$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: 2m/DiOPZ9+W7+9wZRRktOzDewzN7ZXbfDiIpCbKC1EA= Subject key identifier: D8:CD:C8:55:25:B5:34:AD:E4:BC:59:05:75:EF:75:10:45:2F:F5:74 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 02DC Signing time: Sat 23 Aug 2025 01:34:37 +0000 Manifest this update: Sat 23 Aug 2025 01:34:36 +0000 Manifest next update: Sat 30 Aug 2025 01:34:36 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: ShcY9YmWjNpPRtc2aqUIt4lu0aRVcwDKrsXTRBfqSK8=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: G/i4Pg8jdMHmXjQNkM+eJFlsVzQq6gbZlmc97MQExQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Aug 23 01:34:36 2025 GMT Not After : Aug 30 01:34:36 2025 GMT Subject: CN=68a91aad-672a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:4d:67:83:d0:5a:f3:b1:0d:36:d9:4c:f4: 26:2c:37:a1:07:af:51:c4:25:39:6d:f6:ff:5a:0c: cf:11:73:18:b5:72:3d:6e:73:ce:71:10:e8:3e:76: e3:50:ca:2d:17:2d:ec:10:a9:86:bf:b8:6b:39:0d: 2b:ea:83:01:9a:00:b2:2c:a9:f5:c5:6d:48:d0:1d: c0:cb:57:e2:90:00:71:a6:3a:1e:ce:7e:57:b9:ae: 28:65:f7:53:e7:94:f6:f4:e8:90:8b:00:26:10:f1: 50:38:7d:75:3d:20:de:89:5a:33:22:05:36:b6:51: b7:15:69:74:e4:a8:ec:7c:72:6e:61:ae:67:de:82: b3:2a:29:f1:8b:67:7a:31:ac:c8:cd:c0:18:9d:70: a0:eb:e0:a9:36:7e:9a:ce:3c:72:ae:9b:57:d2:d0: 62:59:63:a8:a0:bc:9b:3c:41:dd:50:44:2b:d1:06: 3a:04:15:95:6f:62:6c:51:51:b9:07:f9:89:6b:78: 22:3d:ce:a7:4f:32:61:de:b8:86:c0:2e:f4:16:7c: f2:ce:b9:69:81:bb:4a:29:e0:90:c0:ef:ed:cb:76: 37:23:fa:a0:cd:d9:48:20:0a:46:ff:bb:86:a4:cf: 49:b7:b7:e2:74:d2:5c:06:a1:65:79:0c:45:f0:c5: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CD:C8:55:25:B5:34:AD:E4:BC:59:05:75:EF:75:10:45:2F:F5:74 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:ec:eb:74:fb:38:32:70:10:36:39:47:14:41:8d:8a:4b:4f: 13:ed:3c:00:93:b2:09:77:d4:3b:89:ee:8c:39:ed:c8:85:bd: 35:c3:25:bf:14:00:09:2f:5a:19:d9:87:ba:41:b0:30:b5:b2: 3e:33:54:ee:2a:ed:81:76:ec:44:e8:73:22:b8:85:c1:7d:8c: 70:5b:d2:2c:fe:e3:35:0e:9f:16:c4:4d:3b:d7:48:3d:3b:52: 0d:1d:11:bb:dd:8a:50:2f:8f:00:e1:4e:85:ee:87:e5:bf:5f: eb:50:11:d4:e9:07:9e:8e:55:13:68:9d:d5:8e:3a:09:a8:b4: 6d:33:6f:52:82:79:4d:d3:34:87:8e:cf:ee:8d:df:2e:27:3f: 0c:dd:1a:4e:9a:86:ab:e9:37:e0:71:c1:48:77:1a:60:5e:ad: 20:2f:05:95:50:9a:99:57:8a:e3:6d:61:d7:fe:b3:68:09:9e: eb:cf:60:df:ed:04:27:28:bc:34:86:b2:d8:2c:dd:be:5e:d8: e8:6f:74:c0:2f:0a:ca:34:4b:39:96:df:47:89:31:14:2e:2f: 4e:84:98:df:68:22:c5:db:85:1b:39:7d:e6:ca:41:c7:62:21: 7b:7c:0c:62:80:7f:f1:48:6a:38:ad:f8:5b:0a:5e:13:20:50: 83:e6:6c:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUwODIzMDEzNDM2WhcNMjUwODMwMDEzNDM2WjAYMRYwFAYD VQQDEw02OGE5MWFhZC02NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLhNZ4PQWvOxDTbZTPQmLDehB69RxCU5bfb/WgzPEXMYtXI9bnPOcRDoPnbj UMotFy3sEKmGv7hrOQ0r6oMBmgCyLKn1xW1I0B3Ay1fikABxpjoezn5Xua4oZfdT 55T29OiQiwAmEPFQOH11PSDeiVozIgU2tlG3FWl05KjsfHJuYa5n3oKzKinxi2d6 MazIzcAYnXCg6+CpNn6azjxyrptX0tBiWWOooLybPEHdUEQr0QY6BBWVb2JsUVG5 B/mJa3giPc6nTzJh3riGwC70FnzyzrlpgbtKKeCQwO/ty3Y3I/qgzdlIIApG/7uG pM9Jt7fidNJcBqFleQxF8MXWzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjNyFUl tTSt5LxZBXXvdRBFL/V0MB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO7Ot0+zgycBA2OUcUQY2KS08T7TwAk7IJd9Q7ie6MOe3Ihb01wyW/ FAAJL1oZ2Ye6QbAwtbI+M1TuKu2BduxE6HMiuIXBfYxwW9Is/uM1Dp8WxE0710g9 O1INHRG73YpQL48A4U6F7oflv1/rUBHU6QeejlUTaJ3VjjoJqLRtM29SgnlN0zSH js/ujd8uJz8M3RpOmoar6TfgccFIdxpgXq0gLwWVUJqZV4rjbWHX/rNoCZ7rz2Df 7QQnKLw0hrLYLN2+Xtjob3TALwrKNEs5lt9HiTEULi9OhJjfaCLF24UbOX3mykHH YiF7fAxigH/xSGo4rfhbCl4TIFCD5mz7 -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:40 2025 by rpki-client