$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: JHie7YNkMmgQdLP5QGrt5HrLcfCTicF3WkpDiK530a4= Subject key identifier: 21:9E:0C:5D:4F:94:93:43:E8:0A:48:B0:CF:78:3A:FF:53:CD:8F:EF Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 0797 Signing time: Fri 22 Aug 2025 21:39:37 +0000 Manifest this update: Fri 22 Aug 2025 21:39:36 +0000 Manifest next update: Fri 29 Aug 2025 21:39:36 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: 3kzWmIUD6k4QeaIjIhhdoiHfMZbpYu6qzlvVkf3VBfY=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Aug 22 21:39:36 2025 GMT Not After : Aug 29 21:39:36 2025 GMT Subject: CN=68a8e399-b0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:99:ed:0a:ef:02:cb:24:6d:9f:b8:fa:be: e9:e3:de:21:56:5f:ce:d3:78:f2:40:da:3f:db:8f: 37:6e:e5:5f:f6:43:0f:6e:2b:90:02:4b:d1:bb:cb: 0f:fe:e4:29:b6:86:98:55:d0:1d:27:b1:d7:5a:58: 08:a4:46:2d:10:2d:85:65:74:a7:82:08:4f:6a:47: b4:9b:ce:cd:f6:9a:45:2e:f7:f5:e1:b4:9e:59:0e: a9:6d:93:b2:d3:48:e5:a7:69:32:ef:d2:95:4b:89: 37:3d:10:4b:f7:db:cb:60:42:0d:19:96:a8:60:04: 26:89:14:ab:af:ba:d6:b2:91:a7:c6:cc:d0:8f:3b: b9:5c:38:f5:da:d2:82:dd:7d:c3:4c:31:bb:42:5f: 77:d5:5d:30:b1:7f:54:65:c8:f4:11:1f:ae:ee:7d: 71:d0:64:7d:3a:f4:7b:9f:1b:9e:79:98:5e:49:1b: c4:14:f1:38:cf:d4:e7:d4:d1:1e:60:1e:94:3d:f2: f3:8a:db:bd:0e:b0:bf:80:34:cf:62:32:fb:09:41: 81:82:c4:e6:66:72:ef:47:44:a9:87:e4:63:54:29: 0b:53:78:87:6f:a7:d3:e5:9c:f8:ca:4d:24:14:13: 37:c3:e8:89:85:2d:8d:ce:a2:45:ed:cc:75:fc:03: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9E:0C:5D:4F:94:93:43:E8:0A:48:B0:CF:78:3A:FF:53:CD:8F:EF X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:38:a3:bd:70:0b:bc:36:15:88:2b:1d:e1:af:e5:a9:f9:35: 14:67:78:ec:18:33:7e:0b:ab:ab:ad:ef:ac:f6:2b:af:7a:68: ba:0a:c9:72:09:bc:96:05:b6:7d:71:1d:ab:73:d5:76:80:1d: d3:29:1b:6a:c6:2c:60:00:98:dd:c5:7c:6d:bb:1e:36:22:ad: 9e:c9:67:20:2b:03:e3:54:a5:38:bd:00:65:94:69:51:85:d0: 47:41:1c:bc:86:44:da:ae:fd:ec:84:b5:14:08:98:e8:24:01: 8e:ad:71:c0:da:8f:1b:5d:9b:46:97:32:64:3a:a2:87:65:23: 87:6d:72:cf:45:29:88:2c:90:85:22:e3:f9:15:59:a7:4a:1d: 43:56:2a:b1:8d:9e:4f:67:49:34:a5:2d:d3:00:bf:c5:97:57: 30:03:59:44:c0:cd:37:7f:42:e4:9f:13:e3:3f:45:07:14:f4: fc:29:76:cc:49:c8:86:62:67:a8:ec:8d:72:a0:54:71:45:44: d6:84:68:ca:f7:be:d2:e6:c1:c3:8b:34:d6:8d:18:71:8a:40: c9:53:13:a8:fe:a0:4b:b8:25:92:e0:b4:b2:29:12:2a:1f:ee: 77:fc:24:44:13:2a:fd:90:96:c4:8c:96:e6:5b:7f:e3:76:77: f9:cc:f5:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUwODIyMjEzOTM2WhcNMjUwODI5MjEzOTM2WjAYMRYwFAYD VQQDEw02OGE4ZTM5OS1iMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39aZ7QrvAsskbZ+4+r7p494hVl/O03jyQNo/2483buVf9kMPbiuQAkvRu8sP /uQptoaYVdAdJ7HXWlgIpEYtEC2FZXSngghPake0m87N9ppFLvf14bSeWQ6pbZOy 00jlp2ky79KVS4k3PRBL99vLYEINGZaoYAQmiRSrr7rWspGnxszQjzu5XDj12tKC 3X3DTDG7Ql931V0wsX9UZcj0ER+u7n1x0GR9OvR7nxueeZheSRvEFPE4z9Tn1NEe YB6UPfLzitu9DrC/gDTPYjL7CUGBgsTmZnLvR0Sph+RjVCkLU3iHb6fT5Zz4yk0k FBM3w+iJhS2NzqJF7cx1/AM74QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGeDF1P lJND6ApIsM94Ov9TzY/vMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjOKO9cAu8NhWIKx3hr+Wp+TUUZ3jsGDN+C6urre+s9iuvemi6Csly CbyWBbZ9cR2rc9V2gB3TKRtqxixgAJjdxXxtux42Iq2eyWcgKwPjVKU4vQBllGlR hdBHQRy8hkTarv3shLUUCJjoJAGOrXHA2o8bXZtGlzJkOqKHZSOHbXLPRSmILJCF IuP5FVmnSh1DViqxjZ5PZ0k0pS3TAL/Fl1cwA1lEwM03f0LknxPjP0UHFPT8KXbM SciGYmeo7I1yoFRxRUTWhGjK977S5sHDizTWjRhxikDJUxOo/qBLuCWS4LSyKRIq H+53/CREEyr9kJbEjJbmW3/jdnf5zPXD -----END CERTIFICATE-----Generated at Sun Aug 24 06:13:59 2025 by rpki-client