$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: WAYd94xuCTLtNt8SP+DB5piRsMsWyy5DrdhmbInQ2wc= Subject key identifier: C9:65:65:78:8B:2D:E4:E3:0B:62:6D:50:48:77:F9:19:1E:88:B8:21 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1F39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1F39 Signing time: Fri 22 Aug 2025 16:03:35 +0000 Manifest this update: Fri 22 Aug 2025 16:03:34 +0000 Manifest next update: Fri 29 Aug 2025 16:03:34 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: ODPXjDjE8k8N5dlqSF3c8BJaWsn+ksrJnZzYF+6iA5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7993 (0x1f39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Aug 22 16:03:34 2025 GMT Not After : Aug 29 16:03:34 2025 GMT Subject: CN=68a894d6-78c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:f7:ed:2a:38:2c:a9:99:37:8c:46:44:8f: 64:a5:be:c7:c3:8f:42:a0:80:e8:16:75:12:25:e8: 35:52:58:f7:ed:63:97:51:82:76:8f:6d:d5:68:e5: 40:b5:17:9a:4d:d4:4e:f3:b7:d9:c1:44:45:e5:87: b8:f3:2b:ad:aa:75:fd:23:55:14:68:14:d6:c0:50: 51:ad:27:43:81:e8:c2:0c:69:41:3e:45:1f:8e:ff: 61:c3:87:79:9b:ee:a0:d6:58:fc:6b:dc:3d:f8:2e: 4a:9a:8d:c9:8f:3e:68:47:cd:b1:fc:f3:01:2d:90: 2b:f1:9f:bb:e8:78:40:b2:71:d3:00:3f:12:ea:e5: e1:dd:34:d5:32:2c:1c:29:d1:b5:9d:1c:20:97:f5: 9a:1b:9c:4b:dd:a3:0c:6c:33:6f:4e:5f:65:23:ed: 16:4f:66:b8:53:db:19:d3:83:2d:c5:b3:98:8d:90: 2e:22:e4:e8:62:17:2e:8b:76:67:4a:cb:30:cc:5a: c0:98:f2:3b:90:5f:c3:40:a6:f9:22:85:9f:bb:c8: a2:91:97:0a:d2:1f:7d:27:6c:a9:d3:0f:25:0e:c2: 0c:67:73:50:cf:64:a2:db:0e:bb:1d:7f:77:f5:4b: 93:cb:2e:37:b0:d7:c2:5d:89:80:36:c5:b9:04:c9: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:65:65:78:8B:2D:E4:E3:0B:62:6D:50:48:77:F9:19:1E:88:B8:21 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a1:1b:4d:65:45:ea:21:13:fd:95:1e:77:3b:e7:c5:6a:78: 97:3a:47:fe:2f:57:f5:f6:01:d4:2a:98:6e:cb:da:22:05:0e: 8d:ba:02:c3:08:4a:e7:43:b3:95:2a:fd:ac:ac:64:81:8c:06: 3d:64:f8:6e:78:76:35:e4:67:86:0d:b3:fa:2e:dc:71:53:b1: 18:27:1c:a8:15:a3:bb:1c:7c:f1:a9:aa:8c:ce:ac:b4:71:a1: e3:c7:b4:3e:35:0c:46:00:76:53:54:30:ca:5b:e3:04:7a:fd: 0a:73:0a:d0:e3:95:a7:73:27:3d:c6:4f:8d:88:5c:d5:92:a5: 19:e7:8b:f7:14:86:96:bd:8e:04:98:76:c7:0b:08:bb:5a:a1: ac:34:16:0e:b5:05:b3:a9:a2:f3:59:3d:5f:64:3e:ee:4b:99: f5:24:96:c9:d4:f0:92:1e:27:22:5a:5c:ce:59:e8:38:a2:d8: 94:5a:e6:ca:6a:61:11:00:89:2e:1d:d8:2a:de:3c:f4:d8:2a: 70:59:7f:38:2e:50:c4:bc:1f:a5:80:40:a9:cf:ab:c3:fc:bc: 9c:85:20:95:60:a2:b1:b2:73:c9:07:61:b7:af:9a:0b:13:32: c0:6e:ea:0e:e4:79:04:a1:69:27:ef:54:51:61:b9:6e:9e:3c: 62:42:92:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUwODIyMTYwMzM0WhcNMjUwODI5MTYwMzM0WjAYMRYwFAYD VQQDEw02OGE4OTRkNi03OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpX37So4LKmZN4xGRI9kpb7Hw49CoIDoFnUSJeg1Ulj37WOXUYJ2j23VaOVA tReaTdRO87fZwURF5Ye48yutqnX9I1UUaBTWwFBRrSdDgejCDGlBPkUfjv9hw4d5 m+6g1lj8a9w9+C5Kmo3Jjz5oR82x/PMBLZAr8Z+76HhAsnHTAD8S6uXh3TTVMiwc KdG1nRwgl/WaG5xL3aMMbDNvTl9lI+0WT2a4U9sZ04MtxbOYjZAuIuToYhcui3Zn SsswzFrAmPI7kF/DQKb5IoWfu8iikZcK0h99J2yp0w8lDsIMZ3NQz2Si2w67HX93 9UuTyy43sNfCXYmANsW5BMlMRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMllZXiL LeTjC2JtUEh3+RkeiLghMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/oRtNZUXqIRP9lR53O+fFaniXOkf+L1f19gHUKphuy9oiBQ6NugLD CErnQ7OVKv2srGSBjAY9ZPhueHY15GeGDbP6LtxxU7EYJxyoFaO7HHzxqaqMzqy0 caHjx7Q+NQxGAHZTVDDKW+MEev0KcwrQ45Wncyc9xk+NiFzVkqUZ54v3FIaWvY4E mHbHCwi7WqGsNBYOtQWzqaLzWT1fZD7uS5n1JJbJ1PCSHiciWlzOWeg4otiUWubK amERAIkuHdgq3jz02CpwWX84LlDEvB+lgECpz6vD/LychSCVYKKxsnPJB2G3r5oL EzLAbuoO5HkEoWkn71RRYblunjxiQpJJ -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:50 2025 by rpki-client