$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: ro7gFBkLfzB+1shulzxw4ce+7hEstZWrBNOC/JbrrhI= Subject key identifier: 6B:7B:C7:50:76:83:C5:FF:D5:02:C0:60:3D:E5:67:E7:32:FE:DC:04 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 03DF Signing time: Sat 23 Aug 2025 00:49:55 +0000 Manifest this update: Sat 23 Aug 2025 00:49:54 +0000 Manifest next update: Sat 30 Aug 2025 00:49:54 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: /w5Rv5FYYwTRTEwKSuJMuPLcvE5IvoAINe/+tSA9XHA=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 4GJunqqaJYIF16cCsMPgPX96ELnXrrR7663nppGhNhg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: QyHX2tVKdXvBrNBfn6kDQfZOmLtDJUfGgQzAxEofZ58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Aug 23 00:49:54 2025 GMT Not After : Aug 30 00:49:54 2025 GMT Subject: CN=68a91032-2ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:7a:39:c9:b0:58:8a:98:5b:cb:db:6c:f8: d3:b0:2b:a8:fd:12:07:97:0f:af:4e:e8:b8:e5:c5: 1f:bb:16:ce:fd:c3:d4:76:90:40:23:22:2d:0f:e3: f6:2f:d4:f6:7e:59:31:e1:44:9e:2a:d6:6c:f7:53: ab:97:9f:84:2c:ee:3f:ba:0f:58:cc:86:be:5a:56: a5:51:ff:4a:13:30:9b:6d:0f:01:cd:71:19:93:07: 02:06:2b:2f:d3:9b:37:d8:b9:97:89:bb:d9:be:02: b0:66:b6:51:02:15:20:7c:13:8f:3e:da:1d:2e:66: 9b:63:ec:93:2f:7b:62:c0:0c:9c:09:8f:7b:f6:e4: 1c:5f:7d:94:b4:7d:8c:a9:88:2f:66:64:61:91:0a: 5e:7f:9a:82:a9:c0:72:f2:ff:c2:70:73:de:db:2d: 46:61:49:cb:b4:0d:47:96:1c:5e:e8:c4:28:7a:1b: c5:97:be:c0:5b:2a:57:23:88:2b:33:7b:71:7a:ed: 0a:b2:93:06:96:fc:a3:d6:a0:91:7c:7b:2e:24:c4: e6:2e:c1:2f:63:d1:7b:75:1d:c9:81:7d:c5:b1:f5: b0:41:13:ce:ae:f5:3a:1e:47:2f:69:af:3a:8c:9d: f8:15:ac:01:7b:27:be:3f:c8:16:fe:51:cf:3f:a0: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:C7:50:76:83:C5:FF:D5:02:C0:60:3D:E5:67:E7:32:FE:DC:04 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d9:f2:21:54:84:7f:e1:e8:46:69:b9:4c:4e:6c:83:2d:e0: ea:31:d5:63:30:ac:f1:fd:0e:2b:19:d9:01:41:a7:c1:50:66: 6d:af:26:98:52:4e:d6:af:d1:0b:ec:7a:b1:10:e4:43:71:be: 37:81:e6:b9:23:61:34:b2:67:19:5f:32:ab:4c:90:1e:67:74: 4a:df:64:b9:d5:98:07:71:02:cf:89:02:9d:07:74:14:b6:0a: c0:2d:6b:9b:27:88:f0:7d:f9:44:d9:b5:63:63:fc:6a:1c:f7: 86:ee:fb:3e:a9:55:b4:0a:55:b3:93:e3:95:b5:bb:b5:e1:f5: 74:6e:f9:a6:25:8c:82:4c:31:bb:1a:25:17:b4:01:1b:70:d4: 48:c1:a1:cc:d0:ae:cd:ea:be:56:96:13:ef:99:50:54:87:c7: 2f:ae:1c:41:b7:e3:63:f4:d5:fd:79:3c:00:08:6e:cd:c3:39: 24:3a:58:8d:0f:c8:92:1d:7a:05:b2:0a:ce:c4:af:7e:53:9b: 05:62:f0:cd:4b:1f:f3:29:80:1d:8f:ed:f3:78:30:f0:61:25: 7a:ae:a4:76:a6:2c:f4:d2:16:cf:b4:ef:b1:7f:0f:6d:b4:a4: 08:6c:84:ba:36:63:48:cb:8d:42:c6:10:18:bd:eb:9e:e7:89: b2:71:eb:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwODIzMDA0OTU0WhcNMjUwODMwMDA0OTU0WjAYMRYwFAYD VQQDEw02OGE5MTAzMi0yZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPB6OcmwWIqYW8vbbPjTsCuo/RIHlw+vTui45cUfuxbO/cPUdpBAIyItD+P2 L9T2flkx4USeKtZs91Orl5+ELO4/ug9YzIa+WlalUf9KEzCbbQ8BzXEZkwcCBisv 05s32LmXibvZvgKwZrZRAhUgfBOPPtodLmabY+yTL3tiwAycCY979uQcX32UtH2M qYgvZmRhkQpef5qCqcBy8v/CcHPe2y1GYUnLtA1Hlhxe6MQoehvFl77AWypXI4gr M3txeu0KspMGlvyj1qCRfHsuJMTmLsEvY9F7dR3JgX3FsfWwQRPOrvU6Hkcvaa86 jJ34FawBeye+P8gW/lHPP6C83QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt7x1B2 g8X/1QLAYD3lZ+cy/twEMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr2fIhVIR/4ehGablMTmyDLeDqMdVjMKzx/Q4rGdkBQafBUGZtryaY Uk7Wr9EL7HqxEORDcb43gea5I2E0smcZXzKrTJAeZ3RK32S51ZgHcQLPiQKdB3QU tgrALWubJ4jwfflE2bVjY/xqHPeG7vs+qVW0ClWzk+OVtbu14fV0bvmmJYyCTDG7 GiUXtAEbcNRIwaHM0K7N6r5WlhPvmVBUh8cvrhxBt+Nj9NX9eTwACG7NwzkkOliN D8iSHXoFsgrOxK9+U5sFYvDNSx/zKYAdj+3zeDDwYSV6rqR2piz00hbPtO+xfw9t tKQIbIS6NmNIy41CxhAYveue54mycevR -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:22 2025 by rpki-client