$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: pEuWWAzVAkleOlV1mgOQf6B8vTVHs9hUX1hr6XKiX1I= Subject key identifier: 52:CF:D2:4F:B0:F5:BF:A7:0D:71:A9:A8:DD:38:1A:BE:05:C3:E1:02 Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0A46 Signing time: Sun 24 Aug 2025 20:01:37 +0000 Manifest this update: Sun 24 Aug 2025 20:01:37 +0000 Manifest next update: Sun 31 Aug 2025 20:01:37 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: wkaUJVIKh5I4Zrk+mKYEMOkZAMUJT9NC5kd/8OgUvko=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Aug 24 20:01:37 2025 GMT Not After : Aug 31 20:01:37 2025 GMT Subject: CN=68ab6fa1-1070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:41:f6:66:83:65:b2:87:fd:d9:e7:90:14:bc: 68:4a:e9:88:18:b6:13:b7:d1:e8:b6:e0:b7:bd:e7: 0d:a9:0e:15:30:10:01:91:73:e1:19:46:00:d5:fd: 75:b1:06:96:cc:fd:c8:3c:8b:76:3c:4e:09:da:95: ff:c2:71:25:ab:0b:6d:d8:37:d7:7b:2f:48:87:fa: f4:21:a3:a2:c9:f3:33:1f:18:01:e3:50:1a:6a:e4: 3f:35:65:f7:61:b8:2e:9e:4f:e7:7b:93:b6:5a:4c: 79:2b:a0:a9:3a:8d:bc:b4:8c:e3:3c:8c:a5:eb:68: 30:4d:b9:76:10:b6:fa:6d:cc:57:8f:5d:1a:f7:5e: 78:23:ad:91:01:a8:9f:1f:cf:61:f5:f8:f4:b0:7a: b0:65:40:92:aa:6a:89:37:29:10:9e:4d:55:74:13: eb:df:bc:85:1e:b0:de:a3:21:bf:94:04:a4:8a:01: aa:be:b0:40:b3:e8:a8:eb:91:14:ee:f7:40:9d:e5: c2:16:a2:42:54:5d:2e:7a:43:eb:e2:d8:bb:f7:1d: 8b:6b:e0:f5:0d:3a:c0:ef:ee:1b:a2:53:4d:a8:ee: 74:9d:b7:41:a3:fc:6e:54:41:e1:74:41:99:f7:83: 7b:a2:cc:92:ed:c8:f2:7a:f3:fd:66:b1:70:1f:be: ec:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CF:D2:4F:B0:F5:BF:A7:0D:71:A9:A8:DD:38:1A:BE:05:C3:E1:02 X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:91:8a:c7:60:4c:59:c2:51:07:50:c1:3a:7d:e6:cc:3d:01: 09:c5:bf:0b:61:09:9a:ed:96:48:58:59:84:b6:00:c9:e3:dd: bb:a3:a2:38:f1:15:14:d5:74:a0:ff:c9:fc:3c:4c:79:fd:70: a3:87:95:df:22:07:95:3e:4a:10:dc:18:7e:e8:3c:7a:82:50: aa:7f:42:33:47:b9:92:67:75:9a:15:b2:64:de:e1:db:46:9d: f5:60:b5:38:f9:e5:8f:2c:dd:a8:c6:02:f6:b8:b0:ff:79:95: 43:e5:31:21:a7:6c:e8:ac:fa:0b:e1:27:d5:8e:c4:c5:39:b0: 0d:0c:bf:99:00:d9:e9:dd:0f:f8:92:5e:32:6e:c1:36:8f:01: 23:44:5e:15:fe:ee:ed:ea:00:2a:bd:59:a5:30:69:7f:80:60: e4:a0:92:f0:32:3a:fa:53:de:52:8b:47:a1:2a:0a:b6:73:df: 85:c3:21:b4:2c:47:44:49:20:d3:d3:c8:f0:19:d5:16:80:1c: 63:52:11:55:8c:cc:34:d5:80:7a:f7:54:d1:43:55:57:b1:0b: 6b:2e:1e:af:64:d4:57:ed:89:10:27:e9:cc:fc:30:70:1b:d3: 87:e5:8f:43:b4:f8:92:63:1f:b1:71:16:bb:98:8c:26:aa:98: 21:f4:69:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjUwODI0MjAwMTM3WhcNMjUwODMxMjAwMTM3WjAYMRYwFAYD VQQDEw02OGFiNmZhMS0xMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80H2ZoNlsof92eeQFLxoSumIGLYTt9HotuC3vecNqQ4VMBABkXPhGUYA1f11 sQaWzP3IPIt2PE4J2pX/wnElqwtt2DfXey9Ih/r0IaOiyfMzHxgB41AaauQ/NWX3 Ybgunk/ne5O2Wkx5K6CpOo28tIzjPIyl62gwTbl2ELb6bcxXj10a9154I62RAaif H89h9fj0sHqwZUCSqmqJNykQnk1VdBPr37yFHrDeoyG/lASkigGqvrBAs+io65EU 7vdAneXCFqJCVF0uekPr4ti79x2La+D1DTrA7+4bolNNqO50nbdBo/xuVEHhdEGZ 94N7osyS7cjyevP9ZrFwH77s1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLP0k+w 9b+nDXGpqN04Gr4Fw+ECMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfkYrHYExZwlEHUME6febMPQEJxb8LYQma7ZZIWFmEtgDJ4927o6I4 8RUU1XSg/8n8PEx5/XCjh5XfIgeVPkoQ3Bh+6Dx6glCqf0IzR7mSZ3WaFbJk3uHb Rp31YLU4+eWPLN2oxgL2uLD/eZVD5TEhp2zorPoL4SfVjsTFObANDL+ZANnp3Q/4 kl4ybsE2jwEjRF4V/u7t6gAqvVmlMGl/gGDkoJLwMjr6U95Si0ehKgq2c9+FwyG0 LEdESSDT08jwGdUWgBxjUhFVjMw01YB691TRQ1VXsQtrLh6vZNRX7YkQJ+nM/DBw G9OH5Y9DtPiSYx+xcRa7mIwmqpgh9GmJ -----END CERTIFICATE-----Generated at Sun Aug 24 21:31:12 2025 by rpki-client