$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: +Svs1c4L7eWmbrzKQSpZUlYbFPm3bL8cVax2fKyPlMA= Subject key identifier: DE:03:45:21:75:06:17:34:C8:84:54:35:ED:7E:56:4B:8E:15:F4:34 Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 0262 Signing time: Sat 23 Aug 2025 02:30:45 +0000 Manifest this update: Sat 23 Aug 2025 02:30:44 +0000 Manifest next update: Sat 30 Aug 2025 02:30:44 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: oSR5VUYBq2l8G/tPsA0wUgvlzr/x2z37xoOslNkKVj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Aug 23 02:30:44 2025 GMT Not After : Aug 30 02:30:44 2025 GMT Subject: CN=68a927d5-320e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:de:fb:4e:7e:c1:58:c8:83:9c:68:29:a3:fa: 22:94:8c:fa:97:73:b8:32:8a:2e:b2:dd:34:b4:9d: fd:a6:a3:3b:65:8f:3d:53:61:cf:7a:23:63:04:93: 20:d7:ba:3f:1e:1c:7e:a5:90:5d:c5:f5:af:8e:da: 37:b7:4b:15:01:d0:ba:ca:ec:d8:0a:1a:12:9e:34: e5:fb:b8:c7:cf:f2:64:4b:e0:20:18:8a:78:a9:0a: 2b:b9:ab:2e:e6:c2:b7:ae:0c:be:55:ba:db:91:00: 7f:01:e5:b8:6f:93:94:16:55:6a:d2:0b:fd:63:65: e2:d1:db:36:01:6d:cd:0c:3c:24:9b:71:47:4f:49: ab:68:4b:8e:0f:38:3a:a5:ad:72:b0:51:84:e5:38: 63:9c:8e:c8:ce:88:e3:69:35:f1:4e:48:94:c9:a7: 8a:96:69:26:5a:ef:71:6c:1f:e2:02:a2:de:87:57: 92:19:98:52:ca:7e:2f:16:cb:59:ec:39:8f:ee:ca: 5c:f4:c8:a6:31:74:3b:44:3d:55:a7:88:17:a3:15: bd:3e:08:db:57:3c:29:66:6c:ce:d1:b0:ea:20:69: 23:c0:5a:cf:48:13:80:27:09:54:8b:ce:32:8d:d5: bb:77:c4:09:0e:1d:b7:1e:78:07:83:a8:8f:00:fd: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:03:45:21:75:06:17:34:C8:84:54:35:ED:7E:56:4B:8E:15:F4:34 X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:34:9b:18:46:7c:87:bd:86:30:23:16:e1:cc:74:ea:33:42: 21:0d:24:94:92:f8:67:ca:75:31:30:f4:f5:a4:b7:35:66:ea: 5f:1f:b6:29:59:8d:81:1e:ac:2c:f0:c7:0f:9d:6e:c9:9e:6e: 32:f2:f5:cf:75:15:43:1d:c7:f2:09:f7:2f:60:fb:df:ba:6f: 3c:61:56:2e:2a:9d:95:57:ea:91:5c:1d:ed:37:7a:2e:59:43: 13:7e:52:a6:2e:4b:c8:d1:ff:77:1d:10:15:08:90:10:05:74: 95:a7:af:1f:57:d3:e0:07:bf:7c:60:0e:d2:8f:20:5c:be:36: c3:46:0d:6f:55:b0:06:1e:9f:66:18:c9:dc:9f:61:50:33:76: 3d:71:a2:ec:cd:03:6a:be:1a:ec:19:79:fa:0f:54:47:52:15: 64:02:96:22:f9:43:8b:c5:94:0a:21:5f:c0:91:5b:38:c6:97: 8b:d0:0b:91:a0:72:31:ed:38:64:88:f7:00:6f:8c:ff:19:02: d0:ea:17:2d:37:98:62:16:d1:a7:a9:3b:94:33:56:c8:8c:4a: 3c:4e:96:c3:4f:55:03:2d:d7:07:4f:d9:84:33:0f:1b:58:ce: f4:e4:d2:e8:af:c8:96:33:f5:94:49:af:0e:d1:16:c7:24:64: 10:98:b5:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUwODIzMDIzMDQ0WhcNMjUwODMwMDIzMDQ0WjAYMRYwFAYD VQQDEw02OGE5MjdkNS0zMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5977Tn7BWMiDnGgpo/oilIz6l3O4Mooust00tJ39pqM7ZY89U2HPeiNjBJMg 17o/Hhx+pZBdxfWvjto3t0sVAdC6yuzYChoSnjTl+7jHz/JkS+AgGIp4qQoruasu 5sK3rgy+VbrbkQB/AeW4b5OUFlVq0gv9Y2Xi0ds2AW3NDDwkm3FHT0mraEuODzg6 pa1ysFGE5ThjnI7IzojjaTXxTkiUyaeKlmkmWu9xbB/iAqLeh1eSGZhSyn4vFstZ 7DmP7spc9MimMXQ7RD1Vp4gXoxW9PgjbVzwpZmzO0bDqIGkjwFrPSBOAJwlUi84y jdW7d8QJDh23HngHg6iPAP289wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4DRSF1 Bhc0yIRUNe1+VkuOFfQ0MB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeNJsYRnyHvYYwIxbhzHTqM0IhDSSUkvhnynUxMPT1pLc1ZupfH7Yp WY2BHqws8McPnW7Jnm4y8vXPdRVDHcfyCfcvYPvfum88YVYuKp2VV+qRXB3tN3ou WUMTflKmLkvI0f93HRAVCJAQBXSVp68fV9PgB798YA7SjyBcvjbDRg1vVbAGHp9m GMncn2FQM3Y9caLszQNqvhrsGXn6D1RHUhVkApYi+UOLxZQKIV/AkVs4xpeL0AuR oHIx7ThkiPcAb4z/GQLQ6hctN5hiFtGnqTuUM1bIjEo8TpbDT1UDLdcHT9mEMw8b WM705NLor8iWM/WUSa8O0RbHJGQQmLWX -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:31 2025 by rpki-client