$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: nqA8MlgiDU/55emsFFBlroXFZGZ21K+t9IJQ1WYm6YE= Subject key identifier: 0A:3D:57:D8:EB:47:40:81:C2:35:15:E7:05:12:78:2B:E3:B1:7C:4A Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0D93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0D8B Signing time: Fri 22 Aug 2025 18:03:20 +0000 Manifest this update: Fri 22 Aug 2025 18:03:19 +0000 Manifest next update: Fri 29 Aug 2025 18:03:19 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: zsrDgz1sOW8DWtzRQ00aOBz5bploxjlNAt5dzksiUGM=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: rQKpubYv7cW6+A5yMDDdgzCiTmEdYXOtyG9cRX0uQPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Aug 22 18:03:19 2025 GMT Not After : Aug 29 18:03:19 2025 GMT Subject: CN=68a8b0e7-e699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cf:d1:ea:24:07:7e:d1:e3:64:36:d1:ae:1a: c2:52:8f:c4:96:a9:01:16:e8:84:51:90:c8:f3:0c: 08:22:74:48:ec:08:08:18:42:b0:3e:e1:1e:ea:64: 58:78:48:9a:e4:01:cd:c4:87:35:4e:a1:30:64:d8: 09:ce:93:98:70:0d:73:fe:95:49:0a:72:2e:e2:eb: 78:da:11:9d:18:25:74:dc:37:68:3c:26:23:8c:d4: 3b:4c:c5:73:ce:86:df:dc:04:98:73:c1:54:d9:00: 0a:16:16:de:f9:53:e0:ed:a0:9e:9b:c5:3e:8d:bf: de:65:7b:92:9d:09:97:8f:80:c6:06:3f:36:0d:d8: 35:50:07:71:67:bc:f0:9b:17:84:1b:52:1a:c5:21: a3:09:d6:3c:e0:4c:ee:8b:88:44:16:7e:91:35:24: 47:c2:64:8d:c6:2a:6b:5f:d2:e7:25:ec:62:34:2e: 86:4b:a3:56:0f:f2:ef:bd:7f:85:a8:93:52:74:f8: db:53:30:89:eb:e8:c9:6d:df:3d:29:af:22:96:48: 94:3a:f9:a1:e8:f0:39:56:5b:eb:68:51:ab:11:94: 94:f2:49:e2:df:03:2b:6b:b0:f8:aa:97:c4:3c:03: 76:51:7b:10:36:ef:de:bf:d5:e7:52:c9:a0:e1:b7: f5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3D:57:D8:EB:47:40:81:C2:35:15:E7:05:12:78:2B:E3:B1:7C:4A X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:5b:75:03:52:fa:d6:a7:af:57:ea:ba:49:e4:4f:f8:57:bd: 28:01:78:b9:9b:af:5c:3d:26:3a:df:73:87:74:94:35:10:ae: de:67:5b:8b:a6:2e:8a:5a:12:7a:7a:63:e9:05:1c:86:0d:fe: 5e:2c:e2:d8:93:bc:89:d9:a0:57:55:61:91:31:53:bd:04:b3: 4b:03:f2:65:ed:25:d4:23:93:c8:81:f9:aa:4c:47:bf:10:39: 7c:e7:be:07:5f:3a:4f:da:63:2a:ea:f8:9d:f9:aa:4d:02:c3: bb:73:fb:f6:a0:8f:e9:8f:0f:cb:9a:4b:9c:68:ce:db:28:3b: 43:03:83:c3:f1:31:fc:88:9a:a4:d4:52:ab:80:3b:d5:e0:ad: cb:0f:5e:4f:9f:02:c0:41:45:42:dd:d6:3e:fa:cd:c2:54:63: d9:aa:46:e6:f9:be:67:ca:ed:c1:82:d9:f3:9c:f5:9d:72:b3: 4b:f8:6b:2c:86:39:b8:00:91:51:9b:1e:1e:83:42:e3:11:36: aa:6e:ea:f8:56:84:ef:bf:94:6c:a2:ef:7f:96:8c:7e:28:75: f4:f8:b5:15:b3:9f:fb:a1:7a:fe:ce:39:b1:43:8f:78:52:33: 69:18:2d:57:ef:b8:7c:b0:10:6a:22:94:f9:db:fb:c7:a8:3f: 2c:42:82:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjUwODIyMTgwMzE5WhcNMjUwODI5MTgwMzE5WjAYMRYwFAYD VQQDEw02OGE4YjBlNy1lNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc/R6iQHftHjZDbRrhrCUo/ElqkBFuiEUZDI8wwIInRI7AgIGEKwPuEe6mRY eEia5AHNxIc1TqEwZNgJzpOYcA1z/pVJCnIu4ut42hGdGCV03DdoPCYjjNQ7TMVz zobf3ASYc8FU2QAKFhbe+VPg7aCem8U+jb/eZXuSnQmXj4DGBj82Ddg1UAdxZ7zw mxeEG1IaxSGjCdY84Ezui4hEFn6RNSRHwmSNxiprX9LnJexiNC6GS6NWD/LvvX+F qJNSdPjbUzCJ6+jJbd89Ka8ilkiUOvmh6PA5VlvraFGrEZSU8kni3wMra7D4qpfE PAN2UXsQNu/ev9XnUsmg4bf1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAo9V9jr R0CBwjUV5wUSeCvjsXxKMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6W3UDUvrWp69X6rpJ5E/4V70oAXi5m69cPSY633OHdJQ1EK7eZ1uL pi6KWhJ6emPpBRyGDf5eLOLYk7yJ2aBXVWGRMVO9BLNLA/Jl7SXUI5PIgfmqTEe/ EDl8574HXzpP2mMq6vid+apNAsO7c/v2oI/pjw/LmkucaM7bKDtDA4PD8TH8iJqk 1FKrgDvV4K3LD15PnwLAQUVC3dY++s3CVGPZqkbm+b5nyu3BgtnznPWdcrNL+Gss hjm4AJFRmx4eg0LjETaqbur4VoTvv5Rsou9/lox+KHX0+LUVs5/7oXr+zjmxQ494 UjNpGC1X77h8sBBqIpT52/vHqD8sQoIU -----END CERTIFICATE-----Generated at Sat Aug 23 21:06:08 2025 by rpki-client