$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json) Hash identifier: JsHvrjtoXXGqO+N2I41gj3jTh+9CJPvZ86xR38nkAW4= Subject key identifier: 13:74:E2:16:D7:58:26:85:2A:7A:BF:1C:7C:FC:A0:DC:F0:EF:AC:2D Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Certificate serial: 1AAF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft Manifest number: 1AA8 Signing time: Fri 22 Aug 2025 15:45:27 +0000 Manifest this update: Fri 22 Aug 2025 15:45:27 +0000 Manifest next update: Fri 29 Aug 2025 15:45:27 +0000 Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: uei4d67GWU6aMc4mEYZNK9bf/srdqlFDEcPlUNGRnYY=) 2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: EvR5gfpmDfAVmSaNBVyf31LRk9wTqTU6OTSsCqxA5UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6831 (0x1aaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Validity Not Before: Aug 22 15:45:27 2025 GMT Not After : Aug 29 15:45:27 2025 GMT Subject: CN=68a89097-72e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:04:b2:f7:da:1f:ff:d4:e5:3e:f5:ef:5f: 4d:d5:47:58:3a:c5:73:b6:b7:da:f3:31:35:4a:d1: f7:04:e3:f9:ba:17:90:97:f5:a1:88:5b:a8:45:31: a3:ca:d2:40:7e:50:14:d1:ef:97:08:06:f1:bb:58: b7:fd:bb:42:2f:0b:0b:4e:6f:3c:7b:46:1f:7b:49: 2a:98:dd:30:2e:94:12:8f:7f:78:50:1b:50:00:ae: 41:02:f3:30:d5:3e:e5:bc:88:8e:86:d0:35:6c:f4: 9b:af:d7:ca:61:e3:77:91:a8:72:f5:c2:08:ce:1a: 0b:8a:03:1e:78:6e:59:66:15:63:2c:f8:4d:ad:7a: 6f:a2:e0:0f:1f:a7:3e:7d:6f:5b:b8:ba:dc:f3:dc: de:80:6a:94:bf:65:58:c2:0c:cb:d1:8a:16:e4:29: 81:0f:a0:4e:f9:e0:91:22:be:19:45:c7:df:80:5b: 6c:73:01:8d:ba:e3:b4:0a:46:20:b2:67:c9:02:ad: a2:ff:c0:2b:5b:7d:97:2f:ae:43:45:d4:c3:48:36: 11:5d:7c:2e:a7:90:24:d8:86:1a:3e:6b:42:3a:61: 96:88:fa:c0:97:fa:04:f3:f0:2a:06:26:c1:43:8a: 56:bf:4a:94:33:41:a5:de:00:18:2b:24:40:9b:f7: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:74:E2:16:D7:58:26:85:2A:7A:BF:1C:7C:FC:A0:DC:F0:EF:AC:2D X509v3 Authority Key Identifier: keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:b8:bb:aa:09:b1:44:be:2e:37:00:ec:78:2f:4a:96:2c: 93:fa:75:9a:e2:ca:d8:82:fa:d5:2e:ba:da:bb:b8:e0:60:10: 3e:a5:97:cb:d1:2e:24:da:28:c8:bb:5f:91:1b:6e:19:5c:6c: 5b:9b:38:a0:c4:ba:b0:13:21:c9:49:a5:a5:2e:e7:7d:90:60: 6c:f7:ee:5e:c0:16:a9:34:9f:59:1a:73:1f:71:29:57:0f:13: a8:7f:3d:ce:7b:c8:a4:3c:0b:b5:12:8c:23:16:83:26:fe:1d: b5:a6:39:e0:4b:dc:bb:55:35:ca:1d:1a:6a:bf:02:19:29:16: 99:2f:eb:ca:06:c2:24:e8:63:ca:fa:88:75:7e:7d:c6:63:15: bd:a7:ac:60:ce:09:77:e4:3d:d4:37:b1:04:13:5f:58:93:05: 1d:89:33:89:79:4d:1e:5e:ed:cf:c4:f8:7e:24:97:87:7a:da: b5:8f:ab:03:d0:7b:c3:3f:cc:39:16:79:15:83:e8:87:b2:ff: 88:bf:d8:7f:d9:45:49:52:79:e6:e2:ba:c6:87:c5:de:99:cc: 46:4b:df:1c:e3:ca:42:06:06:41:1f:18:2f:d9:be:af:9a:75: ab:50:23:3a:6c:1b:6b:a9:26:c2:1e:c0:04:fe:50:b3:a4:15: ff:0a:c9:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex NzRGOUM0M0MwHhcNMjUwODIyMTU0NTI3WhcNMjUwODI5MTU0NTI3WjAYMRYwFAYD VQQDEw02OGE4OTA5Ny03MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vEEsvfaH//U5T71719N1UdYOsVztrfa8zE1StH3BOP5uheQl/WhiFuoRTGj ytJAflAU0e+XCAbxu1i3/btCLwsLTm88e0Yfe0kqmN0wLpQSj394UBtQAK5BAvMw 1T7lvIiOhtA1bPSbr9fKYeN3kahy9cIIzhoLigMeeG5ZZhVjLPhNrXpvouAPH6c+ fW9buLrc89zegGqUv2VYwgzL0YoW5CmBD6BO+eCRIr4ZRcffgFtscwGNuuO0CkYg smfJAq2i/8ArW32XL65DRdTDSDYRXXwup5Ak2IYaPmtCOmGWiPrAl/oE8/AqBibB Q4pWv0qUM0Gl3gAYKyRAm/cBnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN04hbX WCaFKnq/HHz8oNzw76wtMB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4 RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5 SjdoT3N0VW1jTW9YVDV4RHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhzLi7qgmxRL4uNwDseC9KliyT+nWa4srYgvrVLrrau7jgYBA+pZfL 0S4k2ijIu1+RG24ZXGxbmzigxLqwEyHJSaWlLud9kGBs9+5ewBapNJ9ZGnMfcSlX DxOofz3Oe8ikPAu1EowjFoMm/h21pjngS9y7VTXKHRpqvwIZKRaZL+vKBsIk6GPK +oh1fn3GYxW9p6xgzgl35D3UN7EEE19YkwUdiTOJeU0eXu3PxPh+JJeHetq1j6sD 0HvDP8w5FnkVg+iHsv+Iv9h/2UVJUnnm4rrGh8XemcxGS98c48pCBgZBHxgv2b6v mnWrUCM6bBtrqSbCHsAE/lCzpBX/Csnk -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:59 2025 by rpki-client