$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: 807/HfxYfdpgYBRM0YneZ/kUyDBZGoreE+g4w2x9Ty0= Subject key identifier: E0:6F:A5:94:44:E9:44:E5:1B:E0:B4:BA:B2:53:DD:5D:B6:F7:45:C4 Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C8B Signing time: Sun 24 Aug 2025 18:13:51 +0000 Manifest this update: Sun 24 Aug 2025 18:13:51 +0000 Manifest next update: Sun 31 Aug 2025 18:13:51 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: njCAPGiUbOWhVKMHgGxUifpeTm3KzJ+gZoRmNdAM+6U=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Aug 24 18:13:51 2025 GMT Not After : Aug 31 18:13:51 2025 GMT Subject: CN=68ab565f-805a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:32:30:1a:cd:56:5b:2f:c9:8e:d0:2d:9b: ee:48:38:d3:c4:e4:9c:ec:84:40:cc:48:9c:8b:02: 98:62:4d:e9:88:ac:36:cc:7b:03:ec:fe:5f:9e:e9: ec:9a:31:8b:45:57:4c:73:bd:d3:91:e9:9c:62:7e: 04:dd:a1:69:20:7e:06:d8:f0:45:6d:52:d9:d1:b3: dd:0c:a3:a8:87:43:e3:65:56:66:ce:c0:48:a4:92: 4d:53:4e:37:7f:4b:d8:8f:ae:45:84:90:7f:23:64: f2:d9:6e:bf:b6:49:dd:b4:16:d2:c6:5a:96:e1:e0: 44:cc:c7:1d:e4:37:b9:40:a8:2a:f0:74:b7:fd:e8: 6d:41:aa:e6:e7:9b:fc:46:0f:81:95:bc:5c:6b:ef: b7:75:99:72:0c:bf:31:19:0e:7b:4d:78:19:89:a8: c6:4e:cc:ec:48:5e:b1:17:f4:e0:4f:11:c1:32:25: 6a:eb:f0:73:bf:26:1e:61:49:76:fe:ec:68:c5:32: 8a:81:2f:ba:35:e8:63:09:84:4b:c7:cb:65:f6:28: 67:2e:09:6c:0a:ae:39:32:2c:b2:65:6b:f8:e2:4e: a6:68:b3:e8:94:4e:a7:71:40:59:23:8c:fd:14:64: ba:f6:3b:e2:09:6d:5f:90:49:bb:1b:7a:47:df:52: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6F:A5:94:44:E9:44:E5:1B:E0:B4:BA:B2:53:DD:5D:B6:F7:45:C4 X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:58:91:d3:f7:34:a7:15:96:35:55:ca:32:77:b7:18:94:36: 76:b5:e1:bd:73:3a:5a:7e:71:53:59:94:8e:ed:51:2c:cd:b4: 9f:ce:e0:1f:18:f9:c1:f1:40:0f:ef:92:c8:fb:e8:bd:73:c5: 37:27:69:03:63:2c:02:f9:ca:07:af:fa:eb:3f:fc:f0:fb:fe: 7a:94:67:a8:3d:09:6b:2a:44:e4:0f:fc:39:0d:4c:50:38:72: f2:ab:48:c1:f9:15:79:67:37:92:e0:ad:3c:c1:f8:37:8b:1a: a4:db:b2:98:15:4d:70:96:b0:dd:ce:ba:09:92:e1:8a:b6:71: 54:06:c0:93:14:c4:ad:05:19:a5:4c:81:90:e2:d7:33:12:fb: 03:45:a1:4d:f8:d8:37:f0:09:47:c2:45:b3:21:c5:4b:89:dc: 35:9f:75:b8:f5:f9:a6:aa:f8:c9:8b:8a:a0:fc:2e:b2:6b:db: d2:bb:1c:1b:f6:6d:91:32:cd:2a:d8:9e:72:b1:a9:0f:b9:ca: 90:70:a3:8c:fd:a0:f6:6c:af:06:36:2d:ae:fa:e9:ac:34:3d: 0f:f3:e6:a7:e4:51:36:a1:7c:f7:93:ec:94:0a:13:bc:fc:b6: 0a:6d:2b:27:52:d6:0a:2b:e9:a4:be:f0:c9:a6:34:6c:3c:28: 88:e4:cc:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwODI0MTgxMzUxWhcNMjUwODMxMTgxMzUxWjAYMRYwFAYD VQQDEw02OGFiNTY1Zi04MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvAyMBrNVlsvyY7QLZvuSDjTxOSc7IRAzEiciwKYYk3piKw2zHsD7P5fnuns mjGLRVdMc73TkemcYn4E3aFpIH4G2PBFbVLZ0bPdDKOoh0PjZVZmzsBIpJJNU043 f0vYj65FhJB/I2Ty2W6/tkndtBbSxlqW4eBEzMcd5De5QKgq8HS3/ehtQarm55v8 Rg+Blbxca++3dZlyDL8xGQ57TXgZiajGTszsSF6xF/TgTxHBMiVq6/BzvyYeYUl2 /uxoxTKKgS+6NehjCYRLx8tl9ihnLglsCq45MiyyZWv44k6maLPolE6ncUBZI4z9 FGS69jviCW1fkEm7G3pH31LZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBvpZRE 6UTlG+C0urJT3V2290XEMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2WJHT9zSnFZY1Vcoyd7cYlDZ2teG9czpafnFTWZSO7VEszbSfzuAf GPnB8UAP75LI++i9c8U3J2kDYywC+coHr/rrP/zw+/56lGeoPQlrKkTkD/w5DUxQ OHLyq0jB+RV5ZzeS4K08wfg3ixqk27KYFU1wlrDdzroJkuGKtnFUBsCTFMStBRml TIGQ4tczEvsDRaFN+Ng38AlHwkWzIcVLidw1n3W49fmmqvjJi4qg/C6ya9vSuxwb 9m2RMs0q2J5ysakPucqQcKOM/aD2bK8GNi2u+umsND0P8+an5FE2oXz3k+yUChO8 /LYKbSsnUtYKK+mkvvDJpjRsPCiI5Mw/ -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:20 2025 by rpki-client