$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: 2zJ97Gc3nxLWSFhlyMrjTNrkS7mZQUM1GR5f41aX7tg= Subject key identifier: 2A:4E:8C:5A:BF:40:AE:B7:11:AC:A4:B2:60:9E:08:82:49:3B:2A:06 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1CDC Signing time: Tue 16 Sep 2025 16:14:55 +0000 Manifest this update: Tue 16 Sep 2025 16:14:55 +0000 Manifest next update: Tue 23 Sep 2025 16:14:55 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: aI4gmxgINtk/M0EnJfew611QunDUd3vnwiIjYqGAmzc=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7420 (0x1cfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Sep 16 16:14:55 2025 GMT Not After : Sep 23 16:14:55 2025 GMT Subject: CN=68c98cff-9bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:37:11:8a:24:b5:7e:cd:0b:be:d4:0a:58: bc:f1:56:d8:5f:a4:87:89:25:80:89:d0:5d:43:d2: ea:33:e4:93:47:0c:23:ad:0e:d0:10:54:a3:74:cf: 10:f9:e1:75:f6:e5:4b:22:eb:dd:29:65:51:95:8c: c3:29:0f:7c:e3:73:4c:e0:2f:fd:c3:3b:95:46:8b: 3a:c5:db:18:0c:25:68:78:1a:98:c7:c4:33:36:23: 5c:5c:a5:ee:c6:a4:bd:1d:a2:7a:d3:39:ee:33:ad: 49:8f:c9:c1:59:75:7f:11:06:7c:9d:9a:6b:fc:8f: 15:f4:6d:d9:a9:51:38:6e:e8:ee:cb:57:af:39:47: 59:79:d5:03:9d:74:15:62:cf:dc:db:24:a1:52:c4: e2:6d:78:31:ae:cf:2f:3b:c3:02:30:a8:31:86:06: 0d:e3:f9:47:c7:38:a1:97:16:73:cd:c7:9b:8c:2c: f0:f0:23:23:3b:d7:6d:03:71:b4:e3:2d:12:41:68: 26:28:ce:49:e3:8f:d0:fa:c3:6f:fa:17:df:85:d9: 9b:ef:99:18:8d:d0:e2:ca:96:2a:18:11:93:07:98: 7b:8e:b9:80:96:8a:2f:54:19:cf:7f:83:c2:8f:67: 00:1e:23:5d:a6:e7:0a:72:b4:f5:9c:53:15:b2:7b: d6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4E:8C:5A:BF:40:AE:B7:11:AC:A4:B2:60:9E:08:82:49:3B:2A:06 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:72:d9:ed:c9:64:6a:96:70:1a:ed:69:50:a1:13:38:53:26: c3:3e:26:75:1c:7d:dc:4b:d0:62:1c:ab:70:95:5d:62:77:ae: 79:20:54:85:b1:85:9c:11:68:96:05:83:e0:97:8c:15:2f:78: 54:2b:8e:ac:cb:bf:0b:34:36:d1:0d:62:68:76:29:49:0e:56: 9f:a9:3e:44:a8:9e:d4:01:50:d6:d8:81:06:a7:e8:ff:7a:f6: 8a:95:84:d7:74:71:5c:86:8e:3a:15:98:c0:74:20:29:d5:10: 43:1b:5e:f3:9d:aa:07:4d:e7:7f:4e:c6:88:d6:da:a5:24:15: ab:66:67:49:3f:9f:c0:d0:b7:9e:0e:3e:76:16:fe:9e:93:0f: 99:a6:35:a1:48:f0:d0:89:c5:ab:ae:49:f4:52:9a:27:bf:68: 73:c7:25:46:13:88:07:86:4a:f1:26:f8:4d:82:4a:7f:c2:eb: c5:53:4f:e1:71:da:38:00:b3:ae:ad:b1:30:37:48:8a:03:3a: 90:0f:8e:de:f4:e7:d9:5d:da:da:c5:db:98:78:f5:92:29:5e: 85:43:3a:c1:5d:b5:42:b2:33:0d:73:73:91:38:65:38:60:12: c2:4d:2c:ef:52:74:7c:3e:c4:48:ff:1d:43:dc:23:17:76:3c: 1a:af:65:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwOTE2MTYxNDU1WhcNMjUwOTIzMTYxNDU1WjAYMRYwFAYD VQQDEw02OGM5OGNmZi05YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3I83EYoktX7NC77UCli88VbYX6SHiSWAidBdQ9LqM+STRwwjrQ7QEFSjdM8Q +eF19uVLIuvdKWVRlYzDKQ9843NM4C/9wzuVRos6xdsYDCVoeBqYx8QzNiNcXKXu xqS9HaJ60znuM61Jj8nBWXV/EQZ8nZpr/I8V9G3ZqVE4bujuy1evOUdZedUDnXQV Ys/c2yShUsTibXgxrs8vO8MCMKgxhgYN4/lHxzihlxZzzcebjCzw8CMjO9dtA3G0 4y0SQWgmKM5J44/Q+sNv+hffhdmb75kYjdDiypYqGBGTB5h7jrmAloovVBnPf4PC j2cAHiNdpucKcrT1nFMVsnvWQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpOjFq/ QK63EayksmCeCIJJOyoGMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXctntyWRqlnAa7WlQoRM4UybDPiZ1HH3cS9BiHKtwlV1id655IFSF sYWcEWiWBYPgl4wVL3hUK46sy78LNDbRDWJodilJDlafqT5EqJ7UAVDW2IEGp+j/ evaKlYTXdHFcho46FZjAdCAp1RBDG17znaoHTed/TsaI1tqlJBWrZmdJP5/A0Lee Dj52Fv6ekw+ZpjWhSPDQicWrrkn0Uponv2hzxyVGE4gHhkrxJvhNgkp/wuvFU0/h cdo4ALOurbEwN0iKAzqQD47e9OfZXdraxduYePWSKV6FQzrBXbVCsjMNc3OROGU4 YBLCTSzvUnR8PsRI/x1D3CMXdjwar2Xr -----END CERTIFICATE-----Generated at Thu Sep 18 00:46:05 2025 by rpki-client