$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: TX9gsybJ+ojfgfCM+5WnAOlne56B53OHaPo3S3BbVgA= Subject key identifier: 5A:A9:9E:B2:B0:9B:6F:73:2B:23:6C:FA:2D:E9:8F:99:6B:BE:DC:25 Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 06AA Signing time: Fri 22 Aug 2025 22:18:00 +0000 Manifest this update: Fri 22 Aug 2025 22:18:00 +0000 Manifest next update: Fri 29 Aug 2025 22:18:00 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: aRqvbJgL291okJWKAxF48aBS/OanTPARuRC9wQEeiYk=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Aug 22 22:18:00 2025 GMT Not After : Aug 29 22:18:00 2025 GMT Subject: CN=68a8ec98-8b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:3d:c7:34:5c:74:f1:e3:b2:0e:b7:4b:ca: 45:7f:d6:a7:55:9c:ac:1a:10:11:a3:dd:25:04:69: ba:f6:e2:9c:f5:6a:5a:cc:60:18:e7:fd:1a:b3:00: b8:d6:66:6d:e1:9a:74:e9:a0:78:f3:86:f1:5c:6c: 01:76:f0:3a:0d:63:fd:3b:72:29:17:38:e1:71:6e: c1:ec:1f:a6:4e:7d:d1:8e:6c:d0:f5:e7:e2:4d:07: cf:00:6a:45:79:cc:a5:65:3a:37:28:2e:c2:15:53: 04:8b:67:00:90:71:62:3b:ec:d6:9c:98:33:83:d6: cc:9b:68:11:11:6a:3f:4e:cf:37:8f:f9:b6:f3:33: e3:91:a0:a1:fa:99:0f:50:31:f9:a6:96:b5:cd:73: c6:85:aa:e7:07:2d:c4:f7:35:64:ca:7a:97:74:38: c9:34:24:e4:b6:1e:7d:21:4a:fb:d0:ad:7b:06:db: b6:58:78:64:b2:27:28:d5:e3:2f:23:a7:2e:74:b5: 77:04:28:38:ec:c2:2d:e4:e4:b8:a8:67:4b:52:ad: 0d:d3:9a:53:96:67:a1:67:84:5f:12:3d:f3:de:cb: 2d:d3:be:89:42:9e:c1:62:6c:32:ba:8e:7e:c6:44: d7:4e:67:6e:a9:a4:d9:aa:5c:ee:ed:8e:25:7b:ed: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:9E:B2:B0:9B:6F:73:2B:23:6C:FA:2D:E9:8F:99:6B:BE:DC:25 X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7e:1c:66:c6:18:18:db:00:c4:29:41:93:52:ac:f1:98:b8: ed:3b:18:cb:33:21:92:d3:12:7d:a8:a5:48:bb:7a:f0:7f:4d: c3:37:55:b9:28:64:f7:d5:b7:9a:7b:5b:0a:4e:f6:f5:f4:42: 46:be:ff:35:9a:0f:73:d4:88:e4:ba:7e:74:ca:c3:bb:78:33: 09:63:fe:89:be:0f:a4:85:ea:6d:9b:33:e8:ca:bf:f9:49:30: 62:9c:ba:02:07:88:cc:f6:4d:e0:ec:ca:1f:80:19:c8:11:8b: 8e:25:08:73:67:38:a5:c5:cf:cb:e2:24:d0:95:8d:64:6b:4e: 3c:64:39:d7:a8:e2:9b:f7:c4:99:2d:c2:40:04:a9:9e:4c:84: 86:2f:c0:91:5b:b0:09:6e:d4:7a:55:70:4f:b2:4c:93:73:be: b3:a5:df:96:e1:d0:0b:52:c4:55:10:8f:94:1d:2b:52:8c:a3: 28:b1:ff:3e:29:c7:01:ef:93:72:d3:28:f8:8b:26:d6:75:b0: 57:cc:8b:c0:7b:d8:79:95:0d:cc:86:dc:d6:df:f7:6e:d2:93: 8f:e8:51:4b:c8:49:db:94:9d:a9:5b:7a:0a:da:a0:bc:d1:9a: ef:d2:b3:8a:f4:24:44:d5:43:95:60:d0:fe:81:53:9d:62:d1: 45:03:b0:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUwODIyMjIxODAwWhcNMjUwODI5MjIxODAwWjAYMRYwFAYD VQQDEw02OGE4ZWM5OC04YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRE9xzRcdPHjsg63S8pFf9anVZysGhARo90lBGm69uKc9WpazGAY5/0aswC4 1mZt4Zp06aB484bxXGwBdvA6DWP9O3IpFzjhcW7B7B+mTn3RjmzQ9efiTQfPAGpF ecylZTo3KC7CFVMEi2cAkHFiO+zWnJgzg9bMm2gREWo/Ts83j/m28zPjkaCh+pkP UDH5ppa1zXPGharnBy3E9zVkynqXdDjJNCTkth59IUr70K17Btu2WHhksico1eMv I6cudLV3BCg47MIt5OS4qGdLUq0N05pTlmehZ4RfEj3z3sst076JQp7BYmwyuo5+ xkTXTmduqaTZqlzu7Y4le+09owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqpnrKw m29zKyNs+i3pj5lrvtwlMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVfhxmxhgY2wDEKUGTUqzxmLjtOxjLMyGS0xJ9qKVIu3rwf03DN1W5 KGT31beae1sKTvb19EJGvv81mg9z1Ijkun50ysO7eDMJY/6Jvg+kheptmzPoyr/5 STBinLoCB4jM9k3g7MofgBnIEYuOJQhzZzilxc/L4iTQlY1ka048ZDnXqOKb98SZ LcJABKmeTISGL8CRW7AJbtR6VXBPskyTc76zpd+W4dALUsRVEI+UHStSjKMosf8+ KccB75Ny0yj4iybWdbBXzIvAe9h5lQ3MhtzW3/du0pOP6FFLyEnblJ2pW3oK2qC8 0Zrv0rOK9CRE1UOVYND+gVOdYtFFA7A2 -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:33 2025 by rpki-client