$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: 4aaGMtNOnvhMaC9qvkcrTrRuWh4FybwV3pkE4H7U6mo= Subject key identifier: 8E:9C:07:E1:DF:79:CB:0E:E8:64:0B:FA:94:8E:98:CF:A3:F8:99:15 Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0B2E Signing time: Wed 20 Aug 2025 19:21:06 +0000 Manifest this update: Wed 20 Aug 2025 19:21:05 +0000 Manifest next update: Wed 27 Aug 2025 19:21:05 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: OMJtFVasUrGlB7xqGtmrwYyeNn86PbNRSIxHwL1DAwU=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Aug 20 19:21:05 2025 GMT Not After : Aug 27 19:21:05 2025 GMT Subject: CN=68a62021-90aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:c6:d4:49:9a:0c:9d:c1:84:98:c5:53:c1: 55:12:4f:40:cb:82:9e:35:a2:71:b0:f6:09:48:60: e4:ed:0a:23:de:01:ac:81:12:23:3f:54:d4:b9:53: 2b:df:f8:17:9a:7e:6f:23:1e:1a:73:04:a4:0b:14: ac:d4:de:75:06:ab:7b:b6:c4:c8:17:8d:9d:92:6e: f4:fd:70:0d:67:93:d2:0a:6f:16:23:dc:79:17:62: 8e:55:14:ca:81:b5:73:dd:9d:e5:77:a4:a2:12:e7: 94:8c:b3:1a:ab:2b:22:3b:71:ab:4b:52:7d:ae:54: 53:bd:6c:47:1e:6e:ae:6e:57:83:cc:73:9f:d7:1b: f8:eb:4a:a3:ae:5c:60:ff:a8:10:e4:49:14:11:62: cd:1c:96:0c:96:7c:f1:a6:e4:ab:55:4b:21:bb:d3: 88:e8:5a:56:b9:6f:ff:70:61:49:43:1a:8f:d7:59: 1e:16:16:14:4b:0c:d3:3f:05:c8:44:53:e3:cc:c0: a6:d0:e5:8c:37:22:d1:55:15:64:ee:75:25:df:df: d3:ee:cb:3f:c1:2d:c7:2b:fb:61:f1:ac:04:7f:35: f6:e7:f2:df:ce:26:bd:40:20:89:03:f4:df:39:51: 2c:ad:d0:54:77:55:9d:0b:c6:ec:bd:97:2c:66:92: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:07:E1:DF:79:CB:0E:E8:64:0B:FA:94:8E:98:CF:A3:F8:99:15 X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:e9:5b:04:f8:8d:c2:7d:69:88:f6:15:4e:68:6a:f8:df:d3: 6d:7b:eb:e9:1a:04:42:71:49:00:fd:29:9f:5a:b9:0b:ab:18: e2:67:0f:f8:e8:be:2b:59:ef:94:4e:4f:b0:34:87:52:20:16: 16:3c:99:6f:25:fb:09:38:9f:c0:80:0e:85:15:c6:b9:7f:af: 33:83:b4:e2:c9:1e:81:f7:c8:f3:2d:78:45:62:15:a4:47:70: 8d:b0:bb:e5:f6:3e:a8:07:6a:be:95:8b:4d:25:f2:a7:bd:66: 53:dd:f5:9d:09:4f:93:2a:17:3a:36:28:a2:c9:02:68:10:e7: 00:21:c1:7f:fc:8b:da:35:3c:f2:84:44:4d:32:52:9a:9f:6b: 99:a4:ce:98:06:56:58:f1:5d:76:a2:c8:a0:87:ca:a3:ed:45: ea:98:19:5f:7b:3f:05:0c:73:e5:05:e1:b7:b5:9d:3a:8f:1d: 8c:ed:e3:ae:a1:98:cd:12:a4:4b:aa:94:fd:9d:fe:a5:75:3a: 99:83:da:2f:8f:56:50:bd:46:16:d9:86:33:33:76:53:f8:f9: b1:0b:54:c2:17:67:56:a3:a9:c4:10:7f:3c:9e:9d:77:9f:2d: 72:32:80:d3:cb:8d:62:85:56:f1:0b:d7:76:a8:15:26:1f:db: d6:9d:00:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUwODIwMTkyMTA1WhcNMjUwODI3MTkyMTA1WjAYMRYwFAYD VQQDEw02OGE2MjAyMS05MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoULG1EmaDJ3BhJjFU8FVEk9Ay4KeNaJxsPYJSGDk7Qoj3gGsgRIjP1TUuVMr 3/gXmn5vIx4acwSkCxSs1N51Bqt7tsTIF42dkm70/XANZ5PSCm8WI9x5F2KOVRTK gbVz3Z3ld6SiEueUjLMaqysiO3GrS1J9rlRTvWxHHm6ubleDzHOf1xv460qjrlxg /6gQ5EkUEWLNHJYMlnzxpuSrVUshu9OI6FpWuW//cGFJQxqP11keFhYUSwzTPwXI RFPjzMCm0OWMNyLRVRVk7nUl39/T7ss/wS3HK/th8awEfzX25/Lfzia9QCCJA/Tf OVEsrdBUd1WdC8bsvZcsZpLkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6cB+Hf ecsO6GQL+pSOmM+j+JkVMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC46VsE+I3CfWmI9hVOaGr439Nte+vpGgRCcUkA/SmfWrkLqxjiZw/4 6L4rWe+UTk+wNIdSIBYWPJlvJfsJOJ/AgA6FFca5f68zg7TiyR6B98jzLXhFYhWk R3CNsLvl9j6oB2q+lYtNJfKnvWZT3fWdCU+TKhc6NiiiyQJoEOcAIcF//IvaNTzy hERNMlKan2uZpM6YBlZY8V12osigh8qj7UXqmBlfez8FDHPlBeG3tZ06jx2M7eOu oZjNEqRLqpT9nf6ldTqZg9ovj1ZQvUYW2YYzM3ZT+PmxC1TCF2dWo6nEEH88np13 ny1yMoDTy41ihVbxC9d2qBUmH9vWnQAk -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:49 2025 by rpki-client