$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: VQFqXkkskDtNTS7WrXUUf7/EZRaDQtMnt20x1PJlKvs= Subject key identifier: 5B:37:82:60:4B:B5:8F:E3:36:4F:E3:D4:AF:FA:06:05:A9:11:02:FC Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34C8 Signing time: Sat 06 Sep 2025 14:22:27 +0000 Manifest this update: Sat 06 Sep 2025 14:22:27 +0000 Manifest next update: Sat 13 Sep 2025 14:22:27 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 9zpgXrUdnCERwzLwqXpsKFYSFO6+x8QczPW0wGUrQ0o=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13520 (0x34d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Sep 6 14:22:27 2025 GMT Not After : Sep 13 14:22:27 2025 GMT Subject: CN=68bc43a3-2981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:5e:8e:04:41:94:61:55:42:de:29:61:48: 61:94:cd:8b:df:6e:d0:5d:92:56:14:05:cb:ce:0d: 41:28:e0:ce:cb:5d:d1:9a:55:a7:82:59:75:58:81: 88:f8:37:66:eb:91:33:b5:40:03:64:97:43:89:47: 61:a6:19:61:ac:f2:67:c8:99:8f:e0:bb:5c:09:8a: 98:03:4e:7d:f4:98:5f:f8:e0:ff:25:fc:f3:4b:b2: a8:16:53:37:b5:e2:ed:60:a6:72:09:24:94:3b:7c: 35:79:9e:ac:1d:9d:10:d9:ce:6d:3c:e3:ef:3e:ba: e6:53:ca:0c:0d:e4:33:e2:51:3d:1f:44:c0:f1:d1: d9:6d:ae:5b:97:71:1f:e9:fa:93:b6:93:2f:d7:8a: 1d:10:97:c9:64:4f:fd:1a:0d:66:3b:03:5f:ab:f7: 46:08:dc:25:a4:f9:6b:68:f9:de:df:84:ea:4b:fe: ca:8b:75:aa:94:74:eb:b8:34:50:27:1d:86:d4:5c: 6e:f1:08:8b:08:98:ec:f6:9e:1f:5d:03:01:44:53: ba:1e:6b:98:1a:eb:1e:1d:94:6b:79:1c:7e:d0:63: 6f:df:aa:d1:31:ff:e1:9f:80:69:4b:e5:b4:4f:39: 4f:f3:e7:9d:58:f8:e7:43:27:ec:93:6a:dd:fa:0d: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:37:82:60:4B:B5:8F:E3:36:4F:E3:D4:AF:FA:06:05:A9:11:02:FC X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:92:41:ce:8f:f0:9a:39:d5:8a:2b:17:50:b5:1e:a2:b2:0d: 33:1f:c7:95:00:12:a9:e3:d8:b2:4a:38:e1:ad:c1:c5:59:91: 47:3f:de:1d:8e:e3:f5:8a:c7:aa:74:68:97:59:a6:48:54:0e: 9d:ab:08:48:67:94:03:36:4c:68:5f:9f:c7:68:44:0b:d3:eb: 69:78:c3:57:4e:da:22:2c:95:1d:44:15:a0:67:c0:f1:24:b3: 34:f6:61:dd:d5:00:32:8d:f3:df:10:65:84:ef:31:92:60:09: 9d:31:73:42:41:64:f3:1a:d2:cf:7d:fe:f5:8c:d1:52:85:bc: 46:b5:29:41:81:01:92:e3:8b:ed:f5:b1:c1:a2:5c:77:2a:34: d7:79:fe:d0:76:e9:8f:c9:e5:28:7b:45:c3:d1:c7:b4:73:b8: 5c:ba:2b:3a:ae:4d:3f:1f:23:2b:2f:42:b4:a9:ec:be:d9:c5: 8c:32:d4:92:5a:de:04:61:a8:f6:8a:1b:ce:9e:9e:1d:f3:5f: 88:00:52:da:7f:bd:d4:03:f7:75:df:66:48:5f:33:d2:4f:57: a8:a8:07:41:60:39:07:ad:5f:d5:a4:29:ee:d0:d8:44:34:45: 2d:56:f0:92:1f:e3:0d:28:7a:44:aa:2b:53:77:1e:03:b3:56: 9c:19:ee:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwOTA2MTQyMjI3WhcNMjUwOTEzMTQyMjI3WjAYMRYwFAYD VQQDEw02OGJjNDNhMy0yOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM9ejgRBlGFVQt4pYUhhlM2L327QXZJWFAXLzg1BKODOy13RmlWngll1WIGI +Ddm65EztUADZJdDiUdhphlhrPJnyJmP4LtcCYqYA0599Jhf+OD/JfzzS7KoFlM3 teLtYKZyCSSUO3w1eZ6sHZ0Q2c5tPOPvPrrmU8oMDeQz4lE9H0TA8dHZba5bl3Ef 6fqTtpMv14odEJfJZE/9Gg1mOwNfq/dGCNwlpPlraPne34TqS/7Ki3WqlHTruDRQ Jx2G1Fxu8QiLCJjs9p4fXQMBRFO6HmuYGuseHZRreRx+0GNv36rRMf/hn4BpS+W0 TzlP8+edWPjnQyfsk2rd+g0kqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs3gmBL tY/jNk/j1K/6BgWpEQL8MB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArkkHOj/CaOdWKKxdQtR6isg0zH8eVABKp49iySjjhrcHFWZFHP94d juP1iseqdGiXWaZIVA6dqwhIZ5QDNkxoX5/HaEQL0+tpeMNXTtoiLJUdRBWgZ8Dx JLM09mHd1QAyjfPfEGWE7zGSYAmdMXNCQWTzGtLPff71jNFShbxGtSlBgQGS44vt 9bHBolx3KjTXef7QdumPyeUoe0XD0ce0c7hcuis6rk0/HyMrL0K0qey+2cWMMtSS Wt4EYaj2ihvOnp4d81+IAFLaf73UA/d132ZIXzPST1eoqAdBYDkHrV/VpCnu0NhE NEUtVvCSH+MNKHpEqitTdx4Ds1acGe5l -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:07 2025 by rpki-client