$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: eThvFIVKo7/zEkLkDQZbIftgQyT4jn9JQ1VAFAZlzyM= Subject key identifier: 9D:6C:5B:FE:D3:EF:F3:90:CE:7F:03:81:A1:31:5A:67:96:32:A4:40 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 34C7 Signing time: Fri 22 Aug 2025 15:18:00 +0000 Manifest this update: Fri 22 Aug 2025 15:17:59 +0000 Manifest next update: Fri 29 Aug 2025 15:17:59 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: tPjXL6uMAdW/HSxF7Vvq742lFyYvFVs7RECd63Wh1lI=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Aug 22 15:17:59 2025 GMT Not After : Aug 29 15:17:59 2025 GMT Subject: CN=68a88a28-8f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:d5:94:da:87:64:79:7f:23:ee:3c:da:7f: 51:61:94:a8:0b:db:ea:a3:26:90:9f:99:59:28:0f: 4e:f4:62:29:84:e6:3e:ae:09:d0:19:ce:cc:90:db: 41:93:3e:e2:66:6f:44:8f:c9:7f:3e:b9:4d:b7:d1: 75:7c:f7:03:46:0a:c5:e4:42:c2:cb:bb:3d:da:c0: 55:24:f9:92:f4:20:e6:87:83:e3:56:cd:ba:ec:40: 24:a4:b9:ec:12:93:15:03:26:8b:1d:c6:e2:0d:36: fa:de:8d:7d:7d:2f:55:d3:3e:d5:4e:98:3d:db:9a: 70:24:b2:ee:bf:4f:85:03:01:a4:1c:ee:08:65:17: 90:05:25:9f:15:50:e8:11:b2:3d:d8:cf:ee:b8:e4: 6f:00:c6:aa:43:59:f7:40:28:c8:f4:0e:ec:b2:c5: 6c:ff:ab:ff:be:4b:67:fc:a5:1c:f5:93:a1:79:ba: 70:2e:c3:57:37:ec:34:3d:6e:82:6b:a3:ea:66:8c: 31:a9:ef:92:e9:27:f0:75:90:a1:4a:6b:d4:9d:31: 6d:a5:62:bc:89:b1:f8:8f:64:a2:9b:26:bc:1f:50: b4:20:9b:1e:20:72:39:7f:71:54:94:17:88:60:05: 22:62:e8:30:57:79:ed:03:bb:b6:a8:34:cc:6a:b9: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6C:5B:FE:D3:EF:F3:90:CE:7F:03:81:A1:31:5A:67:96:32:A4:40 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d7:db:8e:fa:7f:9f:60:7c:57:9a:06:c5:c4:52:1b:73:55: e6:0d:ef:39:42:f8:c0:4e:21:2b:81:83:6e:84:7c:6a:24:8d: 5a:47:0c:d4:e7:47:69:1a:28:b3:c1:1e:6c:03:4c:fd:b8:6c: 07:9d:e0:1c:50:86:c3:bd:df:6f:b8:c1:49:9b:a9:7b:c5:c0: b7:01:33:5f:75:35:21:47:42:fd:0b:10:d1:94:12:f8:ea:1c: a8:24:ca:67:48:99:0b:1a:46:73:a1:a8:13:02:7a:81:06:42: 6d:ff:81:03:c8:16:b0:8b:52:a6:75:7a:17:dc:0c:17:36:5c: 73:0e:5e:3a:d0:0d:c2:b5:14:fe:4c:d9:2b:40:1f:5d:50:a8: 3b:61:52:b7:95:d6:c6:8a:50:7e:56:ac:10:10:c8:5d:79:35: 02:3e:23:8f:a7:e8:bc:04:67:aa:79:0a:a3:8c:22:46:bb:a9: 7c:be:b8:a8:43:54:b1:a3:34:13:5c:e9:80:f9:ab:b3:6b:0a: ad:84:15:46:9b:eb:d1:c3:a4:94:ac:b8:6c:18:6e:d5:67:1e: 29:d2:85:f9:21:a6:66:0d:d6:17:cb:0c:e0:7c:40:fc:6c:69: 81:0a:ae:d7:37:8f:3e:3f:ca:66:68:de:4a:d1:00:3e:84:8a: 7a:92:69:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwODIyMTUxNzU5WhcNMjUwODI5MTUxNzU5WjAYMRYwFAYD VQQDEw02OGE4OGEyOC04ZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ7VlNqHZHl/I+482n9RYZSoC9vqoyaQn5lZKA9O9GIphOY+rgnQGc7MkNtB kz7iZm9Ej8l/PrlNt9F1fPcDRgrF5ELCy7s92sBVJPmS9CDmh4PjVs267EAkpLns EpMVAyaLHcbiDTb63o19fS9V0z7VTpg925pwJLLuv0+FAwGkHO4IZReQBSWfFVDo EbI92M/uuORvAMaqQ1n3QCjI9A7sssVs/6v/vktn/KUc9ZOhebpwLsNXN+w0PW6C a6PqZowxqe+S6SfwdZChSmvUnTFtpWK8ibH4j2Simya8H1C0IJseIHI5f3FUlBeI YAUiYugwV3ntA7u2qDTMarmygwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1sW/7T 7/OQzn8DgaExWmeWMqRAMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs19uO+n+fYHxXmgbFxFIbc1XmDe85QvjATiErgYNuhHxqJI1aRwzU 50dpGiizwR5sA0z9uGwHneAcUIbDvd9vuMFJm6l7xcC3ATNfdTUhR0L9CxDRlBL4 6hyoJMpnSJkLGkZzoagTAnqBBkJt/4EDyBawi1KmdXoX3AwXNlxzDl460A3CtRT+ TNkrQB9dUKg7YVK3ldbGilB+VqwQEMhdeTUCPiOPp+i8BGeqeQqjjCJGu6l8vrio Q1SxozQTXOmA+auzawqthBVGm+vRw6SUrLhsGG7VZx4p0oX5IaZmDdYXywzgfED8 bGmBCq7XN48+P8pmaN5K0QA+hIp6kmnG -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:12 2025 by rpki-client