$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json) Hash identifier: HMgbdMlzkiXXCmInuNqXxVnugWFOtIjNZYtgu/lDz6o= Subject key identifier: 7B:63:30:AB:51:31:3D:19:5E:24:AB:01:74:B9:9C:40:22:F3:4C:B1 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft Manifest number: 021B Signing time: Sat 23 Aug 2025 02:18:20 +0000 Manifest this update: Sat 23 Aug 2025 02:18:20 +0000 Manifest next update: Sat 30 Aug 2025 02:18:20 +0000 Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: D0XFGngUhm6lnarYDDlKstrI2GFRxCrSZX62Wl6bcTo=) 2: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: up6WHjnsfS0bIxQesxTATm4WYD2tutF7YiezZwJi2Bc=) 3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: NqrZmcVp/US1PncX6fEsquuB9U+PwjdNaQFtiMmKje0=) 4: D45117DEEBF311EEAECC405FC4F9AE02.roa (hash: L3m+NQNaRyXNu/ZiemkthKYLeI1gIGN4M/qfSkh3IEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Aug 23 02:18:20 2025 GMT Not After : Aug 30 02:18:20 2025 GMT Subject: CN=68a924ec-f2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:10:bb:b6:cd:d5:ac:96:0f:de:76:3b:38: 15:48:5d:f7:5a:59:be:ee:2b:9f:8a:e0:db:d3:2d: a3:70:26:fd:ab:1e:d3:fe:8c:cd:78:ed:41:b4:6a: 66:6c:be:1a:ad:db:97:65:98:ea:f3:86:51:8f:7d: 62:79:24:3c:da:01:7a:73:1f:c0:b2:66:46:e2:ca: 5e:58:b1:ab:af:39:c8:92:38:51:dd:95:6c:e0:da: 42:88:0d:54:7f:84:8e:84:2c:3b:37:6f:f6:df:82: ad:0e:e6:7f:8c:7b:7d:55:b6:94:4b:18:da:8a:7c: e0:8f:10:a1:da:d2:6b:dc:00:6e:7f:03:a6:20:03: ea:f7:65:2f:fd:26:3f:c1:04:e0:f2:8f:23:9b:76: 93:6d:72:64:64:46:61:ae:87:b8:df:25:07:73:a2: f2:d3:ec:d1:f8:e7:91:39:98:32:68:e7:37:1f:fd: 1d:44:6f:f1:27:5e:09:13:5d:80:1a:e4:19:f9:6e: 97:a3:50:a0:71:75:2d:dc:69:49:08:f0:41:27:f0: 0f:00:a7:50:89:b1:97:f1:63:fa:87:4b:50:56:50: 24:6c:c2:ce:08:86:73:5e:9d:82:49:85:44:62:d2: b6:d8:df:57:95:e2:af:44:3c:42:07:a1:b3:09:21: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:63:30:AB:51:31:3D:19:5E:24:AB:01:74:B9:9C:40:22:F3:4C:B1 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a4:20:24:2f:34:78:02:e3:b4:48:97:82:91:e3:ac:5f:e8: 37:5a:b7:f4:79:24:31:f8:bc:2f:c2:b8:bc:00:3a:04:24:c9: 0d:11:41:62:65:8c:b1:e1:93:cf:83:6d:df:7c:32:30:22:d2: 55:05:6d:78:be:d2:52:5a:02:b8:22:ba:d1:6f:b4:12:13:6a: 09:30:e9:6f:ec:15:7a:5a:0b:62:35:84:62:26:31:c1:02:f1: f7:06:75:f0:13:18:9b:85:81:84:be:03:f5:44:f6:15:0e:28: 6d:ed:8d:29:86:2d:2a:9e:fe:85:f1:c4:4f:d1:a7:0e:47:01: 09:89:35:4a:0f:ff:10:6a:b2:db:58:eb:5c:30:b4:23:e4:68: 2f:3c:02:36:ff:49:c8:51:a2:03:51:4b:2b:63:c7:34:35:e2: ff:85:87:44:b4:30:40:5f:35:99:32:a0:6b:a4:0d:ed:39:a5: 65:20:9c:2a:13:1b:bc:1d:cd:73:77:a0:a1:9b:93:e1:55:85: 26:04:63:95:cd:dd:64:f5:80:42:76:62:fc:84:fe:d9:f3:12: 78:c5:62:ee:4f:c3:09:e9:30:e6:d0:57:06:bf:01:21:0c:cb: c7:cf:ab:ac:b1:48:74:b2:fa:0f:80:fe:38:5d:d2:bf:89:d4: 40:61:f7:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUwODIzMDIxODIwWhcNMjUwODMwMDIxODIwWjAYMRYwFAYD VQQDEw02OGE5MjRlYy1mMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqU8Qu7bN1ayWD952OzgVSF33Wlm+7iufiuDb0y2jcCb9qx7T/ozNeO1BtGpm bL4arduXZZjq84ZRj31ieSQ82gF6cx/AsmZG4speWLGrrznIkjhR3ZVs4NpCiA1U f4SOhCw7N2/234KtDuZ/jHt9VbaUSxjainzgjxCh2tJr3ABufwOmIAPq92Uv/SY/ wQTg8o8jm3aTbXJkZEZhroe43yUHc6Ly0+zR+OeROZgyaOc3H/0dRG/xJ14JE12A GuQZ+W6Xo1CgcXUt3GlJCPBBJ/APAKdQibGX8WP6h0tQVlAkbMLOCIZzXp2CSYVE YtK22N9XleKvRDxCB6GzCSGH1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtjMKtR MT0ZXiSrAXS5nEAi80yxMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf TTM5d1FORGozeEZCd1dGaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXpCAkLzR4AuO0SJeCkeOsX+g3Wrf0eSQx+Lwvwri8ADoEJMkNEUFi ZYyx4ZPPg23ffDIwItJVBW14vtJSWgK4IrrRb7QSE2oJMOlv7BV6WgtiNYRiJjHB AvH3BnXwExibhYGEvgP1RPYVDiht7Y0phi0qnv6F8cRP0acORwEJiTVKD/8QarLb WOtcMLQj5GgvPAI2/0nIUaIDUUsrY8c0NeL/hYdEtDBAXzWZMqBrpA3tOaVlIJwq Exu8Hc1zd6Chm5PhVYUmBGOVzd1k9YBCdmL8hP7Z8xJ4xWLuT8MJ6TDm0FcGvwEh DMvHz6ussUh0svoPgP44XdK/idRAYfcW -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:46 2025 by rpki-client