$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json) Hash identifier: GncJsbVnw5RGoVQFpnbMljuGKcmMdQWeWAv+sL/d1SA= Subject key identifier: BF:D3:FF:4C:5D:0E:EE:35:13:7C:55:B7:7A:3C:9E:A9:87:54:CD:C1 Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft Manifest number: 01A5 Signing time: Sat 23 Aug 2025 03:21:34 +0000 Manifest this update: Sat 23 Aug 2025 03:21:33 +0000 Manifest next update: Sat 30 Aug 2025 03:21:33 +0000 Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: Ub1TGzDuvk2YPfZWatdK86YhXAqU39BxiINY6pqS8to=) 2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: yNzSo18Zr+VZZ8+QcBD6VKrhKtuzioN93vYAY/qtNGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: Aug 23 03:21:33 2025 GMT Not After : Aug 30 03:21:33 2025 GMT Subject: CN=68a933be-501b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3e:dc:5f:a7:39:ee:ac:77:b2:fb:5e:9b:fe: 3c:65:e9:75:b2:8b:7d:16:04:fb:e4:b8:3c:68:4f: c3:ff:ce:fd:65:d9:fb:1d:32:a8:9b:84:d7:6e:6a: e0:08:38:d1:d5:41:87:a9:4e:20:a4:00:92:e0:93: ce:79:73:50:96:25:e5:77:d3:ac:81:13:e6:56:3d: f2:d1:4f:e8:b7:b4:fe:71:b1:d2:f9:d5:8f:64:ce: 6d:e5:ad:01:5c:15:2b:ba:6c:b0:5f:4a:0e:ae:23: 98:db:74:4b:2b:c5:a7:c3:46:7a:95:80:76:5e:34: 5f:15:0a:46:5a:39:f3:9d:70:f4:6a:e9:b3:d4:8b: f1:18:ba:a7:f8:f0:ab:f8:05:de:ec:93:04:3e:ae: b7:75:ca:04:b3:29:9b:43:0b:10:e8:9f:42:b6:73: 31:c3:1e:5e:f5:12:99:74:99:49:24:f3:5d:4c:0b: b3:65:0d:ec:14:0b:b2:74:b0:7f:e3:2a:a1:f1:c1: 67:1f:dd:d7:a7:e3:e3:27:b4:d3:6b:88:3c:1b:54: bc:5f:0f:b4:b2:64:15:39:a2:6e:3d:d2:43:6f:82: d0:f5:d4:f7:19:c5:c6:e5:65:06:74:8f:de:f0:b0: 75:71:e5:66:8e:54:ba:97:59:60:13:c5:3e:e1:0e: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D3:FF:4C:5D:0E:EE:35:13:7C:55:B7:7A:3C:9E:A9:87:54:CD:C1 X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b1:0d:3b:e9:53:b3:23:09:0d:8b:51:15:4d:dd:a8:dd:40: 28:bd:d3:8b:75:da:0e:96:7c:9c:3c:84:1c:23:cf:58:5a:17: 44:44:e0:f2:25:c6:04:57:46:f8:1c:7f:03:f6:e9:cb:29:7e: b0:4b:40:71:7a:3d:6c:6d:4c:24:24:16:9c:c7:76:0e:e5:89: c4:92:d3:2f:07:f3:95:36:31:1b:74:58:92:b8:0f:a8:4d:90: f8:6e:8c:2d:c4:0e:a5:4d:e6:c4:09:5c:0e:fe:1a:39:61:3f: ed:9e:98:e6:92:eb:ca:58:6c:87:1d:eb:28:89:20:7e:86:8d: 29:1d:51:5c:24:42:53:3c:5b:0d:f5:86:a8:f1:95:bd:51:87: 5d:58:ef:bc:b6:63:ef:61:aa:ba:6a:40:7a:f2:2e:a7:cb:d0: 76:a6:85:a7:6c:11:c6:c3:25:f1:f7:a1:5b:cf:a6:02:88:dc: 39:aa:08:a0:d6:d3:5a:65:69:ef:03:91:0e:a1:f1:cc:41:ee: 29:ea:9b:bc:17:04:d3:0a:5b:b9:3f:ae:21:18:d1:44:9e:ec: 92:13:22:e1:b7:0d:b1:fd:75:82:09:4e:0e:18:b5:b7:ad:a4: 2f:fb:4c:20:a8:4b:c0:68:94:ba:2d:d5:43:29:8d:20:81:b4: f0:62:ad:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUwODIzMDMyMTMzWhcNMjUwODMwMDMyMTMzWjAYMRYwFAYD VQQDEw02OGE5MzNiZS01MDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5j7cX6c57qx3svtem/48Zel1sot9FgT75Lg8aE/D/879Zdn7HTKom4TXbmrg CDjR1UGHqU4gpACS4JPOeXNQliXld9OsgRPmVj3y0U/ot7T+cbHS+dWPZM5t5a0B XBUrumywX0oOriOY23RLK8Wnw0Z6lYB2XjRfFQpGWjnznXD0aumz1IvxGLqn+PCr +AXe7JMEPq63dcoEsymbQwsQ6J9CtnMxwx5e9RKZdJlJJPNdTAuzZQ3sFAuydLB/ 4yqh8cFnH93Xp+PjJ7TTa4g8G1S8Xw+0smQVOaJuPdJDb4LQ9dT3GcXG5WUGdI/e 8LB1ceVmjlS6l1lgE8U+4Q5N7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/T/0xd Du41E3xVt3o8nqmHVM3BMB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK b3laczRJT2xlY3JST2xnR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApsQ076VOzIwkNi1EVTd2o3UAovdOLddoOlnycPIQcI89YWhdERODy JcYEV0b4HH8D9unLKX6wS0Bxej1sbUwkJBacx3YO5YnEktMvB/OVNjEbdFiSuA+o TZD4bowtxA6lTebECVwO/ho5YT/tnpjmkuvKWGyHHesoiSB+ho0pHVFcJEJTPFsN 9Yao8ZW9UYddWO+8tmPvYaq6akB68i6ny9B2poWnbBHGwyXx96Fbz6YCiNw5qgig 1tNaZWnvA5EOofHMQe4p6pu8FwTTClu5P64hGNFEnuySEyLhtw2x/XWCCU4OGLW3 raQv+0wgqEvAaJS6LdVDKY0ggbTwYq1N -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:11 2025 by rpki-client