$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: snBgko06P+FH2f6KwWPaVpZBXiMKyDOUmB/JIZYKD8o= Subject key identifier: 3A:5F:CA:80:4F:DF:38:FA:92:E4:EC:C5:DA:17:25:08:AF:1D:74:33 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: BA Signing time: Fri 05 Sep 2025 06:26:18 +0000 Manifest this update: Fri 05 Sep 2025 06:26:17 +0000 Manifest next update: Fri 12 Sep 2025 06:26:17 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: 7RenbS1M48RUjyXjTio3APGaINFgZ/ZpRWpTdAFkpt0=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 2GAN4cx4QTuzJoHXcS0SxuhQPJxWZFMWGY3rZM3hC3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Sep 5 06:26:17 2025 GMT Not After : Sep 12 06:26:17 2025 GMT Subject: CN=68ba8289-9c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:55:f0:31:44:1b:ce:bd:3e:6e:f6:a1:1b:0e: 82:27:10:3e:c1:ac:11:00:83:5b:83:4c:31:fc:13: 1c:2d:66:1b:3f:ac:27:f5:7d:a8:fe:a2:4b:15:b1: ae:72:8a:b1:6a:0f:d0:b7:18:0a:b1:f0:d0:d0:b2: e1:54:c9:ff:ae:51:db:04:f5:84:00:8d:9f:7c:dc: 9b:bd:1f:5e:9b:b9:39:74:50:e7:ce:3f:66:0e:30: d4:0e:23:f6:39:4a:c6:dd:46:68:21:0a:f7:9a:6f: d0:03:cd:aa:9c:f7:9a:0b:27:54:46:4b:b3:79:2f: 14:e9:7a:42:0d:a0:9a:34:08:8d:05:90:2b:c0:e9: 85:30:85:a4:53:f7:2d:4e:ac:48:4a:c7:23:6c:e4: 56:01:0d:c4:aa:cb:03:88:fd:74:f4:0e:0e:6f:7f: dc:0a:87:b5:ec:e1:1d:d1:65:b6:01:2a:f3:0d:b9: d8:5c:c3:5f:a4:9f:aa:15:bc:bd:ca:28:3d:5d:28: 6b:c3:79:08:62:5d:5b:2d:08:68:38:c2:f3:c9:19: 8c:7d:38:dd:31:ad:4e:47:24:91:a5:82:ab:db:d6: 36:21:98:d3:12:ae:39:f1:0e:f3:5d:6c:bc:da:15: 1c:39:82:9a:d1:1c:8a:26:6c:5b:27:0c:12:64:0f: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5F:CA:80:4F:DF:38:FA:92:E4:EC:C5:DA:17:25:08:AF:1D:74:33 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7d:0c:d3:64:ea:3a:c4:8a:3b:92:d7:63:36:20:b3:55:51: 34:36:0b:4f:ac:aa:fe:4d:aa:3e:db:4f:c5:f9:6c:94:d9:a7: 28:00:97:52:db:7a:e5:be:a3:40:84:72:0a:9d:02:06:b0:ab: d5:2b:7c:0d:bf:bf:54:47:fb:8e:e4:56:04:a1:f0:d9:d8:3b: 8b:28:af:13:0c:cf:98:32:c8:2c:e5:7d:48:a5:c0:52:24:b0: ba:7d:86:3e:73:be:29:38:b3:62:2f:08:27:fa:76:c4:50:19: a6:5e:de:07:f3:2c:db:81:b7:72:11:0b:4e:f3:06:b5:2e:8b: 35:d6:75:59:84:da:77:af:96:be:d5:ce:ff:a5:10:e6:1d:d2: d7:15:1d:95:4c:3e:40:e8:48:37:cb:37:16:a6:ef:3e:73:1d: 65:0a:8a:b2:bf:32:82:bb:29:79:e5:12:47:d4:38:80:22:4b: 24:9a:3e:e2:51:73:63:b2:eb:b0:f6:6e:85:44:1e:3e:a1:12: 81:03:ce:6f:76:6d:b2:a4:7f:a0:f1:83:b5:43:35:a7:00:79: 4f:e1:31:bc:a3:dd:92:20:0b:8d:07:ac:84:3b:f9:26:b8:16: c5:e0:a1:f2:fe:bf:46:1f:b7:84:b3:5d:c8:04:be:a5:c5:e7: f5:b2:cd:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDhERDQxNDQ4NTkxN0NENEM4MDE2N0JEQTE5RDcyNDk2 NDZCMDY3MjUwHhcNMjUwOTA1MDYyNjE3WhcNMjUwOTEyMDYyNjE3WjAYMRYwFAYD VQQDEw02OGJhODI4OS05YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lXwMUQbzr0+bvahGw6CJxA+wawRAINbg0wx/BMcLWYbP6wn9X2o/qJLFbGu coqxag/QtxgKsfDQ0LLhVMn/rlHbBPWEAI2ffNybvR9em7k5dFDnzj9mDjDUDiP2 OUrG3UZoIQr3mm/QA82qnPeaCydURkuzeS8U6XpCDaCaNAiNBZArwOmFMIWkU/ct TqxISscjbORWAQ3EqssDiP109A4Ob3/cCoe17OEd0WW2ASrzDbnYXMNfpJ+qFby9 yig9XShrw3kIYl1bLQhoOMLzyRmMfTjdMa1ORySRpYKr29Y2IZjTEq458Q7zXWy8 2hUcOYKa0RyKJmxbJwwSZA85nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpfyoBP 3zj6kuTsxdoXJQivHXQzMB8GA1UdIwQYMBaAFI3UFEhZF81MgBZ72hnXJJZGsGcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EMjdDOTE1Qzc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpVeUFGbnZhR2Rja2xrYXda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EMjdDOTE1Qzc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpV eUFGbnZhR2Rja2xrYXdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKfQzTZOo6xIo7ktdjNiCzVVE0NgtPrKr+Tao+20/F+WyU2acoAJdS 23rlvqNAhHIKnQIGsKvVK3wNv79UR/uO5FYEofDZ2DuLKK8TDM+YMsgs5X1IpcBS JLC6fYY+c74pOLNiLwgn+nbEUBmmXt4H8yzbgbdyEQtO8wa1Los11nVZhNp3r5a+ 1c7/pRDmHdLXFR2VTD5A6Eg3yzcWpu8+cx1lCoqyvzKCuyl55RJH1DiAIkskmj7i UXNjsuuw9m6FRB4+oRKBA85vdm2ypH+g8YO1QzWnAHlP4TG8o92SIAuNB6yEO/km uBbF4KHy/r9GH7eEs13IBL6lxef1ss0F -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:26 2025 by rpki-client