$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: LK706ZC6M115POVdf6rHhcwo/2qpr6nPopnGjxnlGfU= Subject key identifier: 5A:F8:15:65:51:9B:FC:CD:4D:20:EA:9E:8D:2E:F5:54:53:57:50:0E Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 01EC Signing time: Sat 23 Aug 2025 02:42:22 +0000 Manifest this update: Sat 23 Aug 2025 02:42:21 +0000 Manifest next update: Sat 30 Aug 2025 02:42:21 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: Hl2Qs5qg+dLAqGFkU1BgjiIP4guVyKf3A0mF7LHPkN8=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Aug 23 02:42:21 2025 GMT Not After : Aug 30 02:42:21 2025 GMT Subject: CN=68a92a8d-29b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:66:ea:b8:3c:d2:61:07:57:52:97:51:33: f1:d3:08:7c:b9:3b:3f:c2:89:cb:d4:54:91:37:17: e7:aa:ac:c8:1a:85:9b:97:31:30:eb:7f:e0:18:43: 5d:84:3f:5f:c4:a1:66:3f:5f:3c:b0:92:2e:0f:51: 01:5e:7b:09:83:4b:df:78:2d:8f:1b:f5:a5:65:7e: 49:af:77:7d:fa:79:44:84:d3:a8:6c:55:d9:0a:e5: b9:66:c4:3e:af:09:85:b2:68:79:59:8d:09:56:eb: 7d:96:e3:b1:fc:20:bb:6c:fb:7e:e4:ab:b6:c5:05: af:52:20:ac:43:7f:91:9a:09:0a:ea:99:97:ea:9e: 01:27:7c:61:a6:c9:7f:0c:6d:d6:5a:c1:07:0c:67: 00:60:1e:10:ec:a9:3a:d9:ec:83:fe:1e:9d:79:8f: 65:2d:78:1d:44:41:13:f3:12:3f:60:62:84:3e:13: f7:b2:ea:86:9e:94:92:1c:7a:95:ec:62:68:fb:fd: 24:38:1b:8a:7b:63:6b:b0:72:20:d9:31:44:18:3e: 8c:4c:b8:d9:f1:ca:03:ca:97:c6:31:20:44:a6:a5: 05:1f:26:aa:a3:38:98:17:2f:db:76:14:6e:86:d7: ee:7b:49:eb:6f:0c:7e:f1:b5:63:61:44:14:1f:2e: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F8:15:65:51:9B:FC:CD:4D:20:EA:9E:8D:2E:F5:54:53:57:50:0E X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:94:69:72:4b:6d:c0:35:d9:86:a9:d1:26:64:3a:24:39:d7: 0b:87:cf:8c:a3:8b:06:21:4c:05:52:f9:63:78:c0:ba:8b:1d: 93:35:e9:9a:2a:84:63:d6:72:f3:d2:01:24:91:37:06:2c:00: 76:90:6a:88:d1:cf:c8:2d:6a:fc:bb:04:7d:5f:56:08:47:b2: 71:c0:52:95:f9:31:6c:b1:7f:a8:b1:0b:ef:84:02:38:83:e1: 49:3a:00:4a:65:1c:5b:ee:92:cb:ee:3d:da:1e:9c:12:ea:f7: 81:d2:25:7b:24:9b:a2:be:7a:37:54:fc:73:17:fc:58:09:4b: a2:e3:95:de:37:95:7a:3e:0a:d7:1c:e8:73:2c:08:bc:8e:56: f9:61:57:4e:3c:8d:97:cf:6a:ea:12:51:3b:3a:83:a4:ee:5e: 08:55:75:cd:87:45:a5:10:14:11:fb:b5:6e:0e:a4:bb:d6:69: b0:04:48:d3:54:0e:f1:d6:0d:c9:10:5b:47:9f:fb:7b:dd:47: 86:c6:ac:9e:f1:14:fd:d1:04:49:ac:5e:f5:fe:f4:c0:4d:fa: 38:07:25:15:9c:91:ca:d8:81:98:34:51:04:15:b6:7e:1b:a4: ab:43:74:11:55:7e:e7:e0:ad:3f:a0:81:9c:ff:8c:a1:64:86: ec:6e:03:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUwODIzMDI0MjIxWhcNMjUwODMwMDI0MjIxWjAYMRYwFAYD VQQDEw02OGE5MmE4ZC0yOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKNm6rg80mEHV1KXUTPx0wh8uTs/wonL1FSRNxfnqqzIGoWblzEw63/gGENd hD9fxKFmP188sJIuD1EBXnsJg0vfeC2PG/WlZX5Jr3d9+nlEhNOobFXZCuW5ZsQ+ rwmFsmh5WY0JVut9luOx/CC7bPt+5Ku2xQWvUiCsQ3+RmgkK6pmX6p4BJ3xhpsl/ DG3WWsEHDGcAYB4Q7Kk62eyD/h6deY9lLXgdREET8xI/YGKEPhP3suqGnpSSHHqV 7GJo+/0kOBuKe2NrsHIg2TFEGD6MTLjZ8coDypfGMSBEpqUFHyaqoziYFy/bdhRu htfue0nrbwx+8bVjYUQUHy7UAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr4FWVR m/zNTSDqno0u9VRTV1AOMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCilGlyS23ANdmGqdEmZDokOdcLh8+Mo4sGIUwFUvljeMC6ix2TNema KoRj1nLz0gEkkTcGLAB2kGqI0c/ILWr8uwR9X1YIR7JxwFKV+TFssX+osQvvhAI4 g+FJOgBKZRxb7pLL7j3aHpwS6veB0iV7JJuivno3VPxzF/xYCUui45XeN5V6PgrX HOhzLAi8jlb5YVdOPI2Xz2rqElE7OoOk7l4IVXXNh0WlEBQR+7VuDqS71mmwBEjT VA7x1g3JEFtHn/t73UeGxqye8RT90QRJrF71/vTATfo4ByUVnJHK2IGYNFEEFbZ+ G6SrQ3QRVX7n4K0/oIGc/4yhZIbsbgM3 -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:42 2025 by rpki-client