$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: CysQ0dkBaNxwHJsjA5fEgmnG3evUos1UbC+7iTuhnsk= Subject key identifier: C5:07:DC:E4:EA:D8:8B:2E:21:20:4F:0E:6A:68:C5:0D:BE:D3:F2:77 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 02A7 Signing time: Sat 23 Aug 2025 01:48:51 +0000 Manifest this update: Sat 23 Aug 2025 01:48:50 +0000 Manifest next update: Sat 30 Aug 2025 01:48:50 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: 2QEkgULE2dENiYoK+zYlbAqcEt5VySS5q/xTpw4Qr2U=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Aug 23 01:48:50 2025 GMT Not After : Aug 30 01:48:50 2025 GMT Subject: CN=68a91e03-6b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:ec:7c:5d:0f:32:33:47:f1:3c:ac:f2:2c: a1:d6:c5:a2:5e:56:7f:b1:52:f2:67:eb:13:a5:db: 7e:71:67:0a:e6:01:6b:da:8b:50:ab:ce:14:d3:b3: cc:e0:40:37:4b:67:fb:f8:ce:fd:a5:09:69:d7:89: bf:08:ac:98:cf:83:5c:fe:2b:cc:c5:0f:b1:e6:fe: a8:9a:19:f2:7b:c5:9a:ee:7d:ae:b0:a6:59:f6:a9: 1d:8c:61:11:38:52:97:07:85:74:1b:1b:23:df:1a: 84:36:bc:3b:c3:68:f5:31:51:92:86:15:d6:1a:0d: ff:d6:30:63:be:ed:de:e2:d8:27:f8:43:88:51:76: 89:1e:6f:87:af:61:3f:2b:7e:d3:0d:c8:0b:37:10: 6e:02:bc:82:2f:d9:e8:18:40:8e:98:5e:30:ca:81: 57:25:b4:25:66:8f:90:c2:73:52:9a:56:39:99:96: fc:65:63:2f:1a:0d:23:58:21:27:b4:ad:fb:d3:46: 42:aa:59:d5:7a:62:e0:d1:98:93:18:b1:8e:5d:9f: 58:56:a5:29:21:38:e6:41:e8:bc:d4:47:84:db:68: 3d:8a:a7:05:13:c8:f9:e0:09:9e:9e:1b:01:5a:ce: 27:9c:50:fe:b5:9e:fa:2c:82:a4:df:40:21:1c:7c: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:07:DC:E4:EA:D8:8B:2E:21:20:4F:0E:6A:68:C5:0D:BE:D3:F2:77 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:61:d3:13:90:b4:88:d3:03:0c:27:ff:4b:d4:af:cf:87:3c: 13:ce:4f:a9:6d:de:70:95:b7:6b:c6:fa:09:38:6f:0c:e0:0e: e4:c0:42:f4:da:77:a2:3c:15:fe:82:12:d9:96:b1:19:79:8f: 35:4b:d6:42:4b:24:f1:33:89:ac:10:36:c2:58:76:8a:a3:96: ed:66:00:63:94:a0:a8:a0:89:77:93:0a:eb:77:3d:69:ec:bc: b3:04:d7:7f:b3:36:4b:e2:dd:a1:b4:bc:7c:e1:66:fd:7a:0b: 5a:10:27:f5:cd:d7:81:d0:c7:26:a3:7d:cd:45:2b:3c:e7:29: f3:00:91:1c:63:c3:a1:c5:6b:e7:85:6e:86:ca:f3:41:2d:9e: 1c:7b:36:f7:3c:a6:47:69:7f:68:fc:af:94:0d:c3:94:fd:03: 17:e6:98:1e:45:be:60:a2:1b:a3:3c:52:d7:22:67:d2:f9:96: 9f:da:a5:55:4c:8d:b2:ea:96:e3:23:2c:5f:af:3a:c8:ad:7f: 67:61:2f:4c:36:d6:aa:4a:c2:c5:91:42:a7:8f:66:52:86:ba: ed:a1:21:4e:83:bc:3f:d9:b1:3b:36:19:60:cf:d7:3e:cb:14: 74:3c:cb:fc:4c:88:0e:ea:8c:eb:0f:f6:98:f1:76:dc:d5:74: fd:d1:f3:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUwODIzMDE0ODUwWhcNMjUwODMwMDE0ODUwWjAYMRYwFAYD VQQDEw02OGE5MWUwMy02YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArprsfF0PMjNH8Tys8iyh1sWiXlZ/sVLyZ+sTpdt+cWcK5gFr2otQq84U07PM 4EA3S2f7+M79pQlp14m/CKyYz4Nc/ivMxQ+x5v6omhnye8Wa7n2usKZZ9qkdjGER OFKXB4V0Gxsj3xqENrw7w2j1MVGShhXWGg3/1jBjvu3e4tgn+EOIUXaJHm+Hr2E/ K37TDcgLNxBuAryCL9noGECOmF4wyoFXJbQlZo+QwnNSmlY5mZb8ZWMvGg0jWCEn tK3700ZCqlnVemLg0ZiTGLGOXZ9YVqUpITjmQei81EeE22g9iqcFE8j54AmenhsB Ws4nnFD+tZ76LIKk30AhHHyEPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUH3OTq 2IsuISBPDmpoxQ2+0/J3MB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKYdMTkLSI0wMMJ/9L1K/PhzwTzk+pbd5wlbdrxvoJOG8M4A7kwEL0 2neiPBX+ghLZlrEZeY81S9ZCSyTxM4msEDbCWHaKo5btZgBjlKCooIl3kwrrdz1p 7LyzBNd/szZL4t2htLx84Wb9egtaECf1zdeB0Mcmo33NRSs85ynzAJEcY8OhxWvn hW6GyvNBLZ4cezb3PKZHaX9o/K+UDcOU/QMX5pgeRb5gohujPFLXImfS+Zaf2qVV TI2y6pbjIyxfrzrIrX9nYS9MNtaqSsLFkUKnj2ZShrrtoSFOg7w/2bE7Nhlgz9c+ yxR0PMv8TIgO6ozrD/aY8Xbc1XT90fNa -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:12 2025 by rpki-client