$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: 5ijnePYWvRvkn5VXaBzOZvoshBQgMYLX5tWT4CQDBT8= Subject key identifier: 75:5B:46:94:50:FA:ED:30:07:98:47:E7:D1:98:01:35:D7:54:AC:DC Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: 67 Signing time: Sat 23 Aug 2025 07:18:32 +0000 Manifest this update: Sat 23 Aug 2025 07:18:32 +0000 Manifest next update: Sat 30 Aug 2025 07:18:32 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: z39K/YOnWnScdwCaA0FU92553p/XwMdOmwwi0M7x+VQ=) 2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: FoDHZvXeH5e/XFJzf3AymBW0SIuGnIL2DXJhgfsRixg=) 3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: 8SOJ6SdOtJ/q3NwLkWGRY6LjHM44wHGZjzKG2cwDOuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: Aug 23 07:18:32 2025 GMT Not After : Aug 30 07:18:32 2025 GMT Subject: CN=68a96b48-8f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:b5:0b:86:b4:66:34:c7:ce:96:7a:3d:46: f6:aa:23:6c:47:75:f4:c2:24:13:50:0b:2f:f3:cf: b0:c4:59:2d:a5:1d:ec:c4:cf:98:1e:dc:0b:59:20: 3d:c1:8c:99:96:e0:fb:7f:17:b8:c0:26:8d:32:f6: 09:94:d2:2d:47:e8:05:53:c1:69:4f:0a:ac:8d:a1: af:17:04:f6:c9:ed:7c:e7:e0:b4:ba:f9:38:56:7b: 79:dc:3c:4a:29:32:a5:b6:c3:40:97:7e:5a:73:6b: b3:53:03:62:86:50:0f:00:12:10:3c:c7:a6:62:9c: 8c:0f:4c:c8:d6:62:d4:1e:04:99:30:75:3f:d2:22: 0e:b8:59:e0:c2:f9:b7:2a:e1:5e:cb:a7:cd:28:d0: 14:82:ef:38:ae:85:22:5a:4b:01:82:dd:e6:80:f0: 25:70:85:9b:6b:62:44:13:aa:66:bc:3f:61:8f:3c: 36:e5:43:11:41:d3:67:5b:b8:81:94:3c:8d:ef:fa: 6a:d2:5b:51:ae:87:86:b3:f5:dd:44:90:cb:b5:d9: d9:10:7a:07:8a:80:28:2c:7b:f9:db:ee:fe:09:c4: d1:8f:64:3a:2e:b1:58:46:d1:15:e7:ca:16:62:67: 07:26:2d:c0:71:9c:a9:41:e8:0b:78:f2:ce:16:9c: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5B:46:94:50:FA:ED:30:07:98:47:E7:D1:98:01:35:D7:54:AC:DC X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e0:14:26:cd:52:a2:14:c0:a2:58:25:f6:89:94:c5:8d:8e: 05:4f:fa:f4:4e:e1:cf:00:8a:23:f0:22:ca:5c:04:8c:79:63: 2d:4e:78:1b:be:9c:8e:68:08:34:d5:2b:51:55:77:a4:ea:0c: 76:04:5b:31:1d:5c:fa:8c:4d:af:7e:47:81:1f:d1:7c:32:d7: 99:71:be:50:24:d3:73:31:c0:9e:2c:b9:43:df:81:91:54:96: fa:70:e0:9b:e8:43:f6:b1:6a:79:cf:e2:5d:a1:5f:7a:aa:1e: fb:4b:fb:5d:33:a3:f9:fe:02:61:7f:c1:30:01:49:c0:db:94: 3e:e8:8c:0f:7c:f0:e0:44:ae:d5:08:8b:f2:ff:17:0c:e1:bb: 67:70:0b:5a:84:c8:81:e0:62:d5:42:ff:cf:20:ef:df:4b:ec: 33:34:e9:40:9f:38:9c:b9:e9:c5:cd:00:05:b6:f5:50:3b:b6: 8c:68:f0:3a:dd:00:cf:23:c1:32:37:61:f0:5e:14:ea:f6:09: 84:73:21:05:ab:9b:a4:8e:65:a9:00:85:63:10:b4:33:a6:4e: 1f:9a:fc:82:79:1f:3b:80:c3:0d:21:29:10:0c:1e:58:5d:b6: bc:9e:1b:33:25:5d:e2:57:cd:0a:2b:a0:0d:23:80:8b:8a:ab: 0e:85:5e:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTk2RTExMC8GA1UEBRMoMjQyOUEzRUU1MDg4RjNENDUzNzJBOEUzQjM2ODM0Qzc1 RUFFNkQyOTAeFw0yNTA4MjMwNzE4MzJaFw0yNTA4MzAwNzE4MzJaMBgxFjAUBgNV BAMTDTY4YTk2YjQ4LThmNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ELULhrRmNMfOlno9RvaqI2xHdfTCJBNQCy/zz7DEWS2lHezEz5ge3AtZID3B jJmW4Pt/F7jAJo0y9gmU0i1H6AVTwWlPCqyNoa8XBPbJ7Xzn4LS6+ThWe3ncPEop MqW2w0CXflpza7NTA2KGUA8AEhA8x6ZinIwPTMjWYtQeBJkwdT/SIg64WeDC+bcq 4V7Lp80o0BSC7ziuhSJaSwGC3eaA8CVwhZtrYkQTqma8P2GPPDblQxFB02dbuIGU PI3v+mrSW1Guh4az9d1EkMu12dkQegeKgCgse/nb7v4JxNGPZDousVhG0RXnyhZi ZwcmLcBxnKlB6At48s4WnIBnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdVtGlFD6 7TAHmEfn0ZgBNddUrNwwHwYDVR0jBBgwFoAUJCmj7lCI89RTcqjjs2g0x16ubSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTZFLzIzRDJGMTZFRUMy MTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkNtajdsQ0k4OVJUY3FqanMyZzB4MTZ1YlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTZFLzIzRDJGMTZFRUMyMTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlS VGNxampzMmcweDE2dWJTay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvgFCbNUqIUwKJYJfaJlMWNjgVP+vRO4c8AiiPwIspcBIx5Yy1OeBu+ nI5oCDTVK1FVd6TqDHYEWzEdXPqMTa9+R4Ef0Xwy15lxvlAk03MxwJ4suUPfgZFU lvpw4JvoQ/axannP4l2hX3qqHvtL+10zo/n+AmF/wTABScDblD7ojA988OBErtUI i/L/Fwzhu2dwC1qEyIHgYtVC/88g799L7DM06UCfOJy56cXNAAW29VA7toxo8Drd AM8jwTI3YfBeFOr2CYRzIQWrm6SOZakAhWMQtDOmTh+a/IJ5HzuAww0hKRAMHlhd tryeGzMlXeJXzQoroA0jgIuKqw6FXpE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:50 2025 by rpki-client