$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: dbw5rWHgNkeedGtw8sToKewHEhkRAr4/5FnXavYSZhA= Subject key identifier: 37:F0:39:B3:08:57:DA:05:1C:3C:09:06:3D:D3:CE:B5:39:83:80:43 Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 04F1 Signing time: Fri 19 Sep 2025 00:03:11 +0000 Manifest this update: Fri 19 Sep 2025 00:03:10 +0000 Manifest next update: Fri 26 Sep 2025 00:03:10 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: zGCbdOYEUmmZXo4vb1JW3YhgbPQIUzjdvhaa3/mtRfM=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: Sep 19 00:03:10 2025 GMT Not After : Sep 26 00:03:10 2025 GMT Subject: CN=68cc9dbf-2d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:30:07:9e:13:a9:d0:31:76:8d:b0:ea:86:fb: 0a:e6:55:79:63:9b:bf:8d:4e:0a:89:a7:31:9b:d9: 49:ac:6f:20:16:c1:bd:ce:bf:8e:4c:6c:7d:63:9b: 78:37:84:2e:67:1f:ac:9b:a3:88:84:11:7b:9c:d3: 2d:6b:d3:18:a8:c9:5b:b7:78:96:31:68:46:1a:89: a3:4a:1f:26:7f:e6:47:61:02:e9:81:46:6c:c5:a5: e1:10:e9:8d:02:dd:a5:7e:20:22:ce:52:a9:ad:0b: 9a:dc:c8:ff:3c:31:ba:a7:2f:6a:0e:0f:fa:14:f1: 1f:a6:c3:31:02:9e:a3:32:f7:3d:0a:17:74:24:62: 17:96:b0:0e:70:f4:fb:60:e4:5d:b2:b4:7c:97:d8: 48:00:ad:e4:33:1f:52:7e:14:7f:8e:15:5c:19:c1: 48:85:71:ac:a1:bf:a9:38:9a:a1:e5:3a:59:d8:44: 96:79:ba:1d:64:89:94:77:d5:f8:3e:4f:4f:1b:94: 7c:1d:dc:08:99:55:e6:d2:35:24:44:0f:82:fc:53: ed:6b:8f:24:6c:b4:57:25:4e:5d:5a:b8:fa:27:4d: d9:9c:34:7b:be:69:d6:f2:98:a3:73:45:a5:e8:7b: 11:f2:ac:ab:e6:1c:32:0f:4a:c2:dd:f8:fa:85:84: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F0:39:B3:08:57:DA:05:1C:3C:09:06:3D:D3:CE:B5:39:83:80:43 X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:09:78:a8:fa:5f:4d:86:a4:9f:6f:07:ed:ef:2a:a1:64:40: 83:99:94:d2:71:02:a7:8a:7f:29:63:91:00:8b:c5:b0:55:20: eb:1a:6b:07:b5:b2:bb:b5:97:6c:72:e8:ad:c9:4b:6e:a5:31: 2d:4d:3a:e9:6c:d3:75:61:20:29:55:95:b1:98:75:f8:11:8b: f8:d1:98:22:0d:74:21:0f:af:fe:70:e9:7e:06:ce:e0:b0:36: 53:28:5b:af:d8:84:f1:41:fe:35:c4:97:a5:0b:9e:2c:75:cd: 3a:87:7a:1e:90:df:8b:61:7e:56:72:c6:4f:cc:f5:21:80:2b: 4b:06:3e:30:c8:ec:a9:71:d6:d1:97:6e:a3:c6:cf:0e:bc:83: f6:56:80:8f:ec:ca:74:8f:cf:54:64:8d:4e:60:44:0f:ab:66: ba:8c:60:37:2c:ea:1b:d0:d6:74:84:44:02:01:17:b9:98:51: f5:58:1c:d9:6a:c0:63:33:c3:76:e8:84:9d:31:e4:ba:49:84: d6:26:01:37:a7:2e:05:43:3e:3d:d2:2d:ef:c5:0b:03:3c:71: ad:7a:28:11:8e:b5:63:30:d8:41:92:36:f9:9a:cb:6f:88:cd: 92:c5:1f:d0:56:50:2e:97:45:c5:19:05:87:b3:61:10:99:fb: 57:84:d0:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUwOTE5MDAwMzEwWhcNMjUwOTI2MDAwMzEwWjAYMRYwFAYD VQQDEw02OGNjOWRiZi0yZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zAHnhOp0DF2jbDqhvsK5lV5Y5u/jU4Kiacxm9lJrG8gFsG9zr+OTGx9Y5t4 N4QuZx+sm6OIhBF7nNMta9MYqMlbt3iWMWhGGomjSh8mf+ZHYQLpgUZsxaXhEOmN At2lfiAizlKprQua3Mj/PDG6py9qDg/6FPEfpsMxAp6jMvc9Chd0JGIXlrAOcPT7 YORdsrR8l9hIAK3kMx9SfhR/jhVcGcFIhXGsob+pOJqh5TpZ2ESWebodZImUd9X4 Pk9PG5R8HdwImVXm0jUkRA+C/FPta48kbLRXJU5dWrj6J03ZnDR7vmnW8pijc0Wl 6HsR8qyr5hwyD0rC3fj6hYSSTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfwObMI V9oFHDwJBj3TzrU5g4BDMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuCXio+l9NhqSfbwft7yqhZECDmZTScQKnin8pY5EAi8WwVSDrGmsH tbK7tZdscuityUtupTEtTTrpbNN1YSApVZWxmHX4EYv40ZgiDXQhD6/+cOl+Bs7g sDZTKFuv2ITxQf41xJelC54sdc06h3oekN+LYX5WcsZPzPUhgCtLBj4wyOypcdbR l26jxs8OvIP2VoCP7Mp0j89UZI1OYEQPq2a6jGA3LOob0NZ0hEQCARe5mFH1WBzZ asBjM8N26ISdMeS6SYTWJgE3py4FQz490i3vxQsDPHGteigRjrVjMNhBkjb5mstv iM2SxR/QVlAul0XFGQWHs2EQmftXhNBd -----END CERTIFICATE-----Generated at Fri Sep 19 02:33:10 2025 by rpki-client