$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: 9Rq0PyGXVrf7ulLpg0AnVQB83LXPAye4eZJafMdb77A= Subject key identifier: 46:E0:93:E5:C2:43:4E:F8:20:F3:D0:FE:15:DD:D8:C6:D1:C4:8B:84 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 019A Signing time: Thu 21 Aug 2025 03:31:36 +0000 Manifest this update: Thu 21 Aug 2025 03:31:36 +0000 Manifest next update: Thu 28 Aug 2025 03:31:36 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: 47/8sJyyfHrU7hF2Irev7sbbZulHWrWrPol9xAOvjKQ=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: t+UtlSfQB7uB9LxMHNDwpYNTZSeeRrSKvGFeOr/lo+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Aug 21 03:31:36 2025 GMT Not After : Aug 28 03:31:36 2025 GMT Subject: CN=68a69318-09e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:c0:d4:e3:17:a8:8b:7b:6a:06:99:88:f8: 47:d1:1f:35:f3:f5:bc:2f:25:fd:b3:52:b0:69:ef: b3:05:41:3e:a3:c4:a3:43:e7:c1:58:0d:49:ee:92: 16:47:4d:bb:1e:6a:da:5b:e4:c7:d5:60:0b:5d:9a: 46:b4:15:a5:c8:d4:fc:fa:04:62:d7:bd:d8:7d:17: be:61:f1:8e:d8:b9:81:49:3d:82:95:67:58:dd:9b: a9:f5:4c:eb:b2:31:77:4c:e0:c5:a9:7c:6c:a1:f3: 3c:4c:38:84:f8:e7:b2:be:1a:3d:75:38:a2:60:7b: 27:a4:05:12:8a:95:5b:84:f4:a8:cf:c5:76:2d:1c: a2:ef:20:b0:5d:40:61:9e:89:4d:55:03:db:73:8e: 27:64:ff:c0:ce:66:7a:3c:59:cf:65:0c:23:1e:f7: 27:2b:2c:41:02:92:5a:d0:de:0a:4c:bd:7f:75:19: 5e:e5:c9:90:a2:7a:c3:00:ef:28:dd:fa:2a:16:da: d7:5b:9b:6b:7d:e1:fd:fa:db:70:2c:08:26:90:85: 17:2f:82:a9:52:7f:47:c8:92:a9:89:cd:2c:e6:3d: 58:5f:a5:b4:61:2d:b2:2d:c8:4c:b6:7c:80:27:8b: ba:5b:ac:5d:c9:ff:7e:6d:bf:6d:dc:c0:48:e6:7c: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E0:93:E5:C2:43:4E:F8:20:F3:D0:FE:15:DD:D8:C6:D1:C4:8B:84 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:19:5c:cd:54:d7:92:f6:45:25:a8:c6:97:84:98:47:b7:16: 18:38:07:0c:04:6d:eb:63:01:11:b4:55:ba:18:1a:89:ec:3b: 74:02:e9:e5:89:f5:9e:bd:82:46:e8:64:72:3e:b8:c6:08:f2: 25:ef:56:76:3c:85:7e:8e:1b:ae:50:42:3b:e3:01:72:c4:8a: 68:74:0d:83:2d:dc:bc:3b:8a:31:00:f4:b2:98:eb:03:0f:97: 51:44:60:07:7c:63:1a:f3:4b:e1:f7:3f:74:07:e8:ff:de:51: 61:ec:ee:e1:14:7d:ce:f2:3e:9f:40:c2:92:d2:56:8b:b8:b8: a6:58:a7:19:16:5e:3f:b1:94:44:fe:d5:f1:2c:fb:39:95:5b: a9:82:30:21:11:3c:9c:55:52:d9:4b:21:53:89:26:80:6c:11: 22:ce:a3:e4:43:0d:6c:f9:d6:f2:91:a2:94:2f:2b:63:5f:64: aa:b7:af:57:82:a9:1d:16:78:de:51:4a:e8:f2:b0:3d:d9:a4: aa:16:f6:39:3a:be:cd:3f:cd:e4:9b:99:14:26:94:3d:42:a8: de:ad:68:38:e9:01:c4:17:69:68:37:ca:0a:58:b9:8d:d1:e9: 47:33:9d:14:7c:3c:79:5f:2c:b1:ca:9b:63:e4:ed:6f:48:56: 18:a1:48:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUwODIxMDMzMTM2WhcNMjUwODI4MDMzMTM2WjAYMRYwFAYD VQQDEw02OGE2OTMxOC0wOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVPA1OMXqIt7agaZiPhH0R818/W8LyX9s1Kwae+zBUE+o8SjQ+fBWA1J7pIW R027HmraW+TH1WALXZpGtBWlyNT8+gRi173YfRe+YfGO2LmBST2ClWdY3Zup9Uzr sjF3TODFqXxsofM8TDiE+Oeyvho9dTiiYHsnpAUSipVbhPSoz8V2LRyi7yCwXUBh nolNVQPbc44nZP/AzmZ6PFnPZQwjHvcnKyxBApJa0N4KTL1/dRle5cmQonrDAO8o 3foqFtrXW5trfeH9+ttwLAgmkIUXL4KpUn9HyJKpic0s5j1YX6W0YS2yLchMtnyA J4u6W6xdyf9+bb9t3MBI5nzp1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbgk+XC Q074IPPQ/hXd2MbRxIuEMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkGVzNVNeS9kUlqMaXhJhHtxYYOAcMBG3rYwERtFW6GBqJ7Dt0Aunl ifWevYJG6GRyPrjGCPIl71Z2PIV+jhuuUEI74wFyxIpodA2DLdy8O4oxAPSymOsD D5dRRGAHfGMa80vh9z90B+j/3lFh7O7hFH3O8j6fQMKS0laLuLimWKcZFl4/sZRE /tXxLPs5lVupgjAhETycVVLZSyFTiSaAbBEizqPkQw1s+dbykaKULytjX2Sqt69X gqkdFnjeUUro8rA92aSqFvY5Or7NP83km5kUJpQ9QqjerWg46QHEF2loN8oKWLmN 0elHM50UfDx5Xyyxyptj5O1vSFYYoUjV -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:18 2025 by rpki-client