$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: mdSg4vb6qrR1c2TJrUsDTR8Y9uDG32BQ83Z9XtZ8Wf0= Subject key identifier: 62:40:F1:27:9A:D6:69:81:E1:12:E9:F1:60:52:6B:EF:00:F3:EE:4F Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 3512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 34DF Signing time: Sun 24 Aug 2025 14:18:11 +0000 Manifest this update: Sun 24 Aug 2025 14:18:11 +0000 Manifest next update: Sun 31 Aug 2025 14:18:11 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: zVaUP51RXJfcZVKINtehhqbfl8wiEw3yDa0bOYThr7k=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: E8L7EMY++G+/jL4fto/6X8FIxPH0nU/qyOAGKr50fbg=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: cZP7pPe4Y/msfUjF/3Xl+aRlpqp1LPFsqoN3iYA504I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13586 (0x3512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Aug 24 14:18:11 2025 GMT Not After : Aug 31 14:18:11 2025 GMT Subject: CN=68ab1f23-bcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:0c:4b:4a:2a:b0:ab:f6:15:47:f3:4f:68: 0e:a3:78:0c:40:ab:c8:67:3f:3b:f1:09:dc:ec:f8: b8:b8:80:e0:6f:d2:35:2b:89:5c:ae:de:6c:fa:7f: a0:65:b2:ef:37:35:57:c6:01:67:69:ae:7a:6b:f5: 3b:79:74:a9:22:0f:3d:04:93:37:e5:0b:67:54:f8: 65:b0:8b:75:2e:67:47:76:b8:5d:90:c1:38:d4:5c: a0:7f:45:f6:89:d7:b4:c2:03:a4:7d:4e:1e:e8:ce: c2:e8:72:2c:c8:14:25:63:34:75:40:85:80:6c:fd: 72:20:91:52:b9:00:be:fb:c6:0c:ce:08:b7:2c:a7: 1d:3c:33:cb:ba:c6:19:72:e5:84:80:09:9e:5d:07: 93:9a:ed:1f:0f:3c:4b:1d:02:32:2c:8d:71:a5:1d: 5a:52:42:df:a7:40:c0:76:74:b1:73:6a:0e:3c:d1: 53:33:27:31:a8:37:93:25:5c:11:72:15:80:17:fc: f8:1d:ab:1b:91:f0:97:be:92:5f:a6:b6:73:0b:08: b8:20:28:76:ff:85:22:1a:e9:4f:fe:86:9c:1c:b5: b4:bf:80:97:dc:0d:19:f4:6c:c1:9e:d8:e6:8e:d0: 8f:e7:70:bc:e4:8c:83:a6:ce:fb:38:ec:da:3e:6b: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:F1:27:9A:D6:69:81:E1:12:E9:F1:60:52:6B:EF:00:F3:EE:4F X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:18:69:93:09:54:bd:20:1f:3e:37:2b:8b:d6:14:8f:e4:d2: 51:f3:9f:01:11:74:39:bf:8d:50:39:d4:41:fc:d5:97:7d:d0: 1b:d2:91:32:ef:17:4c:93:e5:53:26:0f:6c:13:af:9a:ef:32: 78:ba:8b:01:42:83:8c:3c:b0:42:38:d0:1b:ed:9c:ec:5b:c1: cf:66:5d:9c:82:a1:dc:dd:a9:a3:01:36:11:3d:9a:92:26:c4: ba:02:50:7b:92:ec:bb:89:a3:87:0c:1c:21:ef:f0:41:7c:a1: 72:3d:46:92:70:e5:a5:99:d3:77:db:b9:74:fc:5a:c6:28:aa: d9:65:fb:2c:c6:38:08:14:60:98:37:27:7b:ae:12:87:66:fd: 21:e0:92:b3:e5:d2:5b:db:45:89:56:96:ea:3e:d6:53:11:66: df:02:4b:7c:e9:12:63:10:14:53:e9:ea:b7:1b:25:c2:de:5e: 08:c9:8a:21:66:11:0b:7f:95:1f:72:d4:59:f2:0d:b6:dc:92: ec:b0:f1:4d:01:de:7d:0f:97:65:b9:15:c1:a8:e2:df:b2:2a: f6:63:d5:44:2c:f9:ef:b2:f7:30:fa:01:cf:65:a2:98:9d:03: 47:50:c6:b2:59:13:76:57:7d:75:5e:d5:ef:24:1a:b4:ce:91: cf:41:a4:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjUwODI0MTQxODExWhcNMjUwODMxMTQxODExWjAYMRYwFAYD VQQDEw02OGFiMWYyMy1iY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm04MS0oqsKv2FUfzT2gOo3gMQKvIZz878Qnc7Pi4uIDgb9I1K4lcrt5s+n+g ZbLvNzVXxgFnaa56a/U7eXSpIg89BJM35QtnVPhlsIt1LmdHdrhdkME41Fygf0X2 ide0wgOkfU4e6M7C6HIsyBQlYzR1QIWAbP1yIJFSuQC++8YMzgi3LKcdPDPLusYZ cuWEgAmeXQeTmu0fDzxLHQIyLI1xpR1aUkLfp0DAdnSxc2oOPNFTMycxqDeTJVwR chWAF/z4HasbkfCXvpJfprZzCwi4ICh2/4UiGulP/oacHLW0v4CX3A0Z9GzBntjm jtCP53C85IyDps77OOzaPmsoGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJA8Sea 1mmB4RLp8WBSa+8A8+5PMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzGGmTCVS9IB8+NyuL1hSP5NJR858BEXQ5v41QOdRB/NWXfdAb0pEy 7xdMk+VTJg9sE6+a7zJ4uosBQoOMPLBCONAb7ZzsW8HPZl2cgqHc3amjATYRPZqS JsS6AlB7kuy7iaOHDBwh7/BBfKFyPUaScOWlmdN327l0/FrGKKrZZfssxjgIFGCY Nyd7rhKHZv0h4JKz5dJb20WJVpbqPtZTEWbfAkt86RJjEBRT6eq3GyXC3l4IyYoh ZhELf5UfctRZ8g223JLssPFNAd59D5dluRXBqOLfsir2Y9VELPnvsvcw+gHPZaKY nQNHUMayWRN2V311XtXvJBq0zpHPQaQ9 -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:06 2025 by rpki-client