$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: jBbLwFJVvQZp1Bb1AeFfJHwUFf/fsABuG7Dcgr4V7c8= Subject key identifier: F4:29:1E:80:BB:4B:55:6B:0F:FF:62:32:11:37:9C:4E:2C:30:2D:DB Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0EA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0E97 Signing time: Fri 22 Aug 2025 17:48:00 +0000 Manifest this update: Fri 22 Aug 2025 17:48:00 +0000 Manifest next update: Fri 29 Aug 2025 17:48:00 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: en0SOryNyA4rhbK6jfQ0scwcWbADpq6k7qjsH29LYsg=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 8/+2CfJXmYqPi0mhCMFrcurlLwZm0SOUBFUC6aCqVwY=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: 1G+5ZDyz2QsGf1HTn6iCWFVSURJLuJWTrhUJ5NvAbhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3750 (0xea6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Aug 22 17:48:00 2025 GMT Not After : Aug 29 17:48:00 2025 GMT Subject: CN=68a8ad50-448e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:d0:b3:9d:ff:91:5b:eb:3b:a5:05:59:91: 8c:48:77:c1:4b:c6:ca:73:99:4c:d7:01:5d:e1:60: 34:aa:ff:74:57:91:84:9f:82:63:a5:d3:5e:d7:b7: c4:d5:46:71:30:df:d1:22:cc:96:26:93:53:46:5a: c8:51:ef:dc:3c:f1:1c:dc:d8:0c:8c:f7:6d:e1:38: 35:7e:4e:d4:4b:91:f3:3f:40:e7:10:88:8f:a5:78: 78:71:c9:67:48:07:cb:12:5a:6b:95:03:3d:07:cd: 0d:14:e4:aa:9f:55:ff:21:08:09:3e:49:06:bf:49: 9e:c2:f6:c9:48:61:61:2c:62:07:6a:4c:0e:29:5f: 4d:72:96:48:eb:5d:f0:50:f5:54:db:f1:32:4e:32: e6:a4:7b:96:b9:86:c4:6a:16:0a:8f:28:8c:3e:c1: b6:e0:91:eb:2a:6e:42:5b:85:e3:8a:25:cc:15:6a: fb:f0:3f:93:89:db:8b:23:15:ad:40:56:07:6b:14: ae:12:1f:9e:ba:cc:ca:9c:24:2e:2b:9b:7b:c7:c1: 51:2c:60:15:9c:1d:86:d1:0a:c0:b8:87:03:d6:ee: 9b:32:31:8e:e9:c3:cd:41:a0:0a:b5:75:09:4d:15: ef:e8:ef:de:cb:d2:73:94:41:d7:88:d4:a6:ec:6a: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:29:1E:80:BB:4B:55:6B:0F:FF:62:32:11:37:9C:4E:2C:30:2D:DB X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ae:6d:e5:c4:cc:d9:bb:0d:73:cc:8b:f5:c8:1a:55:30:c6: 37:bf:e7:bf:e9:3e:11:0b:b8:a7:e4:cd:7c:ad:9b:3c:a7:fc: 2c:8c:6c:f2:12:b7:1e:d4:79:21:16:1f:5c:75:b3:f4:27:b2: a8:8d:ac:81:23:92:4a:11:ec:ee:15:21:35:3e:2d:2d:15:72: f7:69:d0:89:26:4e:6a:f3:dc:cd:13:00:b5:86:af:83:72:be: 84:91:07:3f:5f:b2:e4:17:06:7b:b7:6b:72:3f:de:a4:5d:63: a9:32:10:9b:6b:f4:34:cb:ec:84:e2:fb:6e:28:64:58:66:b7: 63:ba:ee:4b:38:d1:07:de:76:53:90:4e:36:88:24:45:50:2f: 69:e1:a2:4f:b9:3b:f4:b5:79:af:e9:c1:ce:d4:c9:7f:b7:d3: 02:29:f3:d6:a9:e1:48:df:4b:6e:42:31:ac:00:ed:88:e2:7c: cc:24:1e:5e:54:2d:29:3b:bf:7e:71:8d:7d:b7:a3:b6:c5:f6: 09:c4:a0:ab:9f:e9:95:d9:ba:d7:4a:eb:10:12:79:3f:f2:2c: 27:42:ef:00:28:37:a9:9a:b0:a2:7f:26:03:87:51:84:6a:e6: be:e0:2c:66:36:f5:bb:19:dd:79:70:3b:54:0e:be:47:c1:71: 13:11:09:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjUwODIyMTc0ODAwWhcNMjUwODI5MTc0ODAwWjAYMRYwFAYD VQQDEw02OGE4YWQ1MC00NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg/Qs53/kVvrO6UFWZGMSHfBS8bKc5lM1wFd4WA0qv90V5GEn4JjpdNe17fE 1UZxMN/RIsyWJpNTRlrIUe/cPPEc3NgMjPdt4Tg1fk7US5HzP0DnEIiPpXh4ccln SAfLElprlQM9B80NFOSqn1X/IQgJPkkGv0mewvbJSGFhLGIHakwOKV9NcpZI613w UPVU2/EyTjLmpHuWuYbEahYKjyiMPsG24JHrKm5CW4XjiiXMFWr78D+TiduLIxWt QFYHaxSuEh+euszKnCQuK5t7x8FRLGAVnB2G0QrAuIcD1u6bMjGO6cPNQaAKtXUJ TRXv6O/ey9JzlEHXiNSm7GoEVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQpHoC7 S1VrD/9iMhE3nE4sMC3bMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3rm3lxMzZuw1zzIv1yBpVMMY3v+e/6T4RC7in5M18rZs8p/wsjGzy Erce1HkhFh9cdbP0J7KojayBI5JKEezuFSE1Pi0tFXL3adCJJk5q89zNEwC1hq+D cr6EkQc/X7LkFwZ7t2tyP96kXWOpMhCba/Q0y+yE4vtuKGRYZrdjuu5LONEH3nZT kE42iCRFUC9p4aJPuTv0tXmv6cHO1Ml/t9MCKfPWqeFI30tuQjGsAO2I4nzMJB5e VC0pO79+cY19t6O2xfYJxKCrn+mV2brXSusQEnk/8iwnQu8AKDepmrCifyYDh1GE aua+4CxmNvW7Gd15cDtUDr5HwXETEQmO -----END CERTIFICATE-----Generated at Sun Aug 24 06:19:46 2025 by rpki-client