwXGSSPNs=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: oyNqHuI92CZn4/vowEHhL13J2MzcFLxMYrnO9NR1z4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Aug 22 20:40:14 2025 GMT Not After : Aug 29 20:40:14 2025 GMT Subject: CN=68a8d5ae-a64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:87:cb:2f:78:a1:b5:33:cf:c9:bd:fd:ac: 1a:79:57:44:7e:a4:be:73:d3:91:c8:f9:4c:eb:83: 52:4e:da:ec:f5:53:54:ad:db:a2:22:77:96:70:5f: e1:fa:0e:0c:7e:59:56:44:88:7f:4f:da:1b:a5:95: f2:53:ba:ae:c7:77:95:21:d0:27:da:93:ef:df:eb: a9:6e:ef:11:5f:78:0e:5e:c7:bc:46:12:97:bc:c2: 42:d7:d9:3d:ac:7c:1a:b3:9b:92:0a:95:86:57:ee: 50:21:c3:c0:23:2b:15:f7:65:5a:9b:9b:09:fb:1c: 2f:d2:82:f3:a3:da:c9:ac:53:78:a5:21:9e:e1:a7: 6c:cf:36:e4:82:fa:9c:51:be:a2:56:b4:9d:a2:2f: f2:45:95:4a:52:b4:e8:c7:2a:e6:72:66:72:ae:50: 07:bd:a8:0e:fa:6d:e2:f7:8a:0c:28:17:a8:0b:3e: df:9a:d9:c7:81:b2:15:00:52:a7:7a:a5:85:af:75: 57:17:46:20:ed:73:58:5e:db:9f:bc:a2:08:09:32: e3:3b:78:92:a4:fe:76:3b:54:16:23:93:65:a9:f7: aa:ca:40:9a:db:57:0f:df:0a:6d:ef:fc:53:0e:34: 66:14:1e:fd:f6:bb:cb:e4:33:71:46:de:d8:b1:70: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:1D:C3:1E:68:25:72:92:26:1A:E3:24:02:9F:97:DE:C5:88:6B X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f5:e3:12:45:15:60:de:83:4a:64:79:b8:b0:ea:b1:89:86: 28:34:38:d5:5d:32:63:73:bf:42:b2:16:db:9a:7b:f0:c7:bb: 3f:d9:32:6d:45:c5:88:1d:2d:61:57:cc:0a:d4:2b:24:c1:59: 6c:17:da:ce:0a:e6:b5:49:79:72:9a:37:28:1e:aa:88:17:0f: 34:fa:60:8d:c2:3d:2d:ab:91:87:38:ea:28:8a:ac:ff:f4:42: 2a:28:68:0a:72:e2:bf:79:67:5a:f9:2b:40:76:ab:96:f6:fe: f2:85:27:e4:4e:84:a8:33:8f:26:a4:c6:a1:98:e0:19:38:e8: d4:a3:a2:a2:a3:11:5e:6b:a3:f2:f1:52:72:ad:87:f3:7c:b3: 29:49:67:40:a8:5e:c1:0a:d4:89:47:a4:8e:2d:2c:39:c3:02: 63:e2:a5:47:4e:da:4b:69:7d:3b:d3:c3:d9:ef:c8:0e:0f:55: 18:46:32:d6:d5:57:45:41:7a:9c:ff:5e:b0:6a:9e:e9:95:df: 03:5b:89:5c:40:a1:4c:b9:dd:e2:ea:ff:f3:0c:f7:93:3f:d0: 9f:33:a9:36:cd:07:c6:1b:73:85:d7:a6:c8:aa:cb:f0:bc:36: 9a:ce:00:7d:e1:09:9e:2e:08:cf:2b:77:d9:dc:97:ff:cf:9b: a0:e8:b4:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjUwODIyMjA0MDE0WhcNMjUwODI5MjA0MDE0WjAYMRYwFAYD VQQDEw02OGE4ZDVhZS1hNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWGHyy94obUzz8m9/awaeVdEfqS+c9ORyPlM64NSTtrs9VNUrduiIneWcF/h +g4MfllWRIh/T9obpZXyU7qux3eVIdAn2pPv3+upbu8RX3gOXse8RhKXvMJC19k9 rHwas5uSCpWGV+5QIcPAIysV92Vam5sJ+xwv0oLzo9rJrFN4pSGe4adszzbkgvqc Ub6iVrSdoi/yRZVKUrToxyrmcmZyrlAHvagO+m3i94oMKBeoCz7fmtnHgbIVAFKn eqWFr3VXF0Yg7XNYXtufvKIICTLjO3iSpP52O1QWI5NlqfeqykCa21cP3wpt7/xT DjRmFB799rvL5DNxRt7YsXBd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwuHcMe aCVykiYa4yQCn5fexYhrMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA89eMSRRVg3oNKZHm4sOqxiYYoNDjVXTJjc79Cshbbmnvwx7s/2TJt RcWIHS1hV8wK1CskwVlsF9rOCua1SXlymjcoHqqIFw80+mCNwj0tq5GHOOooiqz/ 9EIqKGgKcuK/eWda+StAdquW9v7yhSfkToSoM48mpMahmOAZOOjUo6KioxFea6Py 8VJyrYfzfLMpSWdAqF7BCtSJR6SOLSw5wwJj4qVHTtpLaX0708PZ78gOD1UYRjLW 1VdFQXqc/16wap7pld8DW4lcQKFMud3i6v/zDPeTP9CfM6k2zQfGG3OF16bIqsvw vDaazgB94QmeLgjPK3fZ3Jf/z5ug6LQp -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:16 2025 by rpki-client