$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft File: RJUXO9LCk43jBnfP3ec80xuKJnY.mft (raw, json) Hash identifier: 4WkbGdjzIL7mEGriFBnAyRLfiWyWEuOT3axyMHtvNm8= Subject key identifier: 5F:D9:F1:BA:23:D1:69:49:5D:81:36:CF:93:B0:04:6D:21:2E:BB:AC Authority key identifier: 44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76 Certificate issuer: /CN=A91A5098/serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft Manifest number: 80 Signing time: Sat 06 Sep 2025 16:11:15 +0000 Manifest this update: Sat 06 Sep 2025 16:11:15 +0000 Manifest next update: Sat 13 Sep 2025 16:11:15 +0000 Files and hashes: 1: RJUXO9LCk43jBnfP3ec80xuKJnY.crl (hash: VnhVk6RSDqzwpIG/Rgcj952/LPTGF39HTKKcSItQQ5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676 Validity Not Before: Sep 6 16:11:15 2025 GMT Not After : Sep 13 16:11:15 2025 GMT Subject: CN=68bc5d23-112f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:fc:4a:f0:84:bd:f1:0c:78:46:47:23:81: 1f:2a:d4:73:c3:25:7f:1c:85:05:a8:45:c4:b0:61: a6:e4:51:a4:3f:a6:4f:82:84:3f:37:bb:6b:a9:86: 26:55:c9:6d:d8:5b:b4:82:e7:1d:b4:a3:eb:73:02: f9:c9:f2:b7:fc:8a:b1:fb:87:42:90:64:2d:dd:d8: f5:08:59:dd:c6:fe:45:f3:b7:a9:3d:cf:8b:22:74: 7c:27:e2:b4:4c:ed:d6:29:36:b7:d5:0a:84:53:a8: 8b:8c:f9:f3:56:91:4d:c9:25:3a:ac:32:74:b6:14: 30:10:e8:78:d3:f2:02:00:a6:3a:8c:93:ee:5a:f3: 32:6d:92:fc:e4:75:e5:aa:63:58:ae:19:a5:a8:5f: fd:cd:30:e8:4c:64:61:94:2a:8a:ce:2d:77:5b:82: 5f:98:c9:7e:3e:22:b6:78:49:c7:60:e8:72:92:db: 3d:cc:39:be:5a:ad:ca:f0:74:bc:8a:67:e1:9a:87: 71:5a:d0:b8:86:93:3f:7d:32:9d:4c:dc:ca:50:95: 11:56:84:34:06:2d:c1:18:ac:65:a0:98:47:43:27: db:77:e8:41:4f:67:95:27:38:2e:97:7d:0b:66:f9: a3:0f:27:52:6c:81:fe:27:87:d0:4d:7f:90:73:b8: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:F1:BA:23:D1:69:49:5D:81:36:CF:93:B0:04:6D:21:2E:BB:AC X509v3 Authority Key Identifier: keyid:44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:90:e3:de:24:15:b1:d5:79:4e:7a:72:de:cd:11:43:e4:63: bf:30:9c:f7:b6:03:3e:21:06:ac:62:c2:89:4c:23:b6:ef:81: d1:9e:f8:75:d1:a4:20:0f:08:f0:4c:dc:04:95:44:b3:e1:98: 0c:9f:53:f6:79:f0:a4:7e:4d:e2:59:1c:f3:42:4b:70:6d:9f: 55:2f:d5:d1:8c:60:f0:97:a4:45:ab:97:4c:27:50:eb:64:73: 4f:ea:35:2f:e2:89:f3:28:ce:9e:cd:61:56:40:11:bc:3c:c7: 37:da:18:1a:62:ad:62:d5:94:ed:a8:08:4b:99:99:1e:c5:ff: 8a:ca:5c:84:ab:36:4d:16:e7:7d:ce:33:7e:ae:25:bd:76:22: e8:ff:93:16:be:c7:f9:a7:ac:49:7e:30:fb:f9:04:17:a9:5e: bb:b5:8f:70:cc:d8:c8:33:a4:78:fd:d3:9c:a0:7d:b2:f0:b1: 63:c1:27:e2:ed:f6:de:0c:44:3b:7f:a2:31:64:fe:0c:06:47: ae:66:df:06:92:cc:6f:83:1b:fd:f6:65:3a:e7:26:48:d4:b5: b3:1b:85:72:92:ac:6f:90:34:1b:5b:66:a7:83:0e:15:45:ed: c4:8c:ca:1d:c0:0d:03:24:b0:ba:45:37:ae:d7:49:c4:6c:13: 93:e8:35:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDQ0OTUxNzNCRDJDMjkzOERFMzA2NzdDRkRERTczQ0Qz MUI4QTI2NzYwHhcNMjUwOTA2MTYxMTE1WhcNMjUwOTEzMTYxMTE1WjAYMRYwFAYD VQQDEw02OGJjNWQyMy0xMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+D8SvCEvfEMeEZHI4EfKtRzwyV/HIUFqEXEsGGm5FGkP6ZPgoQ/N7trqYYm Vclt2Fu0gucdtKPrcwL5yfK3/Iqx+4dCkGQt3dj1CFndxv5F87epPc+LInR8J+K0 TO3WKTa31QqEU6iLjPnzVpFNySU6rDJ0thQwEOh40/ICAKY6jJPuWvMybZL85HXl qmNYrhmlqF/9zTDoTGRhlCqKzi13W4JfmMl+PiK2eEnHYOhykts9zDm+Wq3K8HS8 imfhmodxWtC4hpM/fTKdTNzKUJURVoQ0Bi3BGKxloJhHQyfbd+hBT2eVJzgul30L ZvmjDydSbIH+J4fQTX+Qc7gHLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/Z8boj 0WlJXYE2z5OwBG0hLrusMB8GA1UdIwQYMBaAFESVFzvSwpON4wZ3z93nPNMbiiZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC8yMjBCMTcyOENC QzIxMUVGQTMyNDY1NzNDNEY5QUUwMi9SSlVYTzlMQ2s0M2pCbmZQM2VjODB4dUtK blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JKVVhPOUxDazQzakJuZlAzZWM4MHh1S0puWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC8yMjBCMTcyOENCQzIxMUVGQTMyNDY1NzNDNEY5QUUwMi9SSlVYTzlMQ2s0 M2pCbmZQM2VjODB4dUtKblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbkOPeJBWx1XlOenLezRFD5GO/MJz3tgM+IQasYsKJTCO274HRnvh1 0aQgDwjwTNwElUSz4ZgMn1P2efCkfk3iWRzzQktwbZ9VL9XRjGDwl6RFq5dMJ1Dr ZHNP6jUv4onzKM6ezWFWQBG8PMc32hgaYq1i1ZTtqAhLmZkexf+KylyEqzZNFud9 zjN+riW9diLo/5MWvsf5p6xJfjD7+QQXqV67tY9wzNjIM6R4/dOcoH2y8LFjwSfi 7fbeDEQ7f6IxZP4MBkeuZt8Gksxvgxv99mU65yZI1LWzG4VykqxvkDQbW2angw4V Re3EjModwA0DJLC6RTeu10nEbBOT6DU3 -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:15 2025 by rpki-client