$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: jPt9CW+mCF12LJ44mbHN+dKM58lDNG06zdguau5xYls= Subject key identifier: 13:1C:CB:DF:66:31:53:9D:D8:F8:E1:9B:9E:5F:55:0D:B0:28:B6:1C Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 01E4 Signing time: Sat 23 Aug 2025 02:45:37 +0000 Manifest this update: Sat 23 Aug 2025 02:45:36 +0000 Manifest next update: Sat 30 Aug 2025 02:45:36 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: ufkIFfG4KtmkXhNKXXjVvjEZ06x0eD1Oqwbmlp9B9fM=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Aug 23 02:45:36 2025 GMT Not After : Aug 30 02:45:36 2025 GMT Subject: CN=68a92b50-f660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:ad:8b:7b:23:df:34:86:20:bd:2a:f1:0c: 05:66:26:15:1a:ab:65:d1:7b:87:58:15:d9:32:ab: 90:ae:83:cb:2e:2d:72:e3:46:9a:6b:72:42:2e:1c: 04:47:e6:26:bb:59:80:eb:c1:43:a9:cb:86:89:f6: b9:08:2f:27:df:0b:81:5f:58:6f:dc:03:1c:b8:ea: ae:9b:db:bc:f4:36:cc:a9:09:ae:20:70:9a:f9:01: 0a:89:9f:6b:42:58:c8:3f:aa:0f:5f:8b:a1:cb:9d: 55:d6:7a:01:3c:31:ad:b1:29:05:56:15:b9:cb:9d: dc:b6:1f:30:75:c8:88:2c:5e:2c:41:04:8d:ba:64: ba:ba:9a:8a:93:ba:ac:6b:6c:f7:5e:5c:1c:c4:60: 1d:4a:44:23:01:d5:5e:66:11:d5:7c:f6:25:a6:b9: 8b:71:99:32:7e:0a:df:5a:33:ea:fb:52:77:e7:00: 15:b9:e3:64:a2:b4:3b:12:6c:8b:93:b0:ae:0f:12: 9f:b5:24:0a:42:ac:f4:07:23:da:31:89:91:e0:7d: 66:3c:44:2c:82:e4:44:06:ce:76:27:df:28:b6:58: ad:34:8c:3f:ba:a6:ba:44:5d:5a:ff:ec:30:1b:8e: d7:7c:e3:2d:8c:e4:47:14:f1:60:fa:f5:bd:7c:b2: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:CB:DF:66:31:53:9D:D8:F8:E1:9B:9E:5F:55:0D:B0:28:B6:1C X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:32:08:60:bb:d7:12:c0:39:53:c5:63:65:48:18:dd:e3:7f: 62:ef:fa:61:d8:01:63:c1:4d:e9:42:87:ed:fa:75:28:c5:7f: 5a:71:d8:48:f8:5a:67:0c:ae:92:2a:ef:c0:c8:4f:4e:fb:c5: 41:15:1d:81:2d:83:6b:cf:9e:b8:b1:84:51:21:18:16:71:a8: 7a:89:1b:a7:60:a8:16:dc:a0:75:c0:2a:ea:be:09:c2:93:1c: 18:e8:02:37:01:48:35:0d:b1:bf:4f:b5:2e:c9:4b:56:37:f4: 7c:a4:9e:ac:23:c1:25:78:48:81:99:5a:d6:5f:4a:bd:cb:81: 83:a4:d6:ad:63:f5:0e:42:40:82:46:f5:c7:4f:88:96:e8:76: 9c:45:4b:0a:10:08:08:ab:cb:55:5a:a2:89:e0:23:93:26:57: 2a:8e:e0:40:f3:2f:8d:38:f9:86:05:3c:b1:bc:f2:91:63:15: dd:b5:18:5d:1b:8f:cf:9c:ac:80:d4:2d:03:2e:90:fb:dd:9c: 71:4b:6c:c7:1a:1a:98:5a:2a:41:93:cc:46:ee:02:9c:63:a8: 77:e6:b1:1c:e6:89:d3:d8:3f:c3:c3:4d:a3:a2:b8:46:4b:1c: 05:48:fa:af:34:f1:7c:39:8a:42:d3:47:76:42:5f:db:d4:6d: 0b:87:9b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUwODIzMDI0NTM2WhcNMjUwODMwMDI0NTM2WjAYMRYwFAYD VQQDEw02OGE5MmI1MC1mNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdOti3sj3zSGIL0q8QwFZiYVGqtl0XuHWBXZMquQroPLLi1y40aaa3JCLhwE R+Ymu1mA68FDqcuGifa5CC8n3wuBX1hv3AMcuOqum9u89DbMqQmuIHCa+QEKiZ9r QljIP6oPX4uhy51V1noBPDGtsSkFVhW5y53cth8wdciILF4sQQSNumS6upqKk7qs a2z3XlwcxGAdSkQjAdVeZhHVfPYlprmLcZkyfgrfWjPq+1J35wAVueNkorQ7EmyL k7CuDxKftSQKQqz0ByPaMYmR4H1mPEQsguREBs52J98otlitNIw/uqa6RF1a/+ww G47XfOMtjORHFPFg+vW9fLK3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMcy99m MVOd2Pjhm55fVQ2wKLYcMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQMghgu9cSwDlTxWNlSBjd439i7/ph2AFjwU3pQoft+nUoxX9acdhI +FpnDK6SKu/AyE9O+8VBFR2BLYNrz564sYRRIRgWcah6iRunYKgW3KB1wCrqvgnC kxwY6AI3AUg1DbG/T7UuyUtWN/R8pJ6sI8EleEiBmVrWX0q9y4GDpNatY/UOQkCC RvXHT4iW6HacRUsKEAgIq8tVWqKJ4COTJlcqjuBA8y+NOPmGBTyxvPKRYxXdtRhd G4/PnKyA1C0DLpD73ZxxS2zHGhqYWipBk8xG7gKcY6h35rEc5onT2D/Dw02jorhG SxwFSPqvNPF8OYpC00d2Ql/b1G0Lh5vl -----END CERTIFICATE-----Generated at Sat Aug 23 21:38:18 2025 by rpki-client