$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: ZOlnjtIo8dKE3Ws/XX0F5W3ALsURcyx0Vj2JleRXKvk= Subject key identifier: 93:B9:BB:87:32:7D:69:01:35:B3:B8:BA:6E:99:03:31:DF:3D:87:5C Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:57:08 +0000 Manifest this update: Sat 23 Aug 2025 07:57:08 +0000 Manifest next update: Sat 30 Aug 2025 07:57:08 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: G0soCfX108ptMQClB3EjSVsg7KE+4ZHKJdmQw6G7gWU=) 2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: tOvv14j7PVKjZOUCL/zHGwFCXfHBrWhMTrZ97/b78ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Aug 23 07:57:08 2025 GMT Not After : Aug 30 07:57:08 2025 GMT Subject: CN=68a97454-368f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:41:c1:56:05:04:4c:e4:ad:15:9e:74:c6:12: 45:13:41:1e:01:4e:87:c1:e7:6f:7d:64:2b:cc:2b: f9:32:90:4f:c2:f6:1c:26:c7:96:93:54:e0:7b:a7: 85:aa:44:34:ea:42:ce:cd:fd:75:7a:b5:14:be:0a: 47:30:d1:eb:cb:75:94:69:a9:f1:c8:f3:a6:b5:65: ec:8c:ed:a4:6a:2d:2b:09:11:13:aa:34:f4:37:cf: d1:78:6e:2d:0c:3d:fb:b8:d5:df:2b:37:c4:19:49: 6f:55:e0:ba:67:eb:cb:63:88:53:ae:95:72:0f:4a: 8b:af:a1:fd:f0:89:a3:7b:60:86:1d:70:ef:83:8b: 35:64:c4:53:2d:4e:e5:cf:2f:e3:51:ce:b6:72:f4: c9:61:43:68:7e:7c:71:95:0f:46:33:0f:2d:96:26: 5c:9b:af:f8:81:05:d8:e1:0e:b0:11:85:12:a9:bc: 48:aa:be:ea:f3:56:ab:de:24:8a:78:83:b1:8e:3f: 48:07:7f:ce:7e:3a:a2:de:fe:7e:a0:9b:70:9f:38: 41:da:9e:d3:c9:b9:8b:81:0b:4c:d5:ff:99:85:b2: bc:4c:ad:fa:e4:b3:88:f0:60:4e:76:db:6f:2d:28: a7:05:c8:af:7f:07:48:53:d7:84:25:a0:2f:29:d0: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:BB:87:32:7D:69:01:35:B3:B8:BA:6E:99:03:31:DF:3D:87:5C X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d9:11:dd:eb:ed:e1:a9:78:14:86:2d:2c:94:0e:b2:1f:78: 03:ed:b0:2d:d5:3e:e2:d0:c3:91:77:12:fb:bf:ed:98:06:50: da:c6:a9:cc:7a:29:54:33:09:5b:ab:aa:1e:5b:26:50:14:3b: 75:fd:c9:80:f8:fe:d7:14:0a:24:a8:46:b7:c5:ce:27:a5:4e: 7b:99:b0:7c:62:5f:c1:5e:1b:62:02:bb:47:e4:0b:e1:46:bd: 6d:53:fb:92:b6:e4:8c:da:73:18:f4:c3:d3:67:e8:7c:63:a8: 72:c8:11:41:3d:3e:f1:85:8f:a4:32:c3:cc:c6:99:90:32:70: 70:2b:49:82:57:34:b7:f7:d2:13:cb:c7:99:45:3c:87:d1:9b: 09:21:a5:2a:6d:30:76:f6:11:a5:31:b9:07:ae:54:e2:e4:c1: a1:97:57:ac:8c:62:6e:93:44:c9:a7:88:6b:47:f3:01:07:a0: d0:8d:3c:b6:a5:02:1d:3d:c5:79:61:ad:cb:ba:fb:6d:ad:9b: c3:97:47:c2:c8:d5:bf:01:e3:47:95:5b:17:8d:a6:99:1a:4e: 2f:13:f2:ee:b4:2c:76:8b:cb:ca:b1:b7:de:bc:e8:a3:8a:21: db:e8:dd:43:8d:64:85:2d:0c:2e:a9:91:eb:87:ed:c5:39:2a: 0b:af:28:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoOERFOUQwNzRGRjNDOEQ1MTU0MTVFQkYwRjBFNTZBQzAz RUVBREQzQTAeFw0yNTA4MjMwNzU3MDhaFw0yNTA4MzAwNzU3MDhaMBgxFjAUBgNV BAMTDTY4YTk3NDU0LTM2OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeQcFWBQRM5K0VnnTGEkUTQR4BTofB5299ZCvMK/kykE/C9hwmx5aTVOB7p4Wq RDTqQs7N/XV6tRS+Ckcw0evLdZRpqfHI86a1ZeyM7aRqLSsJEROqNPQ3z9F4bi0M Pfu41d8rN8QZSW9V4Lpn68tjiFOulXIPSouvof3wiaN7YIYdcO+DizVkxFMtTuXP L+NRzrZy9MlhQ2h+fHGVD0YzDy2WJlybr/iBBdjhDrARhRKpvEiqvurzVqveJIp4 g7GOP0gHf85+OqLe/n6gm3CfOEHantPJuYuBC0zV/5mFsrxMrfrks4jwYE52228t KKcFyK9/B0hT14QloC8p0FB/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk7m7hzJ9 aQE1s7i6bpkDMd89h1wwHwYDVR0jBBgwFoAUjenQdP88jVFUFevw8OVqwD7q3Tow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzNEOEFDNTQ2M0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamVuUWRQODhqVkZVRmV2dzhPVnF3RDdxM1RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzNEOEFDNTQ2M0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZG VUZldnc4T1Zxd0Q3cTNUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACDZEd3r7eGpeBSGLSyUDrIfeAPtsC3VPuLQw5F3Evu/7ZgGUNrGqcx6 KVQzCVurqh5bJlAUO3X9yYD4/tcUCiSoRrfFzielTnuZsHxiX8FeG2ICu0fkC+FG vW1T+5K25Izacxj0w9Nn6HxjqHLIEUE9PvGFj6Qyw8zGmZAycHArSYJXNLf30hPL x5lFPIfRmwkhpSptMHb2EaUxuQeuVOLkwaGXV6yMYm6TRMmniGtH8wEHoNCNPLal Ah09xXlhrcu6+22tm8OXR8LI1b8B40eVWxeNppkaTi8T8u60LHaLy8qxt9686KOK Idvo3UONZIUtDC6pkeuH7cU5KguvKGs= -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:51 2025 by rpki-client