$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: Lyw35vfUCD8D28abJ+cK2WaHMR4SvRTJBsbTxUs7uQs= Subject key identifier: EE:DB:D4:06:CF:77:FC:74:D2:F9:6B:58:A3:7D:CF:32:78:81:8C:1E Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 013E Signing time: Sat 23 Aug 2025 04:35:00 +0000 Manifest this update: Sat 23 Aug 2025 04:35:00 +0000 Manifest next update: Sat 30 Aug 2025 04:35:00 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: lAIxteAeHhrNdIpJVGDg7m0+9LO9D0OkSBWZFIkvTe0=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Aug 23 04:35:00 2025 GMT Not After : Aug 30 04:35:00 2025 GMT Subject: CN=68a944f4-7a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:06:82:70:9d:72:c3:b5:d3:4c:ac:05:45: cb:39:4c:cb:08:fa:53:d1:7b:1e:3c:0d:aa:af:c3: e3:dd:ad:30:4f:5e:01:9b:0b:b8:83:67:05:ec:71: 2d:f2:b0:fd:56:f3:81:5c:8e:42:7b:a5:58:43:54: 22:50:50:f0:c1:99:23:75:fe:4e:48:fa:eb:7e:d5: 09:c7:bc:42:fb:7e:40:09:72:de:7e:04:1b:4a:d3: ba:b4:fd:d8:96:cc:d4:e4:fc:75:82:d5:fc:0e:36: a7:7b:0b:d4:99:9e:b4:2c:5b:18:67:d9:91:34:3c: 4f:05:a9:81:bb:37:9d:e7:ae:7b:aa:58:36:71:27: 88:4a:82:09:28:5d:03:4a:85:7a:d7:9f:d4:2b:f4: ca:79:3c:82:95:d1:92:a1:11:f7:02:d8:26:0d:24: 09:9a:74:16:0c:59:f9:e8:18:61:a5:92:58:4d:52: 6b:e0:cc:6c:62:a1:dd:ae:dc:dc:12:9a:e5:62:b4: ae:18:44:24:2b:65:7a:19:fa:e3:b1:b8:8e:a4:23: 77:46:e6:37:9a:b9:ee:a1:ef:a3:ca:4e:ab:bf:31: d9:50:5c:86:03:df:71:ac:d3:fc:3a:d0:53:94:0d: a9:a9:06:ed:89:25:50:16:a3:ae:e4:c6:58:3a:97: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DB:D4:06:CF:77:FC:74:D2:F9:6B:58:A3:7D:CF:32:78:81:8C:1E X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d3:80:ae:9f:02:f5:65:35:18:18:37:ec:41:82:58:4c:fa: a4:13:38:3c:66:99:24:11:f2:22:8d:d9:ff:8b:96:19:76:fb: 89:ab:96:36:99:75:60:9b:b7:2a:56:db:5c:4a:58:85:8e:c7: ab:4f:88:27:e2:71:9c:de:bd:a0:8b:3a:7f:bb:8e:f7:a3:18: e7:a5:ba:47:c0:68:7f:36:a1:23:29:b1:0e:0c:fc:f0:b5:1e: 9a:6c:ea:7f:2d:0d:bd:0a:a2:0d:45:04:2a:f7:a7:9f:86:32: 5e:fe:e5:80:6d:b7:23:c9:aa:d9:9f:b3:56:4b:87:ce:cd:68: 67:7e:a8:00:60:cf:73:13:47:fe:be:57:93:26:00:a4:31:f5: aa:53:3b:ee:ae:21:71:2c:ee:2e:bf:83:a9:68:a9:9b:89:76: 29:5b:ec:c7:b9:bd:4a:0e:2b:aa:87:7c:b6:e6:e1:3f:65:1c: 90:d8:95:c3:d3:4c:b5:93:4d:98:f3:b5:bc:8d:05:5a:46:e8: f7:9a:0e:6d:33:43:3f:26:de:0e:0c:0b:7a:ef:80:4c:a9:84: 17:e2:97:71:b8:a6:15:f7:82:03:08:c8:38:0d:46:b3:db:cd: 52:6b:70:a6:1a:57:ba:5b:e3:6a:ae:d8:84:1e:56:c6:69:19: 76:5a:45:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUwODIzMDQzNTAwWhcNMjUwODMwMDQzNTAwWjAYMRYwFAYD VQQDEw02OGE5NDRmNC03YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2koGgnCdcsO100ysBUXLOUzLCPpT0XsePA2qr8Pj3a0wT14Bmwu4g2cF7HEt 8rD9VvOBXI5Ce6VYQ1QiUFDwwZkjdf5OSPrrftUJx7xC+35ACXLefgQbStO6tP3Y lszU5Px1gtX8DjanewvUmZ60LFsYZ9mRNDxPBamBuzed5657qlg2cSeISoIJKF0D SoV615/UK/TKeTyCldGSoRH3AtgmDSQJmnQWDFn56BhhpZJYTVJr4MxsYqHdrtzc EprlYrSuGEQkK2V6GfrjsbiOpCN3RuY3mrnuoe+jyk6rvzHZUFyGA99xrNP8OtBT lA2pqQbtiSVQFqOu5MZYOpc01wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7b1AbP d/x00vlrWKN9zzJ4gYweMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB504CunwL1ZTUYGDfsQYJYTPqkEzg8ZpkkEfIijdn/i5YZdvuJq5Y2 mXVgm7cqVttcSliFjserT4gn4nGc3r2gizp/u473oxjnpbpHwGh/NqEjKbEODPzw tR6abOp/LQ29CqINRQQq96efhjJe/uWAbbcjyarZn7NWS4fOzWhnfqgAYM9zE0f+ vleTJgCkMfWqUzvuriFxLO4uv4OpaKmbiXYpW+zHub1KDiuqh3y25uE/ZRyQ2JXD 00y1k02Y87W8jQVaRuj3mg5tM0M/Jt4ODAt674BMqYQX4pdxuKYV94IDCMg4DUaz 281Sa3CmGle6W+NqrtiEHlbGaRl2WkVi -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:45 2025 by rpki-client