$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: bos8r6ZLBIXtPXTMkBSbPzbZ3oJacBSs/f0PJBMtcf8= Subject key identifier: 04:FC:B8:FC:EE:E3:1D:D4:09:AB:27:A0:00:55:2F:51:78:E7:32:58 Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0ACB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0AC3 Signing time: Fri 22 Aug 2025 19:37:14 +0000 Manifest this update: Fri 22 Aug 2025 19:37:13 +0000 Manifest next update: Fri 29 Aug 2025 19:37:13 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: vq+7DOL8Bn8QPlU4xdRb46Yc9cDZl+wz85rzhqHydF0=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2763 (0xacb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Aug 22 19:37:13 2025 GMT Not After : Aug 29 19:37:13 2025 GMT Subject: CN=68a8c6e9-69c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:49:48:a6:62:04:6c:97:0c:0d:4d:bf:a2: 1f:5c:47:1d:d5:56:d7:1f:81:6f:1c:93:8e:33:58: 47:f1:82:10:ef:a9:a6:95:77:97:79:98:67:91:ed: fd:35:bb:c1:7b:cd:c8:39:cc:98:ca:23:ab:6f:d7: ea:fa:38:17:83:62:f8:12:dd:4d:6d:2f:e7:5e:45: f4:d5:3a:f9:69:1a:76:46:a1:26:ac:12:c0:a3:d0: 67:85:fe:a4:5f:03:6a:08:25:3c:63:df:2d:bb:af: 33:8c:7e:eb:f9:e6:7c:8b:73:d5:39:d0:dd:4a:6c: c5:63:49:9a:40:44:12:e2:21:b0:a6:e4:24:6d:f8: 5d:56:e9:c4:97:10:49:8a:ce:6f:96:b3:6e:0c:a1: d4:a3:43:0f:d8:b9:c8:cf:b1:d8:be:5f:f2:56:f9: 0b:23:ee:1d:cf:44:e6:85:99:1a:8d:7c:e7:e7:a4: a7:40:7f:24:29:cd:12:28:91:7c:e5:31:cb:af:bb: 46:a7:30:4c:af:9a:d2:ed:eb:16:20:85:21:9e:69: 9b:14:c8:90:2c:8b:81:af:18:53:f6:d8:8e:21:2d: 06:06:58:ad:0f:b1:72:68:6d:72:5a:c8:9b:f4:d7: e6:b5:f4:7a:15:46:61:a9:84:31:99:56:0c:64:3c: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FC:B8:FC:EE:E3:1D:D4:09:AB:27:A0:00:55:2F:51:78:E7:32:58 X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8e:d0:f4:24:db:91:04:9e:fa:30:05:65:60:af:eb:2c:3b: 46:8d:65:f6:e5:08:05:0f:3b:a3:00:7d:d5:53:81:e9:dd:76: ee:4d:93:a8:25:a2:c3:08:cb:d1:bf:60:43:07:e4:94:82:d6: cb:20:d0:f1:0c:1f:63:80:f6:65:3b:8f:62:3b:f9:67:1d:82: 0c:bd:a0:91:14:2b:84:ab:59:ce:94:f4:a0:98:3c:47:6d:38: 64:a0:58:35:15:15:f1:eb:3f:00:7b:5f:51:13:ae:20:a4:06: f6:9b:c3:97:e0:f3:3c:f0:3a:cc:69:3b:48:7b:3b:89:9e:8c: d9:44:7d:b1:31:73:ee:1b:25:f8:4b:91:f9:c5:ae:a5:5a:84: 39:cc:8f:41:9f:45:41:ad:b8:8a:30:8a:f2:97:f6:ae:3e:e7: 2c:9c:2c:11:93:7f:d0:48:95:d3:0d:8c:f2:5c:41:10:63:0e: 4e:91:fc:0a:44:72:c1:46:9c:ec:2f:13:ee:2f:15:05:4e:e8: 4d:42:91:23:d0:2a:7b:bd:92:4a:a8:a8:f9:ee:42:e0:13:26: c0:38:d4:f0:cb:1c:b1:f8:c3:17:20:0e:93:ae:cc:f7:7c:6e: 3c:8b:87:d4:0c:6f:2d:55:de:27:4e:8a:5a:bc:1d:80:9e:3c: 50:ee:db:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUwODIyMTkzNzEzWhcNMjUwODI5MTkzNzEzWjAYMRYwFAYD VQQDEw02OGE4YzZlOS02OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWBJSKZiBGyXDA1Nv6IfXEcd1VbXH4FvHJOOM1hH8YIQ76mmlXeXeZhnke39 NbvBe83IOcyYyiOrb9fq+jgXg2L4Et1NbS/nXkX01Tr5aRp2RqEmrBLAo9Bnhf6k XwNqCCU8Y98tu68zjH7r+eZ8i3PVOdDdSmzFY0maQEQS4iGwpuQkbfhdVunElxBJ is5vlrNuDKHUo0MP2LnIz7HYvl/yVvkLI+4dz0TmhZkajXzn56SnQH8kKc0SKJF8 5THLr7tGpzBMr5rS7esWIIUhnmmbFMiQLIuBrxhT9tiOIS0GBlitD7FyaG1yWsib 9NfmtfR6FUZhqYQxmVYMZDzqoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAT8uPzu 4x3UCasnoABVL1F45zJYMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWjtD0JNuRBJ76MAVlYK/rLDtGjWX25QgFDzujAH3VU4Hp3XbuTZOo JaLDCMvRv2BDB+SUgtbLINDxDB9jgPZlO49iO/lnHYIMvaCRFCuEq1nOlPSgmDxH bThkoFg1FRXx6z8Ae19RE64gpAb2m8OX4PM88DrMaTtIezuJnozZRH2xMXPuGyX4 S5H5xa6lWoQ5zI9Bn0VBrbiKMIryl/auPucsnCwRk3/QSJXTDYzyXEEQYw5OkfwK RHLBRpzsLxPuLxUFTuhNQpEj0Cp7vZJKqKj57kLgEybAONTwyxyx+MMXIA6Trsz3 fG48i4fUDG8tVd4nTopavB2AnjxQ7tsV -----END CERTIFICATE-----Generated at Sun Aug 24 02:30:06 2025 by rpki-client