$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: SKIb7NkzNL1fJbdkIA204lEQJIbeBKRryecJWTns1Eg= Subject key identifier: 58:E8:2B:67:7A:AD:EA:B8:A6:51:DB:C6:21:F4:FD:DF:0B:D3:63:D2 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 010D Signing time: Sat 23 Aug 2025 05:14:56 +0000 Manifest this update: Sat 23 Aug 2025 05:14:56 +0000 Manifest next update: Sat 30 Aug 2025 05:14:56 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: IdE+JvFmVyjrr+1nkMYPyEHVwqn0ehO10sPNYQWHSwI=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: CrS1BOQfUtfYsoDDfEg4MA2bZyv3T+7ETvt6uxazdh0=) 3: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (hash: k7/BYTs5AWckPfc2XRwU2AWPU1bg1726dtxN6yLvkRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Aug 23 05:14:56 2025 GMT Not After : Aug 30 05:14:56 2025 GMT Subject: CN=68a94e50-b9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:29:70:85:52:7d:0f:54:e5:af:65:4e:60: 83:96:cc:21:7d:6b:0e:7d:51:cb:7d:6f:55:d3:90: 7a:12:74:ed:29:62:80:6a:a7:6c:60:87:c5:f1:13: 22:40:ff:3c:6e:e4:28:82:41:a7:60:66:e1:b5:a1: af:8b:52:d1:09:69:89:48:f6:e9:58:01:07:5d:19: 45:86:83:c3:7c:f6:00:c6:b6:1e:7d:68:3c:75:d0: dd:f4:66:98:30:84:af:2f:e7:0e:00:06:cd:92:77: c9:e3:35:e1:7c:f9:2c:3e:25:b3:b1:51:c3:31:7c: c2:09:bd:da:ec:e7:19:57:44:23:da:50:4e:68:25: 1e:b8:2f:39:6e:b6:40:88:3b:c0:42:d6:4f:dc:18: cb:eb:76:df:0f:6a:22:60:7c:65:72:1c:6f:39:1f: d4:7a:2e:2b:ef:f8:58:e4:71:ce:4d:05:70:e9:5b: cf:ce:d7:34:9b:c0:8a:38:fc:63:44:9f:ff:fd:2a: df:90:95:42:55:c5:3a:d5:d7:86:3a:c3:54:43:26: db:be:bb:fb:60:6c:5c:35:53:22:d9:6f:ed:ed:be: cb:ca:d6:04:96:ff:69:ea:2e:40:c4:ad:72:c5:08: 2a:ca:5b:99:45:be:99:90:0e:3e:04:1f:53:4f:eb: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E8:2B:67:7A:AD:EA:B8:A6:51:DB:C6:21:F4:FD:DF:0B:D3:63:D2 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1b:3a:7e:66:5b:39:6a:1c:51:98:ef:f8:55:3c:f5:9e:0e: 3f:80:e1:d5:12:f8:8c:0f:91:61:ab:c7:c0:f1:f8:ff:cd:81: a8:29:d0:ae:cf:db:3f:d5:d7:61:c3:b9:51:fd:15:24:2d:2f: a1:ff:e6:d9:3b:56:68:c3:8d:9f:50:3d:f3:cc:fd:54:ca:36: db:6e:2f:bf:45:f1:5b:f1:b2:e4:34:21:1f:cc:cc:f8:91:46: 7c:ef:ce:c7:b3:5a:ed:48:2e:69:6b:01:88:77:6c:1e:c1:59: 8b:26:76:33:1f:74:fb:80:d1:07:96:62:07:76:a5:bd:43:ca: 56:f1:7a:fd:91:d6:5e:8e:3f:b8:6b:0a:63:d9:74:d6:2f:92: 6e:6f:98:6c:fc:6d:fd:3e:4b:b9:92:b9:47:50:6b:ff:95:14: fa:be:e0:d3:6f:db:44:8c:de:30:d7:2b:6a:29:8a:10:41:74: 59:2c:61:79:4d:1c:6b:b0:10:a5:9a:5b:31:b8:c2:74:e7:11: 5d:83:40:9f:14:80:26:f6:d6:a7:a1:6b:fd:0e:64:7f:7e:e2: d0:33:76:d5:3e:2f:91:1f:af:ee:07:d5:5c:8d:5d:90:c1:83: eb:c5:89:a0:04:97:46:43:a3:4e:78:9a:64:d7:64:6f:14:ca: 7b:4c:2a:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUwODIzMDUxNDU2WhcNMjUwODMwMDUxNDU2WjAYMRYwFAYD VQQDEw02OGE5NGU1MC1iOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgQpcIVSfQ9U5a9lTmCDlswhfWsOfVHLfW9V05B6EnTtKWKAaqdsYIfF8RMi QP88buQogkGnYGbhtaGvi1LRCWmJSPbpWAEHXRlFhoPDfPYAxrYefWg8ddDd9GaY MISvL+cOAAbNknfJ4zXhfPksPiWzsVHDMXzCCb3a7OcZV0Qj2lBOaCUeuC85brZA iDvAQtZP3BjL63bfD2oiYHxlchxvOR/Uei4r7/hY5HHOTQVw6VvPztc0m8CKOPxj RJ///SrfkJVCVcU61deGOsNUQybbvrv7YGxcNVMi2W/t7b7LytYElv9p6i5AxK1y xQgqyluZRb6ZkA4+BB9TT+sDoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjoK2d6 req4plHbxiH0/d8L02PSMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASGzp+Zls5ahxRmO/4VTz1ng4/gOHVEviMD5Fhq8fA8fj/zYGoKdCu z9s/1ddhw7lR/RUkLS+h/+bZO1Zow42fUD3zzP1Uyjbbbi+/RfFb8bLkNCEfzMz4 kUZ8787Hs1rtSC5pawGId2wewVmLJnYzH3T7gNEHlmIHdqW9Q8pW8Xr9kdZejj+4 awpj2XTWL5Jub5hs/G39Pku5krlHUGv/lRT6vuDTb9tEjN4w1ytqKYoQQXRZLGF5 TRxrsBClmlsxuMJ05xFdg0CfFIAm9tanoWv9DmR/fuLQM3bVPi+RH6/uB9VcjV2Q wYPrxYmgBJdGQ6NOeJpk12RvFMp7TCqj -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:29 2025 by rpki-client