$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: CB5OK9Z/u3wo5xyAkPMQO7C2NkjFU9dtUhWqNPFM6Qo= Subject key identifier: 4C:B5:45:FC:2A:BA:97:C0:D0:92:B8:CF:59:EC:DE:EB:E0:0F:3B:B5 Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 06E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 06DD Signing time: Fri 22 Aug 2025 22:11:19 +0000 Manifest this update: Fri 22 Aug 2025 22:11:19 +0000 Manifest next update: Fri 29 Aug 2025 22:11:19 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: mVpX0nL7m14hw02upZApX/p76aoFFVXN8roJvs+naxc=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1764 (0x6e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Aug 22 22:11:19 2025 GMT Not After : Aug 29 22:11:19 2025 GMT Subject: CN=68a8eb07-c952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:f9:67:4c:b0:a0:bf:92:c9:06:30:37:02: af:b3:20:98:61:50:e9:22:c9:2f:97:55:ca:fe:97: dd:eb:e9:0f:df:2e:59:57:82:19:73:a8:85:b9:28: c4:85:bb:73:b9:7c:89:6d:79:67:ac:05:a2:3a:aa: 86:7f:f2:6b:c2:d2:b8:50:41:09:16:1c:de:32:c3: f9:0a:a8:10:86:ca:e9:8d:e8:51:c5:8a:1c:c0:52: 38:a2:4a:cc:13:b1:6e:60:cf:15:d6:28:55:55:39: 36:01:f4:9d:36:a5:04:9e:0d:0e:06:54:1d:ee:9d: 9a:0a:37:96:2d:54:cf:ad:f3:9c:92:e5:cc:d6:1b: 67:0a:45:3f:e7:17:54:cb:e6:66:ac:3b:9e:a1:5e: b9:83:b6:c6:a4:94:d4:39:76:de:ba:4f:1e:19:5e: 8f:15:18:18:d5:b2:dd:b5:fd:20:20:9b:ff:52:5f: 92:cd:98:42:6e:6a:7d:10:45:54:bc:b3:26:77:ae: 5d:9c:d2:6d:69:02:4a:50:26:7d:9b:0f:1f:4f:f5: b7:84:dd:93:f3:60:2c:df:6c:5c:59:88:d7:1a:35: 43:8d:60:ad:28:10:81:ef:3b:13:f5:72:c2:ba:2c: df:1d:0c:0d:33:9f:85:3a:86:db:e4:ff:81:60:8c: 8d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B5:45:FC:2A:BA:97:C0:D0:92:B8:CF:59:EC:DE:EB:E0:0F:3B:B5 X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0f:3f:00:fe:b8:87:48:f8:c3:3d:3a:0f:0d:75:09:51:60: d4:7e:5b:99:49:8f:6d:84:1a:df:b1:a8:98:16:66:3f:b4:d3: b9:be:af:ba:ed:28:e0:19:f5:0b:65:27:65:37:77:77:e0:a2: fc:fb:f6:bc:cb:f1:69:a3:89:ad:8b:55:91:95:ed:07:8f:34: 1f:54:20:62:a0:c2:5c:4c:d4:7a:39:28:3a:af:d6:33:23:65: 7e:02:7e:3f:ca:b3:1a:8b:4f:a7:1e:c9:7d:14:1e:4f:e2:e2: 11:5f:8b:76:5a:df:19:3d:50:f0:ea:d2:75:73:c3:02:56:db: af:48:7e:32:7e:fd:0e:7d:20:2a:83:23:e1:46:fd:6f:65:a0: fc:f2:bb:1e:e3:38:d9:74:41:f3:6e:43:59:7d:5a:5a:0a:c1: e7:cd:6a:1e:b9:57:01:b9:68:e4:b4:dc:b1:9f:96:9d:2e:49: fe:86:39:f0:cc:fc:7f:cf:ff:83:ba:d0:15:f9:ee:2d:68:1e: 50:f0:41:f8:8e:a0:50:d1:8e:0a:dc:e2:29:23:59:3e:58:57: 50:a8:1e:49:fd:32:fa:bc:b7:a5:56:ca:17:10:05:01:2e:d0: 03:1a:e5:26:12:90:64:c9:28:98:5c:de:01:68:fe:59:46:e5: 04:65:fb:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUwODIyMjIxMTE5WhcNMjUwODI5MjIxMTE5WjAYMRYwFAYD VQQDEw02OGE4ZWIwNy1jOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJr5Z0ywoL+SyQYwNwKvsyCYYVDpIskvl1XK/pfd6+kP3y5ZV4IZc6iFuSjE hbtzuXyJbXlnrAWiOqqGf/JrwtK4UEEJFhzeMsP5CqgQhsrpjehRxYocwFI4okrM E7FuYM8V1ihVVTk2AfSdNqUEng0OBlQd7p2aCjeWLVTPrfOckuXM1htnCkU/5xdU y+ZmrDueoV65g7bGpJTUOXbeuk8eGV6PFRgY1bLdtf0gIJv/Ul+SzZhCbmp9EEVU vLMmd65dnNJtaQJKUCZ9mw8fT/W3hN2T82As32xcWYjXGjVDjWCtKBCB7zsT9XLC uizfHQwNM5+FOobb5P+BYIyNJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy1Rfwq upfA0JK4z1ns3uvgDzu1MB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNDz8A/riHSPjDPToPDXUJUWDUfluZSY9thBrfsaiYFmY/tNO5vq+6 7SjgGfULZSdlN3d34KL8+/a8y/Fpo4mti1WRle0HjzQfVCBioMJcTNR6OSg6r9Yz I2V+An4/yrMai0+nHsl9FB5P4uIRX4t2Wt8ZPVDw6tJ1c8MCVtuvSH4yfv0OfSAq gyPhRv1vZaD88rse4zjZdEHzbkNZfVpaCsHnzWoeuVcBuWjktNyxn5adLkn+hjnw zPx/z/+DutAV+e4taB5Q8EH4jqBQ0Y4K3OIpI1k+WFdQqB5J/TL6vLelVsoXEAUB LtADGuUmEpBkySiYXN4BaP5ZRuUEZft4 -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:27 2025 by rpki-client