$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json) Hash identifier: Kv7lVwakZfIizyp0TDo0zN98TS8EBFwZfHygifhUFXM= Subject key identifier: D1:41:1B:3C:53:E5:3C:B2:E3:3C:30:45:C2:99:38:50:80:24:64:0F Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft Manifest number: 0B33 Signing time: Wed 20 Aug 2025 19:17:23 +0000 Manifest this update: Wed 20 Aug 2025 19:17:22 +0000 Manifest next update: Wed 27 Aug 2025 19:17:22 +0000 Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: 1TDl1/mGDSSu2em4pvswHLggfBzrICVk4J7/5eTFp+I=) 2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: WrNvje3c+z7lsqTQqXn/sqPriUfd4/uYt7v0A72LhYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Validity Not Before: Aug 20 19:17:22 2025 GMT Not After : Aug 27 19:17:22 2025 GMT Subject: CN=68a61f43-aba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:34:c1:b3:63:12:cd:0a:27:b9:25:b7:ab: be:fb:3d:47:20:7a:bd:2c:c0:43:3f:35:25:a8:c9: 52:43:fe:c8:4c:c0:e7:6e:e6:20:c0:cd:5f:37:11: 60:b0:c2:ea:f5:ed:8f:a1:18:23:9d:ef:13:9d:27: 78:8c:45:31:74:bd:34:d6:6f:b9:36:47:4d:c8:f2: 98:df:66:6c:9b:92:38:73:0f:5c:e6:df:4e:23:8c: f3:2e:b4:5b:a8:7c:4b:33:ed:af:dc:41:7d:52:d8: 10:fa:a7:bd:b8:7f:b7:c2:98:94:30:6d:eb:b9:1a: b9:b8:f2:c7:ac:56:24:1e:37:dd:ef:81:59:e7:f8: 2a:91:dd:06:6a:9f:15:25:e9:1b:0b:e4:d8:2f:98: de:5c:7e:33:37:db:91:bb:be:d2:e8:54:34:99:e5: 53:a9:1b:ad:34:cc:be:fd:5a:b2:cd:f8:1f:86:42: a1:a4:7f:04:24:4a:ea:88:5e:95:d6:f4:61:0e:6f: 8e:62:dd:9a:cc:35:e4:94:fd:34:ca:b5:25:fd:c8: 5a:be:61:6d:b2:50:8d:e7:b8:cd:9b:4f:1e:96:e3: 81:93:f9:fe:d2:60:95:5d:a4:f1:fb:e1:e1:33:cc: 22:76:2e:98:73:7e:79:32:35:0d:55:55:d8:0f:8e: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:41:1B:3C:53:E5:3C:B2:E3:3C:30:45:C2:99:38:50:80:24:64:0F X509v3 Authority Key Identifier: keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4d:82:fc:ca:3e:4c:6c:d8:60:f7:54:fb:58:d0:92:38:9e: ce:b7:43:f8:a7:1e:50:b2:65:e7:de:ae:fb:6f:08:3c:aa:ef: e5:d8:b2:44:f1:52:08:65:2a:72:a4:7b:a8:65:c9:ad:f4:3a: ab:a4:ac:1d:cf:b5:b7:d2:a4:1d:78:3c:1f:aa:b1:6c:38:a3: 8f:57:15:4f:e2:87:ac:6a:e1:cf:49:82:2a:b0:49:a4:dd:51: a8:96:a3:a7:06:65:7c:b0:7f:c4:7e:9a:42:8e:7c:92:8c:d2: a6:0f:18:64:4e:cf:fd:d9:ae:4f:9c:af:75:82:b7:83:27:63: 8c:1b:17:a8:33:a3:44:80:26:bc:78:42:2c:68:e8:7d:03:72: 49:9a:83:47:2c:75:26:bc:16:51:f5:83:12:c3:5a:91:2c:9f: e2:6c:8a:a6:a1:57:3f:fe:76:eb:11:76:49:d9:62:cc:53:cc: a3:42:d2:a5:2d:40:6f:d6:ce:94:02:97:49:2d:94:e4:ff:45: 11:8b:19:0e:30:c4:93:1a:a7:99:16:18:77:1f:16:e9:e8:38: d7:26:64:63:62:34:19:8c:19:33:11:85:4b:06:30:5b:06:0f: 05:83:fd:ea:47:cc:3a:74:60:1a:19:1c:89:7e:53:cd:f6:4a: 42:ca:bb:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx N0MyMDY1NjYwHhcNMjUwODIwMTkxNzIyWhcNMjUwODI3MTkxNzIyWjAYMRYwFAYD VQQDEw02OGE2MWY0My1hYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBM0wbNjEs0KJ7klt6u++z1HIHq9LMBDPzUlqMlSQ/7ITMDnbuYgwM1fNxFg sMLq9e2PoRgjne8TnSd4jEUxdL001m+5NkdNyPKY32Zsm5I4cw9c5t9OI4zzLrRb qHxLM+2v3EF9UtgQ+qe9uH+3wpiUMG3ruRq5uPLHrFYkHjfd74FZ5/gqkd0Gap8V JekbC+TYL5jeXH4zN9uRu77S6FQ0meVTqRutNMy+/VqyzfgfhkKhpH8EJErqiF6V 1vRhDm+OYt2azDXklP00yrUl/chavmFtslCN57jNm08eluOBk/n+0mCVXaTx++Hh M8widi6Yc355MjUNVVXYD44icwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFBGzxT 5Tyy4zwwRcKZOFCAJGQPMB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx NU9oMGp0NzlQU2dYd2daV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPTYL8yj5MbNhg91T7WNCSOJ7Ot0P4px5QsmXn3q77bwg8qu/l2LJE 8VIIZSpypHuoZcmt9DqrpKwdz7W30qQdeDwfqrFsOKOPVxVP4oesauHPSYIqsEmk 3VGolqOnBmV8sH/EfppCjnySjNKmDxhkTs/92a5PnK91greDJ2OMGxeoM6NEgCa8 eEIsaOh9A3JJmoNHLHUmvBZR9YMSw1qRLJ/ibIqmoVc//nbrEXZJ2WLMU8yjQtKl LUBv1s6UApdJLZTk/0URixkOMMSTGqeZFhh3Hxbp6DjXJmRjYjQZjBkzEYVLBjBb Bg8Fg/3qR8w6dGAaGRyJflPN9kpCyrsf -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:09 2025 by rpki-client