$ rpki-client -vvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft File: J1fRH3t4Z0h7jocB1yrGGtMnng4.mft (raw, json) Hash identifier: nH2q+let3JBBFkHQwSEZdw8yH4ZnvEpkopcS17BSPMk= Subject key identifier: D8:8A:9F:7B:BB:6E:6C:C8:D8:8B:3E:B4:0D:72:65:0A:C0:A2:70:92 Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft Manifest number: 02 Signing time: Fri 22 Aug 2025 16:16:19 +0000 Manifest this update: Fri 22 Aug 2025 16:16:19 +0000 Manifest next update: Fri 29 Aug 2025 16:16:19 +0000 Files and hashes: 1: J1fRH3t4Z0h7jocB1yrGGtMnng4.crl (hash: bUvThSoQZzczMtWHVlXrpa9Zna+OCwoN8SK8XR22UpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Validity Not Before: Aug 22 16:16:19 2025 GMT Not After : Aug 29 16:16:19 2025 GMT Subject: CN=68a897d3-4289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:d0:6e:39:2c:cb:fd:3c:5a:3a:53:52:d8: 5d:bf:8a:79:a6:44:66:53:34:69:0e:4e:9b:b8:2a: b8:27:0b:2f:2c:52:1f:fa:b9:af:63:75:ad:00:0f: 9b:c5:ca:95:c7:83:c2:0d:7c:c4:2a:b5:b7:dd:89: b9:23:48:9c:f0:68:3d:55:85:a1:75:96:5f:8b:b0: f4:62:26:d9:1e:aa:bd:67:80:67:17:c8:69:94:ac: 64:51:b4:09:55:d9:91:5f:f5:05:8b:5b:10:4c:a1: f2:c7:0e:a1:f9:bd:36:73:31:11:45:0f:f3:ba:2b: ca:4f:8c:20:75:c6:08:22:d4:da:d6:8e:df:d1:b4: b1:6c:89:ce:86:1d:d5:e7:75:bd:61:4d:37:51:2c: ea:47:45:2f:b4:a1:5d:a1:8b:1d:29:87:e8:0b:ef: b0:9b:cd:d3:3f:81:d5:4a:34:9a:60:68:f6:84:03: 42:8b:5d:fa:94:1b:11:fe:3d:85:ab:4c:95:59:84: c4:c9:63:54:c6:9a:68:31:14:c5:64:43:ab:a7:c4: 0d:fc:01:f0:60:f8:b7:f0:4f:5a:5f:bf:a5:3b:5b: 79:39:4c:c5:e4:45:ed:41:00:8c:b4:60:3f:3f:d6: 0c:b4:d7:e1:14:fb:ab:b5:96:07:06:8a:c1:bc:fe: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8A:9F:7B:BB:6E:6C:C8:D8:8B:3E:B4:0D:72:65:0A:C0:A2:70:92 X509v3 Authority Key Identifier: keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:bf:4f:34:60:5c:7e:fe:b4:ca:72:c4:6c:a8:a0:c1:02:27: 93:8f:c8:25:1e:4f:64:65:a9:c5:7c:20:fa:1d:95:4b:8c:58: 80:3f:a1:25:78:a8:72:d1:e6:d3:ca:b3:1d:15:98:ea:90:98: ca:0e:44:12:bf:60:15:9f:67:90:80:3b:3b:d5:19:80:95:07: 52:25:50:f7:34:a3:cb:ce:38:4c:df:20:07:4e:0b:7b:e8:d5: 21:1a:6c:40:89:f7:ee:69:90:d6:05:82:16:38:8c:b8:ba:7d: 56:a8:fe:41:b2:fe:f9:d5:09:38:2a:4a:4c:74:5c:a2:08:80: f3:f2:aa:02:d7:77:af:f4:43:25:29:e1:b1:46:d5:e2:ba:84: ba:c0:5f:7a:f7:52:4d:86:82:55:53:55:06:2f:f0:3b:6b:35: f0:2d:6d:96:0c:a6:97:c4:72:54:b7:f4:9b:15:79:b5:43:51: 37:2d:03:eb:94:67:9e:1b:ac:98:22:f9:b1:c5:72:f4:3f:28: aa:36:41:55:6d:d4:4a:b0:5e:cb:69:ea:85:8f:00:91:02:1d: 08:e7:47:c4:05:12:16:3e:54:74:b4:e0:dc:ea:5f:e5:d0:72: 05:50:0c:7f:ac:cc:d6:28:30:33:65:50:27:fb:55:5d:18:43: d5:28:4a:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzU3RjExMC8GA1UEBRMoMjc1N0QxMUY3Qjc4Njc0ODdCOEU4NzAxRDcyQUM2MUFE MzI3OUUwRTAeFw0yNTA4MjIxNjE2MTlaFw0yNTA4MjkxNjE2MTlaMBgxFjAUBgNV BAMTDTY4YTg5N2QzLTQyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsRtBuOSzL/TxaOlNS2F2/inmmRGZTNGkOTpu4KrgnCy8sUh/6ua9jda0AD5vF ypXHg8INfMQqtbfdibkjSJzwaD1VhaF1ll+LsPRiJtkeqr1ngGcXyGmUrGRRtAlV 2ZFf9QWLWxBMofLHDqH5vTZzMRFFD/O6K8pPjCB1xggi1NrWjt/RtLFsic6GHdXn db1hTTdRLOpHRS+0oV2hix0ph+gL77CbzdM/gdVKNJpgaPaEA0KLXfqUGxH+PYWr TJVZhMTJY1TGmmgxFMVkQ6unxA38AfBg+LfwT1pfv6U7W3k5TMXkRe1BAIy0YD8/ 1gy01+EU+6u1lgcGisG8/jjHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2Iqfe7tu bMjYiz60DXJlCsCicJIwHwYDVR0jBBgwFoAUJ1fRH3t4Z0h7jocB1yrGGtMnng4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTdGL0E0Q0NEQzYyN0Y2 RjExRjBCNjNFNEUzQkM0RjlBRTAyL0oxZlJIM3Q0WjBoN2pvY0IxeXJHR3RNbm5n NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjFmUkgzdDRaMGg3am9jQjF5ckdHdE1ubmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTdGL0E0Q0NEQzYyN0Y2RjExRjBCNjNFNEUzQkM0RjlBRTAyL0oxZlJIM3Q0WjBo N2pvY0IxeXJHR3RNbm5nNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAC/TzRgXH7+tMpyxGyooMECJ5OPyCUeT2RlqcV8IPodlUuMWIA/oSV4 qHLR5tPKsx0VmOqQmMoORBK/YBWfZ5CAOzvVGYCVB1IlUPc0o8vOOEzfIAdOC3vo 1SEabECJ9+5pkNYFghY4jLi6fVao/kGy/vnVCTgqSkx0XKIIgPPyqgLXd6/0QyUp 4bFG1eK6hLrAX3r3Uk2GglVTVQYv8DtrNfAtbZYMppfEclS39JsVebVDUTctA+uU Z54brJgi+bHFcvQ/KKo2QVVt1EqwXstp6oWPAJECHQjnR8QFEhY+VHS04NzqX+XQ cgVQDH+szNYoMDNlUCf7VV0YQ9UoSks= -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:19 2025 by rpki-client