$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: KUQurEfHDBSnJsTyywXyV2BBuLx2qf2jbzOILL/TEX8= Subject key identifier: ED:26:7A:61:D5:1B:B7:B5:F9:C1:95:87:C2:97:BF:A4:9B:37:B3:FD Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 34C1 Signing time: Fri 22 Aug 2025 15:20:32 +0000 Manifest this update: Fri 22 Aug 2025 15:20:31 +0000 Manifest next update: Fri 29 Aug 2025 15:20:31 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: h0fpL2PDMIAevpCd69kS882i9ZCZUINWbp1kAQlLpcI=) 2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: a03YccLD26+EVq1g9SXKvWZ2v+EmXltyBYT+9f1nANI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Aug 22 15:20:31 2025 GMT Not After : Aug 29 15:20:31 2025 GMT Subject: CN=68a88abf-00c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:45:55:c8:08:bf:20:91:31:d5:e7:93:63: 5a:c5:10:ea:e1:75:64:79:d7:38:13:04:52:bb:6f: ec:96:c5:41:98:fe:10:6d:84:e7:74:ec:30:8b:b1: 33:de:4f:0b:ce:8d:7c:96:92:a6:1b:2f:75:f0:da: 7a:14:38:27:6d:52:96:13:c0:a5:cd:36:b4:78:4d: d9:d6:78:de:b7:48:11:67:6b:03:b2:4e:db:73:c1: 04:c8:76:5b:ff:77:29:f6:28:d3:16:e4:1c:47:dc: 84:8e:92:62:01:09:d8:c5:e9:1f:68:13:2c:df:b3: 67:4a:bb:06:b6:70:12:f3:d6:63:1f:c0:fd:bf:00: 3c:4e:e7:e2:3b:82:df:0d:db:33:6b:69:e4:2d:11: ff:e4:6a:08:fc:bd:43:ab:93:ee:ac:98:57:77:3d: 7d:53:1e:79:e7:fa:96:8a:a8:31:3e:cc:f4:2c:35: 2c:af:82:2d:15:d9:9f:32:db:e5:b1:2d:e3:28:34: 31:94:3b:ce:0e:0c:a4:eb:e0:28:03:42:83:a3:6b: f8:61:68:45:a8:a2:c8:fa:a9:ae:d6:a8:77:38:6a: 83:49:18:6e:1e:6a:2c:2b:5b:68:db:a6:b6:e7:6a: ed:0e:81:81:0c:cc:fd:15:04:d4:6e:08:c5:03:96: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:26:7A:61:D5:1B:B7:B5:F9:C1:95:87:C2:97:BF:A4:9B:37:B3:FD X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f9:37:ec:fb:c0:06:69:42:2b:6a:93:3d:2e:33:70:0b:8a: 10:7b:dd:02:c5:70:59:65:5e:d0:c0:49:b5:78:93:6c:ec:0f: 1f:3f:b0:7d:da:9e:1c:e4:a6:89:1f:eb:bf:35:04:31:33:47: 33:2f:0f:bc:50:64:0c:7e:a4:25:8e:ab:4c:b8:f2:fc:2d:30: 2d:79:fa:71:fd:06:92:e6:ae:3e:22:fa:c9:6e:38:93:d2:d2: e1:28:16:e8:a2:70:ee:f0:a5:f5:e6:46:df:23:41:47:d3:9e: 4d:df:72:3f:7c:03:84:dc:51:44:e1:54:a2:47:2f:32:c7:e9: 4b:9d:c8:ec:67:b2:a3:d4:c0:6d:44:d3:81:50:b8:0a:7b:a8: 2f:07:22:83:dc:a8:16:53:d2:e9:79:66:7a:66:55:b1:bd:88: 2a:e1:cd:2e:db:de:28:d2:d3:f8:52:2c:29:e1:fa:28:c8:94: 62:39:89:e7:6e:36:34:25:a7:89:39:73:13:0d:b8:ee:6c:c0: a2:66:fe:96:eb:a1:e3:9e:ee:72:46:c9:72:dc:7d:c0:5b:08: 1a:b0:76:1f:83:a6:23:66:97:73:16:25:54:a7:93:53:3f:09: 0f:43:bf:97:6e:fd:91:78:a0:7e:95:bf:aa:83:55:86:a3:dc: bc:17:1d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjUwODIyMTUyMDMxWhcNMjUwODI5MTUyMDMxWjAYMRYwFAYD VQQDEw02OGE4OGFiZi0wMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmpFVcgIvyCRMdXnk2NaxRDq4XVkedc4EwRSu2/slsVBmP4QbYTndOwwi7Ez 3k8Lzo18lpKmGy918Np6FDgnbVKWE8ClzTa0eE3Z1njet0gRZ2sDsk7bc8EEyHZb /3cp9ijTFuQcR9yEjpJiAQnYxekfaBMs37NnSrsGtnAS89ZjH8D9vwA8TufiO4Lf Ddsza2nkLRH/5GoI/L1Dq5PurJhXdz19Ux555/qWiqgxPsz0LDUsr4ItFdmfMtvl sS3jKDQxlDvODgyk6+AoA0KDo2v4YWhFqKLI+qmu1qh3OGqDSRhuHmosK1to26a2 52rtDoGBDMz9FQTUbgjFA5YPSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0memHV G7e1+cGVh8KXv6SbN7P9MB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3+Tfs+8AGaUIrapM9LjNwC4oQe90CxXBZZV7QwEm1eJNs7A8fP7B9 2p4c5KaJH+u/NQQxM0czLw+8UGQMfqQljqtMuPL8LTAtefpx/QaS5q4+IvrJbjiT 0tLhKBboonDu8KX15kbfI0FH055N33I/fAOE3FFE4VSiRy8yx+lLncjsZ7Kj1MBt RNOBULgKe6gvByKD3KgWU9LpeWZ6ZlWxvYgq4c0u294o0tP4Uiwp4fooyJRiOYnn bjY0JaeJOXMTDbjubMCiZv6W66Hjnu5yRsly3H3AWwgasHYfg6YjZpdzFiVUp5NT PwkPQ7+Xbv2ReKB+lb+qg1WGo9y8Fx25 -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:18 2025 by rpki-client