$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json) Hash identifier: lVtknTsnp0nWBFtp/R9oWyPLq8WQiGY1fC+uvcwL2J4= Subject key identifier: D1:1C:5C:C5:3A:63:26:95:4E:24:C6:83:88:98:49:EB:82:12:1F:0A Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft Manifest number: 0179 Signing time: Tue 02 Sep 2025 21:49:23 +0000 Manifest this update: Tue 02 Sep 2025 21:49:23 +0000 Manifest next update: Tue 09 Sep 2025 21:49:23 +0000 Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: HttcA+Z7ribi0y/wOnVQcUOQhhDPv031RGTV20zzRIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Validity Not Before: Sep 2 21:49:23 2025 GMT Not After : Sep 9 21:49:23 2025 GMT Subject: CN=68b76663-5d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:e7:6b:20:01:03:a2:bb:b8:bc:2d:a6:7a: fe:a0:2d:eb:2f:9d:bd:7d:19:88:85:3a:e0:22:c8: 58:3c:27:13:6d:87:61:5b:43:b3:6a:b6:3e:68:f6: b1:86:52:30:4f:2b:75:e8:95:ec:e6:22:7d:ef:70: e8:be:fa:1d:2b:e8:f3:8f:90:10:08:0b:03:ec:c8: 89:64:4d:1f:d3:75:41:61:34:fe:51:d7:89:d5:54: 00:91:f5:25:77:73:03:a4:7b:ef:aa:70:f0:c5:96: f7:a0:75:15:a5:cf:48:87:c4:3c:fd:ab:14:51:c7: e6:df:b6:91:7e:e7:8c:3c:25:e5:76:e0:9d:b1:7e: b9:ce:4a:79:1d:2d:31:db:9f:a7:7f:d7:04:b9:59: bb:b2:c1:bf:eb:f3:8b:1a:1f:43:36:ee:03:3f:43: 8f:6c:20:38:c2:63:7b:80:d7:5f:5a:44:eb:c0:da: 70:56:07:c7:89:63:fb:31:73:e5:af:d0:b3:85:1f: d1:74:15:99:d4:92:1e:00:48:49:aa:24:3f:b4:b1: dd:5a:e5:5e:7a:a0:02:90:59:d1:ba:84:f0:8c:99: 0f:1f:99:0e:ea:2a:ca:6c:7d:1a:4f:7b:26:b9:20: 04:c2:5f:bf:47:61:bf:2b:10:3d:ab:21:05:ed:5f: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:5C:C5:3A:63:26:95:4E:24:C6:83:88:98:49:EB:82:12:1F:0A X509v3 Authority Key Identifier: keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:60:91:ad:3e:5a:14:54:26:82:03:b4:63:3b:b6:d6:9f:67: b5:7e:08:15:3c:02:20:87:fc:50:c9:45:6e:04:35:f4:de:15: 50:c4:55:c2:3f:26:66:be:5f:fd:72:96:2a:13:11:69:5e:af: 10:7d:3e:cf:f4:30:52:6b:d5:eb:2f:65:50:a7:04:29:3a:d8: 25:5c:a0:39:08:43:b1:a0:c6:49:19:41:95:03:21:61:e6:89: 33:fe:b3:75:c4:81:00:d5:51:da:7d:4d:f8:f1:15:84:2e:a3: 3d:41:a7:5f:1f:cb:1d:f0:b8:bd:d7:a1:f2:a0:7e:6e:83:73: 12:0c:fb:62:a8:6a:c3:77:2f:76:c6:94:92:d2:71:93:ab:8c: f4:6c:4b:85:63:f4:ad:9e:56:6f:46:10:43:c0:55:09:f0:c5: 71:b0:68:a9:0a:2b:5e:94:f0:b5:0e:5b:3a:e9:5a:f2:b4:ab: 83:3b:e5:9a:33:43:49:18:20:00:52:a7:33:93:0a:3d:1a:49: bf:44:0f:2c:b7:31:c2:26:55:d5:07:af:62:b9:0a:c6:dc:2d: 5f:14:a9:4a:85:2c:a7:d7:9a:47:28:08:68:64:ed:53:6a:7f: 81:79:1c:77:2e:8d:09:4f:08:b1:47:42:c4:55:51:1a:31:08: d1:bf:a8:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKDI2RkVBMEM2NzdEREU3NDNDMkUwNzVFMUNFMDdBQjVC RDY2NjYzMjUwHhcNMjUwOTAyMjE0OTIzWhcNMjUwOTA5MjE0OTIzWjAYMRYwFAYD VQQDEw02OGI3NjY2My01ZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KPnayABA6K7uLwtpnr+oC3rL529fRmIhTrgIshYPCcTbYdhW0OzarY+aPax hlIwTyt16JXs5iJ973DovvodK+jzj5AQCAsD7MiJZE0f03VBYTT+UdeJ1VQAkfUl d3MDpHvvqnDwxZb3oHUVpc9Ih8Q8/asUUcfm37aRfueMPCXlduCdsX65zkp5HS0x 25+nf9cEuVm7ssG/6/OLGh9DNu4DP0OPbCA4wmN7gNdfWkTrwNpwVgfHiWP7MXPl r9CzhR/RdBWZ1JIeAEhJqiQ/tLHdWuVeeqACkFnRuoTwjJkPH5kO6irKbH0aT3sm uSAEwl+/R2G/KxA9qyEF7V/cJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEcXMU6 YyaVTiTGg4iYSeuCEh8KMB8GA1UdIwQYMBaAFCb+oMZ33edDwuB14c4Hq1vWZmMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi8xODc0QzRBNDQ4 NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUwUEM0SFhoemdlclc5Wm1Z eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p2Nmd4bmZkNTBQQzRIWGh6Z2VyVzlabVl5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi8xODc0QzRBNDQ4NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUw UEM0SFhoemdlclc5Wm1ZeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuYJGtPloUVCaCA7RjO7bWn2e1fggVPAIgh/xQyUVuBDX03hVQxFXC PyZmvl/9cpYqExFpXq8QfT7P9DBSa9XrL2VQpwQpOtglXKA5CEOxoMZJGUGVAyFh 5okz/rN1xIEA1VHafU348RWELqM9QadfH8sd8Li916HyoH5ug3MSDPtiqGrDdy92 xpSS0nGTq4z0bEuFY/StnlZvRhBDwFUJ8MVxsGipCitelPC1Dls66VrytKuDO+Wa M0NJGCAAUqczkwo9Gkm/RA8stzHCJlXVB69iuQrG3C1fFKlKhSyn15pHKAhoZO1T an+BeRx3Lo0JTwixR0LEVVEaMQjRv6hk -----END CERTIFICATE-----Generated at Thu Sep 4 14:06:17 2025 by rpki-client