$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: xzThe01pkmvxXunJ90J/Ve+4FhSByR0LLTet1hu/vwA= Subject key identifier: 6A:B0:DA:97:C8:A3:0B:DB:B9:00:BF:65:C8:79:D2:B3:9B:BE:7B:36 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 97 Signing time: Sat 23 Aug 2025 06:37:53 +0000 Manifest this update: Sat 23 Aug 2025 06:37:52 +0000 Manifest next update: Sat 30 Aug 2025 06:37:52 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: +TSyIZn4hi6uU5/NQyF6xi0P2ewGlXaOoLTvsxUS9ns=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Aug 23 06:37:52 2025 GMT Not After : Aug 30 06:37:52 2025 GMT Subject: CN=68a961c0-c78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:27:8b:1d:7f:7d:a2:79:32:a5:e7:dd:b6: b1:1e:3b:79:c6:d3:b8:e3:49:fd:65:28:05:54:32: e6:7d:fd:af:15:ca:be:ac:8f:ca:5b:e0:4f:20:f5: 15:b6:46:2b:4c:cf:69:4d:08:67:b9:2b:ba:4f:3e: dc:c1:9a:14:c0:78:a8:d7:e5:3d:a9:58:b6:88:57: 2c:83:45:3e:a5:6a:aa:ff:29:20:21:59:5f:6c:81: f3:26:97:f8:f9:58:ad:1a:12:6b:62:d7:d4:47:81: cc:ba:de:83:52:7d:02:45:f6:a6:9d:d9:64:92:04: 6e:38:7d:fe:62:20:5e:50:f3:98:7a:0a:4e:c8:a5: 3f:70:10:1e:9a:61:7d:f6:05:09:0b:17:a8:75:00: 5f:65:f6:8a:5c:2f:a0:e6:f7:d6:51:47:e6:c2:80: 28:de:58:75:e7:5f:96:27:25:b8:f1:6e:77:9f:a7: fb:bd:c1:05:a5:5f:74:c0:54:87:b6:69:69:b4:2b: 9c:63:a1:81:25:8a:43:33:d7:4e:22:cd:5e:82:32: b0:c7:12:0a:15:00:c2:8b:57:70:ad:c3:cf:45:04: 84:cb:80:c7:6c:91:15:ac:83:54:92:e0:b2:ff:58: 8a:15:1f:93:3a:87:57:a9:8a:db:41:fa:2b:ce:bb: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B0:DA:97:C8:A3:0B:DB:B9:00:BF:65:C8:79:D2:B3:9B:BE:7B:36 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a8:7f:83:91:88:17:8f:1d:27:6b:a2:f5:f9:c1:48:49:ad: a8:4d:7b:71:8e:9a:a7:7c:73:c9:3e:06:88:c5:ba:64:b4:b9: 3a:59:36:0f:1c:1c:dd:7a:ad:c3:39:46:82:7d:dd:46:d3:b8: f6:32:18:08:f6:33:f1:36:67:7e:18:a6:30:dd:b7:99:2e:a2: 2d:0a:24:c5:cf:29:89:77:2a:46:fb:9c:98:80:6b:b5:75:16: b0:cd:a0:77:49:97:e3:18:1e:25:4c:22:6b:dd:0b:10:82:9e: bd:59:ce:6a:1b:b3:4e:d3:f9:f1:10:a1:93:d2:70:90:dd:45: 0d:aa:67:15:b7:98:9a:a7:4f:86:ad:d1:03:be:26:b4:84:ef: 66:15:f9:07:35:4b:a0:b9:f6:92:2c:d0:46:14:ce:42:c3:77: 37:73:f4:cc:3d:fd:fd:cc:1d:90:fb:a6:5f:3c:0c:87:9f:37: 08:0f:71:b5:83:1b:dc:13:6f:20:d0:eb:bb:c9:6d:77:9a:0a: d4:bc:00:94:68:b3:e3:f4:58:16:87:c8:38:aa:e8:b0:c5:4e: 02:eb:f6:13:69:45:78:0d:96:d6:55:8e:dc:f1:16:c9:bf:b1: 1e:e2:2c:66:7f:c1:b0:2e:ef:14:43:3a:20:24:51:4c:b2:69: ad:b0:5b:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDNkExMTAvBgNVBAUTKDQ0OUQwN0RBOTIwREEwMjYzNDJCRjZFMjY4OUNDN0Uw RjBBM0NBRkMwHhcNMjUwODIzMDYzNzUyWhcNMjUwODMwMDYzNzUyWjAYMRYwFAYD VQQDEw02OGE5NjFjMC1jNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOYnix1/faJ5MqXn3baxHjt5xtO440n9ZSgFVDLmff2vFcq+rI/KW+BPIPUV tkYrTM9pTQhnuSu6Tz7cwZoUwHio1+U9qVi2iFcsg0U+pWqq/ykgIVlfbIHzJpf4 +VitGhJrYtfUR4HMut6DUn0CRfamndlkkgRuOH3+YiBeUPOYegpOyKU/cBAemmF9 9gUJCxeodQBfZfaKXC+g5vfWUUfmwoAo3lh151+WJyW48W53n6f7vcEFpV90wFSH tmlptCucY6GBJYpDM9dOIs1egjKwxxIKFQDCi1dwrcPPRQSEy4DHbJEVrINUkuCy /1iKFR+TOodXqYrbQforzrteZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqw2pfI owvbuQC/Zch50rObvns2MB8GA1UdIwQYMBaAFESdB9qSDaAmNCv24micx+Dwo8r8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUM2QS85MDY2MkVCNjlD MEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9DWTBLX2JpYUp6SDRQQ2p5 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUM2QS85MDY2MkVCNjlDMEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9D WTBLX2JpYUp6SDRQQ2p5dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLqH+DkYgXjx0na6L1+cFISa2oTXtxjpqnfHPJPgaIxbpktLk6WTYP HBzdeq3DOUaCfd1G07j2MhgI9jPxNmd+GKYw3beZLqItCiTFzymJdypG+5yYgGu1 dRawzaB3SZfjGB4lTCJr3QsQgp69Wc5qG7NO0/nxEKGT0nCQ3UUNqmcVt5iap0+G rdEDvia0hO9mFfkHNUugufaSLNBGFM5Cw3c3c/TMPf39zB2Q+6ZfPAyHnzcID3G1 gxvcE28g0Ou7yW13mgrUvACUaLPj9FgWh8g4quiwxU4C6/YTaUV4DZbWVY7c8RbJ v7Ee4ixmf8GwLu8UQzogJFFMsmmtsFv+ -----END CERTIFICATE-----Generated at Sun Aug 24 04:59:47 2025 by rpki-client