$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json) Hash identifier: aMLLNlY8OHVentVzr4enGyF2fe7dsvLiYDbPbqevkeU= Subject key identifier: 78:0A:45:15:69:10:31:D8:69:53:AB:73:F7:F0:08:F5:B7:08:D4:7D Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft Manifest number: 0D33 Signing time: Thu 18 Sep 2025 18:12:56 +0000 Manifest this update: Thu 18 Sep 2025 18:12:55 +0000 Manifest next update: Thu 25 Sep 2025 18:12:55 +0000 Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: EeWapobLRpCnPQh0e1wlRvHzkF8rAOYP5tLyIX7EeGg=) 2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: hbFGbb4fXsbz6F3BPhzZvLmW3bUeWq5CqpJ6o7pIq8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Sep 18 18:12:55 2025 GMT Not After : Sep 25 18:12:55 2025 GMT Subject: CN=68cc4ba8-1d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:e6:ad:67:9d:aa:b0:05:2a:b8:02:a7:be: a0:f9:2f:19:2d:44:4c:df:9c:86:0a:f1:8a:b1:5b: 23:78:04:c7:ce:29:6a:aa:75:cd:0c:82:37:2f:da: 6d:7a:78:d2:f6:ae:93:ab:8f:90:f5:77:7f:57:55: 19:fb:23:69:07:b0:66:fe:c6:56:0f:ae:c4:32:a6: 1f:c5:35:a5:e6:2b:63:33:96:e5:dd:5b:51:d7:39: 74:d0:95:66:0d:9c:96:71:7a:cb:b0:b3:26:7f:c1: db:f4:24:81:c1:c2:bf:a9:b0:f7:48:8f:e5:72:68: 0e:ae:65:f8:90:0f:81:39:d2:ee:00:22:b1:03:bc: 2b:71:9e:5c:2b:c1:d3:61:82:30:44:5c:df:81:10: e6:5f:dc:b4:b8:9c:44:12:13:7e:9d:ed:2e:50:76: 20:e5:1e:57:9f:7d:97:c6:4e:74:d6:8c:85:1a:59: 93:d3:08:d0:0c:77:ce:62:c1:ae:8d:a2:66:2c:64: a8:ae:3e:97:d7:1f:5a:46:7f:d4:c8:10:41:2b:5b: 8d:1b:9f:7f:91:2a:d9:92:be:fa:8a:5c:ec:1b:17: 6a:02:f9:cc:62:0b:1d:29:9b:de:ce:8e:7e:0a:77: c4:56:0f:fa:75:54:0c:33:9c:54:47:9f:68:b5:b2: 94:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0A:45:15:69:10:31:D8:69:53:AB:73:F7:F0:08:F5:B7:08:D4:7D X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:4b:4c:55:e6:08:e3:f6:8b:26:84:b6:5e:92:2f:e3:98:1c: a0:18:c3:8f:10:f2:a2:55:cb:ba:35:3e:1e:95:e3:de:b0:dd: c3:b1:51:4d:25:0b:a0:ad:8d:0a:9c:90:86:e6:cd:76:fd:a5: b9:56:49:0f:b2:c3:0e:cd:3e:8d:a5:94:09:a5:88:07:40:1a: 23:98:f9:5a:f7:ae:8f:05:34:d3:fe:ea:03:42:a4:d3:79:cd: e3:b9:d5:4a:ee:74:3f:9d:25:40:dc:58:c6:85:7b:13:8f:72: 5b:7b:5f:91:1e:2f:9f:a3:e6:98:ee:6a:c6:23:45:6f:1f:89: ce:93:d0:02:cc:ba:77:3e:63:bb:e0:95:14:17:49:94:0e:9d: 4f:33:f9:11:98:b6:07:e9:66:8b:78:5e:8d:1f:6d:ec:c4:ff: 8b:9d:86:7e:c1:28:31:e8:74:cf:cb:ec:83:8f:05:1c:2d:16: fe:4f:21:90:1f:19:e8:02:61:45:5a:c7:23:61:4d:24:99:0a: eb:9f:70:7e:48:97:98:f7:72:14:3b:87:66:e5:84:38:e9:c1: a2:48:b7:14:97:9e:77:ec:a9:02:c0:ed:87:fb:3e:45:9a:4f: 7c:32:c1:dd:6b:b2:10:f2:61:0e:5f:68:96:20:6f:50:9f:44: d6:60:42:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjUwOTE4MTgxMjU1WhcNMjUwOTI1MTgxMjU1WjAYMRYwFAYD VQQDEw02OGNjNGJhOC0xZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTPmrWedqrAFKrgCp76g+S8ZLURM35yGCvGKsVsjeATHzilqqnXNDII3L9pt enjS9q6Tq4+Q9Xd/V1UZ+yNpB7Bm/sZWD67EMqYfxTWl5itjM5bl3VtR1zl00JVm DZyWcXrLsLMmf8Hb9CSBwcK/qbD3SI/lcmgOrmX4kA+BOdLuACKxA7wrcZ5cK8HT YYIwRFzfgRDmX9y0uJxEEhN+ne0uUHYg5R5Xn32Xxk501oyFGlmT0wjQDHfOYsGu jaJmLGSorj6X1x9aRn/UyBBBK1uNG59/kSrZkr76ilzsGxdqAvnMYgsdKZvezo5+ CnfEVg/6dVQMM5xUR59otbKUXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgKRRVp EDHYaVOrc/fwCPW3CNR9MB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODFFMC83NjFBN0VBQ0UyQTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21B dURrQS0zajYybWNONHVDbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDS0xV5gjj9osmhLZeki/jmBygGMOPEPKiVcu6NT4elePesN3DsVFN JQugrY0KnJCG5s12/aW5VkkPssMOzT6NpZQJpYgHQBojmPla966PBTTT/uoDQqTT ec3judVK7nQ/nSVA3FjGhXsTj3Jbe1+RHi+fo+aY7mrGI0VvH4nOk9ACzLp3PmO7 4JUUF0mUDp1PM/kRmLYH6WaLeF6NH23sxP+LnYZ+wSgx6HTPy+yDjwUcLRb+TyGQ HxnoAmFFWscjYU0kmQrrn3B+SJeY93IUO4dm5YQ46cGiSLcUl5537KkCwO2H+z5F mk98MsHda7IQ8mEOX2iWIG9Qn0TWYEIN -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:58 2025 by rpki-client