$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: xR6im1ZOZTEkMj4GV+07qpP1bL+QjQtXVgDFhmh4ZRU= Subject key identifier: 3A:55:C9:8C:15:51:DC:88:63:BE:63:39:88:32:2F:B1:2F:9B:59:89 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 029D Signing time: Sat 23 Aug 2025 01:50:01 +0000 Manifest this update: Sat 23 Aug 2025 01:50:00 +0000 Manifest next update: Sat 30 Aug 2025 01:50:00 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: cbPKbpbNhvlvB4DLmqLyPiBnt9saCykvs7IB7vucTrw=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Aug 23 01:50:00 2025 GMT Not After : Aug 30 01:50:00 2025 GMT Subject: CN=68a91e49-c774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:ee:ea:33:59:63:9b:bb:5f:ed:8b:22:a4: 0f:e8:52:4e:4b:1c:c6:02:2b:a8:ed:ac:33:b5:8b: bc:ae:b4:09:14:a6:8a:4a:9e:c6:f2:eb:62:c3:c0: 9a:7e:0b:34:27:ab:5a:3f:df:1d:49:b5:24:ef:b6: a9:9a:0b:e8:3d:9d:cf:c4:50:37:65:25:70:6a:b0: 59:7c:ac:2f:da:a6:35:5d:bd:4d:78:5f:71:4c:af: 1e:7d:43:a6:38:6d:69:e5:93:70:67:29:d7:dc:95: 27:e8:8d:63:0a:40:42:78:d1:b3:b6:6c:48:58:72: ea:ed:e5:56:d7:35:c2:f8:04:82:17:75:68:d7:72: 50:9c:f5:69:b2:46:53:d5:f0:2f:7c:0a:9f:22:2c: 9d:3d:07:6f:d4:61:15:91:52:7e:45:31:e8:b3:31: 54:28:43:44:5b:8c:b3:de:b7:0e:0c:2e:42:8e:9c: 11:58:d3:e7:72:12:7f:3f:cd:b6:ac:e8:c3:b3:6a: ea:7d:ce:79:48:e9:f2:9f:cb:6d:55:f4:2c:65:6b: fc:f1:1e:8e:6f:78:3d:2c:19:8a:2f:61:cd:7b:70: e3:ce:1d:93:93:33:c6:34:6a:91:b1:c2:0a:c7:7a: e9:09:4e:e2:39:f2:3d:ca:d6:ea:2e:9d:26:8e:77: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:C9:8C:15:51:DC:88:63:BE:63:39:88:32:2F:B1:2F:9B:59:89 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7b:18:3f:b9:d3:f9:a5:66:09:01:87:56:b0:69:05:cf:7c: b0:65:fd:48:18:e9:53:47:4f:1e:3a:4d:87:79:0e:11:e2:0c: 66:5d:a6:97:52:50:93:30:ab:43:c0:70:1f:9f:51:4d:c5:9f: a8:03:83:f0:f0:f7:a1:56:81:c1:cd:12:ff:77:70:cd:59:bc: 6d:82:3e:a6:aa:03:08:23:67:c6:74:98:fe:ce:92:41:b7:94: a5:f9:88:c0:80:52:d3:3d:fe:f5:8b:a8:cf:ea:20:23:94:eb: 07:e5:da:e3:2a:ae:bf:fd:2b:cc:73:18:26:ff:ad:0e:c5:15: 96:1c:53:d4:3a:59:3f:12:e9:2e:cc:fa:0f:55:88:55:c8:af: 90:95:f9:83:f0:c5:45:d1:ce:18:16:d1:e0:85:51:a6:56:6e: ba:bf:35:16:2c:d9:e8:ca:34:7c:a6:65:39:92:5f:41:33:0a: 41:63:9e:46:86:f0:dd:46:bb:87:11:0d:96:c6:f6:05:6d:d8: 8e:df:a0:98:60:d2:34:61:b5:b0:8a:41:55:b8:9d:26:53:5a: 40:5f:ea:ce:4b:eb:9c:84:0e:d7:58:5e:9a:70:22:c8:c8:c3: c9:f7:4e:8b:1c:ec:13:1a:2b:ba:03:9d:b4:18:84:b4:da:23: 94:53:33:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwODIzMDE1MDAwWhcNMjUwODMwMDE1MDAwWjAYMRYwFAYD VQQDEw02OGE5MWU0OS1jNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7ru6jNZY5u7X+2LIqQP6FJOSxzGAiuo7awztYu8rrQJFKaKSp7G8utiw8Ca fgs0J6taP98dSbUk77apmgvoPZ3PxFA3ZSVwarBZfKwv2qY1Xb1NeF9xTK8efUOm OG1p5ZNwZynX3JUn6I1jCkBCeNGztmxIWHLq7eVW1zXC+ASCF3Vo13JQnPVpskZT 1fAvfAqfIiydPQdv1GEVkVJ+RTHoszFUKENEW4yz3rcODC5CjpwRWNPnchJ/P822 rOjDs2rqfc55SOnyn8ttVfQsZWv88R6Ob3g9LBmKL2HNe3Djzh2TkzPGNGqRscIK x3rpCU7iOfI9ytbqLp0mjndA5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpVyYwV UdyIY75jOYgyL7Evm1mJMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoexg/udP5pWYJAYdWsGkFz3ywZf1IGOlTR08eOk2HeQ4R4gxmXaaX UlCTMKtDwHAfn1FNxZ+oA4Pw8PehVoHBzRL/d3DNWbxtgj6mqgMII2fGdJj+zpJB t5Sl+YjAgFLTPf71i6jP6iAjlOsH5drjKq6//SvMcxgm/60OxRWWHFPUOlk/Euku zPoPVYhVyK+QlfmD8MVF0c4YFtHghVGmVm66vzUWLNnoyjR8pmU5kl9BMwpBY55G hvDdRruHEQ2WxvYFbdiO36CYYNI0YbWwikFVuJ0mU1pAX+rOS+uchA7XWF6acCLI yMPJ906LHOwTGiu6A520GIS02iOUUzNX -----END CERTIFICATE-----Generated at Sat Aug 23 07:07:33 2025 by rpki-client