$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: So1brdwgvD46UZHDfO7Z8i3VkxPloBsg6joZVKGH7hM= Subject key identifier: F8:E2:4E:3B:FE:2B:8D:4F:18:33:33:7E:98:F1:E3:43:5E:B5:5A:57 Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 0718 Signing time: Fri 22 Aug 2025 22:00:51 +0000 Manifest this update: Fri 22 Aug 2025 22:00:51 +0000 Manifest next update: Fri 29 Aug 2025 22:00:51 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: zYYqV6rAV1Yi9tDQYVVKRG6HaxiYd8Mg8dDqZbMN7/4=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: Aug 22 22:00:51 2025 GMT Not After : Aug 29 22:00:51 2025 GMT Subject: CN=68a8e893-8bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:5f:30:24:91:e0:65:68:13:1a:4f:fe:a1: 5b:46:d5:d8:4e:e5:53:27:fc:60:16:18:3e:fe:89: 03:ba:f2:0a:d2:31:4a:04:79:36:1b:6e:39:93:27: bb:74:f7:a1:30:1f:49:cf:33:a9:8e:8b:51:7b:6a: ea:7b:64:3e:a9:f1:34:5d:07:c8:5c:a4:e2:9c:2f: f3:94:72:8b:0a:18:e2:72:98:75:c8:13:c0:07:88: ad:9f:89:97:88:a4:eb:3c:f9:59:1a:03:cd:c0:21: e8:70:98:c0:e0:de:d6:20:2a:8d:b5:0b:88:50:7f: 3d:1e:07:fa:44:0d:d2:c3:f2:e0:5d:59:ed:30:f3: 9d:14:74:aa:0d:2e:77:43:bb:61:02:c1:e0:4d:40: be:8a:84:f7:13:4d:b5:58:9a:0b:1e:75:36:22:77: 32:06:3a:c2:1c:06:11:83:95:6f:62:e4:dc:83:6a: bb:4b:8e:cd:a3:61:fb:d7:28:94:20:19:be:08:46: b6:f9:03:29:c5:3f:c4:fb:45:e6:71:2a:16:e7:cd: c0:0d:d3:df:03:49:bf:f1:b8:43:b1:de:d3:2a:6f: 18:43:2e:82:c7:cb:3c:8e:c0:77:cf:69:ed:28:0f: 18:2a:27:63:93:23:a9:1f:4c:12:db:92:d4:c1:c9: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:4E:3B:FE:2B:8D:4F:18:33:33:7E:98:F1:E3:43:5E:B5:5A:57 X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:87:b6:49:da:c1:98:2a:1f:01:55:a1:08:84:6c:a6:6f:76: a5:9c:ad:03:8d:ca:da:a9:1a:30:2a:8e:13:56:88:b8:ed:cc: ec:59:43:48:d8:83:07:11:d8:ac:bf:0d:55:7d:d6:fc:85:de: cd:ea:e2:6d:c1:fd:66:40:76:27:72:78:3e:d7:2b:3a:99:1f: 98:2b:2d:ec:78:cd:07:cd:1b:4e:60:1a:4a:8d:8a:3a:bf:ab: f4:71:5a:45:dd:e3:51:26:75:cb:5c:3f:7c:05:96:f0:8d:3c: db:f0:99:b7:e6:bd:db:8b:61:d3:48:9d:28:00:8e:a0:00:90: c1:20:33:67:d7:1a:73:aa:ff:10:b9:c4:3d:1e:24:67:c1:4b: 79:02:30:8d:fc:71:b5:d1:f3:e3:ec:b7:13:91:1d:2c:98:f1: 2b:6f:3d:5e:4c:6c:3d:e5:b6:c8:f7:44:ba:f7:3e:eb:0b:25: ea:79:d0:b9:46:d4:a0:bd:11:e5:5b:41:31:77:9f:99:29:90: 12:b4:9e:ce:f6:4e:ef:c2:0a:f1:23:f4:d3:9d:94:8f:aa:d7: ff:07:fd:ff:f7:60:9c:9e:2a:5d:1b:01:67:f4:6d:ef:4c:b1: fc:dc:6a:ff:20:44:1a:8e:ec:82:96:94:d6:17:47:2f:c7:b4: 60:86:2f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUwODIyMjIwMDUxWhcNMjUwODI5MjIwMDUxWjAYMRYwFAYD VQQDEw02OGE4ZTg5My04YmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02dfMCSR4GVoExpP/qFbRtXYTuVTJ/xgFhg+/okDuvIK0jFKBHk2G245kye7 dPehMB9JzzOpjotRe2rqe2Q+qfE0XQfIXKTinC/zlHKLChjicph1yBPAB4itn4mX iKTrPPlZGgPNwCHocJjA4N7WICqNtQuIUH89Hgf6RA3Sw/LgXVntMPOdFHSqDS53 Q7thAsHgTUC+ioT3E021WJoLHnU2IncyBjrCHAYRg5VvYuTcg2q7S47No2H71yiU IBm+CEa2+QMpxT/E+0XmcSoW583ADdPfA0m/8bhDsd7TKm8YQy6Cx8s8jsB3z2nt KA8YKidjkyOpH0wS25LUwcnf1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjiTjv+ K41PGDMzfpjx40NetVpXMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8h7ZJ2sGYKh8BVaEIhGymb3alnK0DjcraqRowKo4TVoi47czsWUNI 2IMHEdisvw1Vfdb8hd7N6uJtwf1mQHYncng+1ys6mR+YKy3seM0HzRtOYBpKjYo6 v6v0cVpF3eNRJnXLXD98BZbwjTzb8Jm35r3bi2HTSJ0oAI6gAJDBIDNn1xpzqv8Q ucQ9HiRnwUt5AjCN/HG10fPj7LcTkR0smPErbz1eTGw95bbI90S69z7rCyXqedC5 RtSgvRHlW0Exd5+ZKZAStJ7O9k7vwgrxI/TTnZSPqtf/B/3/92CcnipdGwFn9G3v TLH83Gr/IEQajuyClpTWF0cvx7Rghi8E -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:48 2025 by rpki-client