$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: 729pUfNwFBnfkU55f5TeeBMaX1tDOy2Ti8m3w/FIFno= Subject key identifier: 56:DC:BD:3C:22:AD:6E:86:14:03:CB:D4:4E:DC:E8:1D:B5:A6:0A:3B Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FB4 Signing time: Fri 18 Jul 2025 17:40:38 +0000 Manifest this update: Fri 18 Jul 2025 17:40:38 +0000 Manifest next update: Fri 25 Jul 2025 17:40:38 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: 7lRZxRvoSvIn5f75yUU07AU6DBVOBrHMf+9bn9OF/Pg=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Jul 18 17:40:38 2025 GMT Not After : Jul 25 17:40:38 2025 GMT Subject: CN=687a8716-e146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:89:88:df:69:38:f3:0b:8d:0d:60:30:ae: 55:e8:9b:10:4f:ea:c7:76:f1:1e:3d:55:88:19:7d: a3:53:ba:eb:1d:77:1b:e0:dc:c9:34:54:2b:c3:72: 80:46:3b:b1:40:de:5b:66:9c:8a:bc:de:98:24:a2: f2:2c:cc:48:5f:3e:ed:0c:cc:71:b1:ab:fb:f8:bd: c2:36:44:ee:72:c5:27:ec:b1:2c:b8:5f:35:48:13: 97:dc:90:f2:54:d5:6c:ea:0a:9e:c2:fd:b7:ed:31: a6:e8:83:6f:9f:04:84:7a:ab:25:11:cc:5e:d8:54: a4:6d:ef:0c:ec:fb:0e:b8:61:d5:01:17:40:05:2b: e0:c8:fc:30:ef:05:05:de:8e:b6:3a:79:7d:82:e7: ad:40:3f:35:d8:be:5e:3c:f0:28:fe:f9:45:59:89: 73:5d:54:75:9d:b8:20:b9:ef:1e:9c:44:3d:84:94: 44:28:01:f4:fa:cf:db:12:13:3f:e5:62:4b:e1:9f: 45:0d:ec:81:6f:fa:e2:4c:f1:e0:e9:f0:6f:9b:6b: 1e:81:69:4b:d0:ed:3f:9f:8b:39:96:f6:ea:c9:c9: c0:7d:b5:0d:5b:d8:3e:33:d1:94:a5:e2:06:a2:f5: 9a:74:0b:45:5c:e6:44:3a:fa:3e:78:76:27:96:70: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DC:BD:3C:22:AD:6E:86:14:03:CB:D4:4E:DC:E8:1D:B5:A6:0A:3B X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:10:57:af:de:ac:de:38:9b:1a:a4:14:c5:3d:9c:2c:72:28: eb:34:81:98:6a:05:ca:31:1f:02:e9:b5:e4:f1:a7:17:d7:c9: 90:de:48:d1:c9:10:34:1a:ff:b4:0b:6d:c9:c6:03:e2:ec:90: 19:42:44:35:44:7d:a5:c9:cf:42:ab:a4:c2:f2:de:e0:3a:66: 67:1b:9a:08:37:c4:e7:d6:d1:a2:fb:7a:64:af:77:62:02:7c: b8:0e:80:f2:d3:d5:7e:cb:d8:4b:56:a7:b8:51:84:23:d9:f3: 26:c6:04:87:c0:f3:f7:32:26:e3:d3:fb:0f:68:11:38:84:5c: ad:ab:f4:71:ea:d0:64:63:3a:04:a0:60:69:fe:12:24:c2:4b: c9:68:ef:22:76:09:db:b3:00:c4:a5:b1:fc:7b:4d:7f:da:01: 9f:7e:1c:91:44:ac:6e:6a:8c:5c:2d:bb:35:e4:85:7b:6d:6a: ad:01:db:12:23:9a:ad:ca:d0:ee:84:f2:af:85:e5:44:30:d0: 8b:73:ca:88:08:26:c6:58:a9:8c:de:ef:bb:f7:79:af:e4:06: d1:3d:a1:c8:72:2a:ac:ac:2a:4d:7c:f6:bb:10:e3:75:43:d2: f5:85:7d:52:5a:91:7d:c9:4e:dc:96:4a:cb:72:9d:27:43:e8: bf:72:77:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwNzE4MTc0MDM4WhcNMjUwNzI1MTc0MDM4WjAYMRYwFAYD VQQDEw02ODdhODcxNi1lMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlqJiN9pOPMLjQ1gMK5V6JsQT+rHdvEePVWIGX2jU7rrHXcb4NzJNFQrw3KA RjuxQN5bZpyKvN6YJKLyLMxIXz7tDMxxsav7+L3CNkTucsUn7LEsuF81SBOX3JDy VNVs6gqewv237TGm6INvnwSEeqslEcxe2FSkbe8M7PsOuGHVARdABSvgyPww7wUF 3o62Onl9guetQD812L5ePPAo/vlFWYlzXVR1nbggue8enEQ9hJREKAH0+s/bEhM/ 5WJL4Z9FDeyBb/riTPHg6fBvm2segWlL0O0/n4s5lvbqycnAfbUNW9g+M9GUpeIG ovWadAtFXOZEOvo+eHYnlnA3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbcvTwi rW6GFAPL1E7c6B21pgo7MB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoEFev3qzeOJsapBTFPZwscijrNIGYagXKMR8C6bXk8acX18mQ3kjR yRA0Gv+0C23JxgPi7JAZQkQ1RH2lyc9Cq6TC8t7gOmZnG5oIN8Tn1tGi+3pkr3di Any4DoDy09V+y9hLVqe4UYQj2fMmxgSHwPP3Mibj0/sPaBE4hFytq/Rx6tBkYzoE oGBp/hIkwkvJaO8idgnbswDEpbH8e01/2gGffhyRRKxuaoxcLbs15IV7bWqtAdsS I5qtytDuhPKvheVEMNCLc8qICCbGWKmM3u+793mv5AbRPaHIciqsrCpNfPa7EON1 Q9L1hX1SWpF9yU7clkrLcp0nQ+i/cncm -----END CERTIFICATE-----Generated at Sun Jul 20 17:26:41 2025 by rpki-client