$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft File: Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json) Hash identifier: IYhTmVpKFLQqC+QUlIz8VgD00YtwIS9ClZsWP4mbWM8= Subject key identifier: C9:6A:6A:7F:4F:A2:C2:FB:18:AA:A7:ED:84:25:4A:B0:AF:23:86:8D Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft Manifest number: 0690 Signing time: Fri 22 Aug 2025 22:28:23 +0000 Manifest this update: Fri 22 Aug 2025 22:28:22 +0000 Manifest next update: Fri 29 Aug 2025 22:28:22 +0000 Files and hashes: 1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: evmrD6QxqdLm1iCYAzTl6NeaTRy+BDUGXxYz82c86t0=) 2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aM+7gCUGE+qk8+F9OXTcC/AfNjJw372IOJzcraxEznU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325, serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Validity Not Before: Aug 22 22:28:22 2025 GMT Not After : Aug 29 22:28:22 2025 GMT Subject: CN=68a8ef06-16db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:7e:e8:c5:97:3e:4c:de:73:81:30:7a:45: e7:2b:09:d0:a4:ad:39:7a:17:1f:a9:1d:cc:39:97: 50:c4:9f:e9:ce:16:bf:89:8a:16:5c:d1:c4:1d:d5: af:54:33:f9:fc:99:7d:4f:75:68:44:0e:29:87:be: 92:01:5b:8b:4d:48:c8:5d:d2:9d:df:ef:51:81:6c: 09:18:16:1c:01:3d:3d:61:07:d6:b4:76:1b:c2:ac: 26:3a:ad:b9:ed:f8:e1:dc:83:00:62:04:16:d1:8b: 5b:b7:d4:c5:e4:e2:e8:82:90:fa:e3:f1:1b:5c:a7: 3e:e9:8f:6e:d1:6a:58:1f:e7:bd:c8:ba:7b:54:2f: 36:a0:1d:1f:65:01:27:47:64:81:8c:68:94:b7:a7: 7a:d4:1f:cb:f3:d5:65:6b:d5:af:a3:09:ca:7f:36: 39:35:48:7d:68:76:71:8f:bf:53:ad:66:e0:44:a5: e5:a0:4c:89:2d:7a:92:7c:23:21:bf:21:4d:64:8d: c3:ab:f0:ff:f5:13:56:9c:1c:d0:c7:f2:3b:e6:e6: 5c:84:9e:43:49:73:c6:35:13:75:7d:ab:ce:ef:48: a6:62:a7:6f:e8:da:1f:c4:7b:1b:41:01:4c:07:71: 66:d1:95:da:57:b1:0a:52:72:6a:a0:f7:60:be:d5: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6A:6A:7F:4F:A2:C2:FB:18:AA:A7:ED:84:25:4A:B0:AF:23:86:8D X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a9:e5:66:00:7d:16:b8:b2:ae:e8:a0:89:18:9a:be:c9:46: 3a:1e:15:09:0f:b9:af:5c:c7:92:2f:73:ee:e9:54:25:95:b1: 40:8c:d7:3e:ed:9e:5e:0a:6f:e1:16:65:cc:94:3d:dc:2a:b9: 14:d5:da:d4:ac:5f:24:80:60:cb:eb:fc:3a:aa:8f:14:1f:f1: 46:95:07:e9:b5:cc:cf:34:16:9c:3f:6c:cd:9a:74:8b:ca:0a: 88:9e:25:4c:cf:ef:fd:dd:75:3e:8c:4a:ac:96:67:e8:44:c9: 7b:3e:51:52:31:0f:37:c9:b2:eb:51:f1:af:9a:8b:e2:97:b3: 67:13:d3:1d:15:a4:f0:ac:54:46:0b:08:fd:c5:cb:17:28:1e: 81:1b:c7:e5:f7:46:6d:bc:8a:3d:80:c9:66:cb:ed:24:dc:3b: 24:68:30:29:df:91:37:bd:e6:c4:39:58:e9:d0:8d:00:10:87: ef:89:2d:4f:1b:d0:c2:2f:0c:1f:81:e7:c5:04:c1:a2:c7:a4: 6f:e8:26:05:62:96:dd:07:2a:5e:4b:73:5a:21:82:71:2e:58: eb:4b:fb:e1:07:77:e2:65:5e:7c:55:37:0e:2e:da:da:84:a8: c7:6f:3b:f6:90:88:05:7b:6b:78:1e:ac:a3:59:e4:0c:28:cf: 57:09:1f:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjUwODIyMjIyODIyWhcNMjUwODI5MjIyODIyWjAYMRYwFAYD VQQDEw02OGE4ZWYwNi0xNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ct+6MWXPkzec4EwekXnKwnQpK05ehcfqR3MOZdQxJ/pzha/iYoWXNHEHdWv VDP5/Jl9T3VoRA4ph76SAVuLTUjIXdKd3+9RgWwJGBYcAT09YQfWtHYbwqwmOq25 7fjh3IMAYgQW0Ytbt9TF5OLogpD64/EbXKc+6Y9u0WpYH+e9yLp7VC82oB0fZQEn R2SBjGiUt6d61B/L89Vla9WvownKfzY5NUh9aHZxj79TrWbgRKXloEyJLXqSfCMh vyFNZI3Dq/D/9RNWnBzQx/I75uZchJ5DSXPGNRN1favO70imYqdv6NofxHsbQQFM B3Fm0ZXaV7EKUnJqoPdgvtUMKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlqan9P osL7GKqn7YQlSrCvI4aNMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqqeVmAH0WuLKu6KCJGJq+yUY6HhUJD7mvXMeSL3Pu6VQllbFAjNc+ 7Z5eCm/hFmXMlD3cKrkU1drUrF8kgGDL6/w6qo8UH/FGlQfptczPNBacP2zNmnSL ygqIniVMz+/93XU+jEqslmfoRMl7PlFSMQ83ybLrUfGvmovil7NnE9MdFaTwrFRG Cwj9xcsXKB6BG8fl90ZtvIo9gMlmy+0k3DskaDAp35E3vebEOVjp0I0AEIfviS1P G9DCLwwfgefFBMGix6Rv6CYFYpbdBypeS3NaIYJxLljrS/vhB3fiZV58VTcOLtra hKjHbzv2kIgFe2t4HqyjWeQMKM9XCR/T -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:46 2025 by rpki-client