$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json) Hash identifier: 7bPNl1TVigO3PJyMR9pGdBtO+PQYV3qOwf9RdS9iLR4= Subject key identifier: 98:72:0C:7F:F8:D4:64:D9:77:5E:96:88:69:BA:BA:1C:B3:A6:6C:7D Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft Manifest number: FB Signing time: Sat 19 Jul 2025 05:22:55 +0000 Manifest this update: Sat 19 Jul 2025 05:22:54 +0000 Manifest next update: Sat 26 Jul 2025 05:22:54 +0000 Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: 1YV9lu2yk7g0gCZXcva6/SLmDJDGOzzTcUR2Cbq6k1s=) 2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: PDtdUX6JrHo4d5GjgXXthgA5sLxtJKv9u0i8nv/vqsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Validity Not Before: Jul 19 05:22:54 2025 GMT Not After : Jul 26 05:22:54 2025 GMT Subject: CN=687b2bae-b87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:49:85:1e:9c:c4:2f:89:68:df:35:69:c9: 25:80:0b:d4:e1:ee:06:f9:b5:af:65:e8:f6:8a:cd: 34:9d:c1:ef:26:b7:6d:67:d5:71:f4:e3:20:9b:6d: 72:48:0f:1a:19:ec:9c:0e:5d:58:98:75:02:11:2a: 2d:77:58:b4:45:9c:f7:33:3e:09:8b:fb:d7:2a:70: 86:6e:b3:af:31:de:49:bc:ea:f9:8d:86:a6:d1:74: c0:43:c3:86:2a:ba:bb:61:d4:26:7b:54:9f:60:3c: b4:0b:8f:0c:26:55:53:c1:a0:f6:7c:66:c2:95:bc: a0:07:3e:a5:ad:a5:db:c1:00:ba:80:ff:9e:04:e5: 46:5f:36:00:db:30:28:da:0c:34:e6:5b:00:1a:11: 7d:e7:d0:63:e5:3d:a8:63:02:60:9d:af:af:d6:f1: bd:6e:58:c5:be:55:66:4f:9c:e7:e2:98:c4:0a:40: 3d:15:d0:77:6f:04:bd:ae:c5:a4:52:16:a7:d8:3b: 53:41:5f:03:1e:08:f4:b6:25:f7:cc:a6:41:46:eb: f8:04:b1:51:84:02:91:a6:51:f9:aa:84:d1:c1:b3: f0:c0:45:68:70:3f:02:ef:ae:05:c2:15:94:d2:9f: 19:52:3b:36:b9:61:29:5d:22:fc:ba:d1:ce:8c:39: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:72:0C:7F:F8:D4:64:D9:77:5E:96:88:69:BA:BA:1C:B3:A6:6C:7D X509v3 Authority Key Identifier: keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:92:3f:95:52:c9:c2:9c:53:57:00:c2:50:34:aa:8f:cc:cd: c4:1a:a4:71:e3:57:35:7b:a0:1c:c8:b9:4b:51:10:b1:83:21: ff:aa:f7:60:e5:d2:da:28:b5:b5:75:c0:a7:4e:c9:20:0c:9f: 03:ac:38:e8:47:e0:64:bb:45:e0:66:42:25:b4:0c:4a:1f:e0: f5:3c:42:f6:06:90:45:00:74:2a:ad:13:db:59:f7:ef:8c:a9: 97:74:da:31:ef:3a:46:16:de:e9:68:bb:e0:7e:5e:57:cc:d5: 00:c7:2b:a3:4f:48:33:f7:ea:7c:0f:29:9c:10:06:d3:90:05: 03:f7:8b:60:2a:6d:3e:ed:23:63:8b:90:6d:57:2e:65:96:06: 2d:38:ec:c8:82:7f:5a:ee:c7:ef:23:dd:36:7e:79:58:77:a3: bc:74:5b:36:8a:4a:0f:93:30:8c:e9:9d:9a:ec:c6:d1:a8:a5: b0:ad:ce:2d:d5:63:05:7f:46:0e:87:b1:0f:ae:f5:81:8a:9e: 67:80:b1:bf:31:a2:ec:56:6f:36:eb:d4:f5:b0:89:cd:8e:45: 76:66:7d:62:9e:bd:44:92:43:d2:10:72:fd:1a:ec:12:f7:d9: c3:50:eb:68:56:38:16:a1:c9:f4:73:2a:06:83:ff:c4:61:39: be:e3:4b:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4NkQxMTAvBgNVBAUTKDI1NkI1RDE3OTBEMjRDNEQ2Qzk3MjA2NEU5MUM2QUYw MEJENjhFMzIwHhcNMjUwNzE5MDUyMjU0WhcNMjUwNzI2MDUyMjU0WjAYMRYwFAYD VQQDEw02ODdiMmJhZS1iODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFNJhR6cxC+JaN81acklgAvU4e4G+bWvZej2is00ncHvJrdtZ9Vx9OMgm21y SA8aGeycDl1YmHUCESotd1i0RZz3Mz4Ji/vXKnCGbrOvMd5JvOr5jYam0XTAQ8OG Krq7YdQme1SfYDy0C48MJlVTwaD2fGbClbygBz6lraXbwQC6gP+eBOVGXzYA2zAo 2gw05lsAGhF959Bj5T2oYwJgna+v1vG9bljFvlVmT5zn4pjECkA9FdB3bwS9rsWk Uhan2DtTQV8DHgj0tiX3zKZBRuv4BLFRhAKRplH5qoTRwbPwwEVocD8C764FwhWU 0p8ZUjs2uWEpXSL8utHOjDkN5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhyDH/4 1GTZd16WiGm6uhyzpmx9MB8GA1UdIwQYMBaAFCVrXReQ0kxNbJcgZOkcavAL1o4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjg2RC82RjA1ODIwRUU1 M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RFMXNseUJrNlJ4cThBdldq akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjg2RC82RjA1ODIwRUU1M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RF MXNseUJrNlJ4cThBdldqakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCkj+VUsnCnFNXAMJQNKqPzM3EGqRx41c1e6AcyLlLURCxgyH/qvdg 5dLaKLW1dcCnTskgDJ8DrDjoR+Bku0XgZkIltAxKH+D1PEL2BpBFAHQqrRPbWffv jKmXdNox7zpGFt7paLvgfl5XzNUAxyujT0gz9+p8DymcEAbTkAUD94tgKm0+7SNj i5BtVy5llgYtOOzIgn9a7sfvI902fnlYd6O8dFs2ikoPkzCM6Z2a7MbRqKWwrc4t 1WMFf0YOh7EPrvWBip5ngLG/MaLsVm8269T1sInNjkV2Zn1inr1EkkPSEHL9GuwS 99nDUOtoVjgWocn0cyoGg//EYTm+40v4 -----END CERTIFICATE-----Generated at Sun Jul 20 18:56:35 2025 by rpki-client