$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: qdadlbFrpK0CSfXWuTACeJAhfeyYHm8ZlzkMIUCEFZk= Subject key identifier: E5:AB:DC:A1:D1:D8:CD:DD:38:EF:5D:DC:A2:E5:C6:46:FF:0C:62:5D Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: DE Signing time: Wed 17 Sep 2025 06:08:12 +0000 Manifest this update: Wed 17 Sep 2025 06:08:11 +0000 Manifest next update: Wed 24 Sep 2025 06:08:11 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: Gf4kSTqs2ceX5AGfWrLqRefvIlgDuFmKIJaFmzNQaR0=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Sep 17 06:08:11 2025 GMT Not After : Sep 24 06:08:11 2025 GMT Subject: CN=68ca504c-842e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:09:47:b8:3c:1c:3f:b7:90:85:79:dc:c4: 85:df:06:b4:2b:18:ab:57:4a:b1:1d:ef:27:e8:45: 54:1e:da:63:88:b7:bd:54:bb:83:3e:66:0e:2c:fb: 35:95:23:03:5c:d3:59:03:d8:07:32:3c:2f:f7:ae: bf:64:34:93:f3:0f:a8:f7:bd:1d:e9:67:2b:f4:ea: ba:ae:04:1b:1a:4b:2f:e8:ff:70:5c:35:57:86:2f: 5f:89:2a:50:03:b8:c7:6a:07:c0:e5:99:e5:66:5c: c8:c2:de:a6:b7:3a:36:d7:a6:47:93:98:ab:79:95: bf:3c:86:f2:19:f1:8a:0e:16:fa:05:f0:be:5b:7f: 58:e7:e0:58:6c:30:9a:80:03:90:32:6d:b3:fb:62: 51:e0:aa:31:d5:eb:26:c1:8b:8c:2a:d5:48:9f:b9: ee:6c:8c:6a:91:d1:55:b7:37:ad:fb:21:8b:cf:3b: b6:38:86:b5:c1:a4:ef:b9:7d:38:50:99:b1:f7:2c: e5:6a:78:da:a3:15:c9:60:f4:aa:d1:85:07:cd:4e: 35:b8:a8:96:c1:24:9f:f0:9c:4d:5d:9a:c5:65:a0: 8d:57:09:9d:bd:5c:2b:24:43:b1:db:f7:a5:2d:6d: 6d:5b:5c:27:63:62:cd:fe:c9:65:2a:70:28:d8:67: e7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AB:DC:A1:D1:D8:CD:DD:38:EF:5D:DC:A2:E5:C6:46:FF:0C:62:5D X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:89:41:a3:de:f5:70:31:ac:9e:b1:ff:5e:69:13:ce:cd:4c: 3e:9e:8e:85:21:0b:35:3a:84:a7:31:5f:a2:9b:9b:57:0d:4c: 6e:3a:75:d4:8f:fd:90:fe:bc:82:24:ea:72:5e:68:ab:fb:35: 71:02:e7:b7:85:88:4b:59:59:98:41:49:d0:8c:aa:d3:15:9f: 43:41:3a:86:cb:66:e5:63:21:1d:27:a9:a5:45:bb:eb:06:61: b2:37:3e:38:21:97:22:40:13:35:fe:c6:1f:0e:c8:79:bc:6c: b1:eb:14:60:3c:0b:09:1f:b9:26:e0:76:ec:6c:66:6e:23:31: 3f:20:b0:4a:4b:e4:66:ff:9f:dd:10:61:2b:35:ec:3b:96:73: 19:91:2f:94:75:fc:0b:6f:86:86:ae:68:58:8c:4b:24:3f:e1: eb:f2:ac:fd:74:7d:49:96:7e:f2:ba:03:fc:9a:2a:ba:1c:83: 2a:70:d6:a2:0f:62:86:f0:65:8e:3c:4a:67:8e:44:5b:ca:8c: 3f:ae:b4:cc:3e:84:de:d0:19:51:8b:21:c6:53:1c:31:cf:65: d7:23:09:14:d7:3f:e6:24:c8:9b:f0:fe:ca:98:68:bd:06:99: 1b:d1:14:ee:b7:42:3f:38:8b:5f:8e:a1:12:bf:a5:2a:28:76: db:51:6b:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjUwOTE3MDYwODExWhcNMjUwOTI0MDYwODExWjAYMRYwFAYD VQQDEw02OGNhNTA0Yy04NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YMJR7g8HD+3kIV53MSF3wa0KxirV0qxHe8n6EVUHtpjiLe9VLuDPmYOLPs1 lSMDXNNZA9gHMjwv966/ZDST8w+o970d6Wcr9Oq6rgQbGksv6P9wXDVXhi9fiSpQ A7jHagfA5ZnlZlzIwt6mtzo216ZHk5ireZW/PIbyGfGKDhb6BfC+W39Y5+BYbDCa gAOQMm2z+2JR4Kox1esmwYuMKtVIn7nubIxqkdFVtzet+yGLzzu2OIa1waTvuX04 UJmx9yzlanjaoxXJYPSq0YUHzU41uKiWwSSf8JxNXZrFZaCNVwmdvVwrJEOx2/el LW1tW1wnY2LN/sllKnAo2GfnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWr3KHR 2M3dOO9d3KLlxkb/DGJdMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHiUGj3vVwMayesf9eaRPOzUw+no6FIQs1OoSnMV+im5tXDUxuOnXU j/2Q/ryCJOpyXmir+zVxAue3hYhLWVmYQUnQjKrTFZ9DQTqGy2blYyEdJ6mlRbvr BmGyNz44IZciQBM1/sYfDsh5vGyx6xRgPAsJH7km4HbsbGZuIzE/ILBKS+Rm/5/d EGErNew7lnMZkS+UdfwLb4aGrmhYjEskP+Hr8qz9dH1Jln7yugP8miq6HIMqcNai D2KG8GWOPEpnjkRbyow/rrTMPoTe0BlRiyHGUxwxz2XXIwkU1z/mJMib8P7KmGi9 Bpkb0RTut0I/OItfjqESv6UqKHbbUWt+ -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:37 2025 by rpki-client