$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: mQp2zoXYJek3uAsrFk3qLAWp4E1ubOK3hb6R3H0VRS4= Subject key identifier: 1D:61:FA:3E:6D:C8:56:2E:B2:20:19:32:4C:65:CA:48:97:FD:71:B4 Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0A58 Signing time: Wed 20 Aug 2025 19:46:08 +0000 Manifest this update: Wed 20 Aug 2025 19:46:07 +0000 Manifest next update: Wed 27 Aug 2025 19:46:07 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: 0zSiQhXSNPiQZG/AANPo8AYmOdHRpoqmofvachHlPa4=) 2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: r0RKRgF0/rDGEDAesBgC29Z43qYpMBwutyEjFMfF0YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Aug 20 19:46:07 2025 GMT Not After : Aug 27 19:46:07 2025 GMT Subject: CN=68a625ff-6ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2a:8b:c2:ff:e2:27:38:e4:83:2a:1c:e8:fe: 61:9c:43:e3:a7:9e:51:33:65:e6:20:97:5f:1e:67: 6b:b8:cd:0e:56:3b:74:51:3d:3e:9c:7b:7d:72:32: c3:6c:50:97:6d:6f:37:5d:72:02:85:90:58:3b:e4: 8c:46:65:da:93:a9:ec:66:bb:67:17:18:38:1a:ff: a5:c2:c2:cb:82:2d:e7:e4:ed:bc:30:cd:3d:cc:d4: 78:fe:ad:0a:29:50:a9:bc:ec:85:20:db:26:79:5d: cc:cb:49:09:aa:58:00:79:ef:9d:9f:c2:29:40:28: 46:c1:ef:ca:e1:e8:c2:c2:cb:81:f9:50:00:ce:e1: 17:41:f3:f7:24:f0:1c:22:7e:4a:92:43:18:a5:bc: 0f:16:09:9c:c8:8e:70:3b:43:25:28:5a:a4:76:e0: d4:a3:2b:dc:e1:69:f6:b5:56:9d:de:1a:90:ed:31: b6:30:3e:04:27:75:45:86:71:84:f7:51:f8:d0:48: 91:d1:1a:6c:ee:a5:82:82:c4:6a:c9:0d:92:bb:cc: 9f:7d:9d:8c:1d:96:96:31:31:40:44:20:c3:32:7b: 7e:b4:c3:9a:11:81:32:cc:17:f3:42:e6:bd:c7:52: 16:c6:60:a1:e6:6f:a7:b4:4b:ee:e0:79:58:7f:3b: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:61:FA:3E:6D:C8:56:2E:B2:20:19:32:4C:65:CA:48:97:FD:71:B4 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:61:b3:37:e4:c9:e8:c2:b4:91:95:23:03:a4:98:9e:50:31: 3b:77:d2:4e:c1:b1:5b:96:36:bc:b3:b5:77:ea:49:f7:a7:85: 0f:a8:3c:ff:b4:8a:c1:8d:f8:f7:b7:c4:65:06:eb:3a:b6:21: f5:a3:1f:64:8c:c6:5f:43:e0:3c:55:23:41:a0:80:55:55:8a: 6b:43:8a:34:43:af:25:11:8a:c3:b7:e8:d5:ba:d8:bb:e2:f5: f4:a7:be:d9:5f:73:52:83:38:f6:6c:e0:19:1e:5c:8c:b2:d3: b7:c5:60:21:3d:11:85:e4:02:bb:d4:68:7d:93:1a:77:c9:9c: a7:09:a8:5f:21:fe:3a:99:3b:e8:56:e6:b3:9a:bf:2e:10:ff: ac:06:07:4e:19:f5:d7:4a:1f:9f:66:0a:48:fa:ab:a0:15:50: fc:b2:ab:1e:13:cb:f3:dd:65:a6:5f:b7:90:bd:2e:f2:c9:d9: 8e:4f:1d:8d:49:a7:36:53:9b:4e:49:d0:e1:04:34:07:37:1c: ee:23:fe:39:e4:d3:19:69:27:06:8d:74:2e:b0:ad:09:42:c9: 95:72:df:c1:78:6f:a5:23:91:dc:f6:b6:99:54:0a:16:7a:8e: e2:39:1b:ce:85:10:98:0f:97:0d:2f:29:75:e6:ef:67:8c:6a: 3d:ab:3f:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUwODIwMTk0NjA3WhcNMjUwODI3MTk0NjA3WjAYMRYwFAYD VQQDEw02OGE2MjVmZi02ZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iqLwv/iJzjkgyoc6P5hnEPjp55RM2XmIJdfHmdruM0OVjt0UT0+nHt9cjLD bFCXbW83XXIChZBYO+SMRmXak6nsZrtnFxg4Gv+lwsLLgi3n5O28MM09zNR4/q0K KVCpvOyFINsmeV3My0kJqlgAee+dn8IpQChGwe/K4ejCwsuB+VAAzuEXQfP3JPAc In5KkkMYpbwPFgmcyI5wO0MlKFqkduDUoyvc4Wn2tVad3hqQ7TG2MD4EJ3VFhnGE 91H40EiR0Rps7qWCgsRqyQ2Su8yffZ2MHZaWMTFARCDDMnt+tMOaEYEyzBfzQua9 x1IWxmCh5m+ntEvu4HlYfztwsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1h+j5t yFYusiAZMkxlykiX/XG0MB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpYbM35MnowrSRlSMDpJieUDE7d9JOwbFblja8s7V36kn3p4UPqDz/ tIrBjfj3t8RlBus6tiH1ox9kjMZfQ+A8VSNBoIBVVYprQ4o0Q68lEYrDt+jVuti7 4vX0p77ZX3NSgzj2bOAZHlyMstO3xWAhPRGF5AK71Gh9kxp3yZynCahfIf46mTvo Vuazmr8uEP+sBgdOGfXXSh+fZgpI+qugFVD8sqseE8vz3WWmX7eQvS7yydmOTx2N Sac2U5tOSdDhBDQHNxzuI/455NMZaScGjXQusK0JQsmVct/BeG+lI5Hc9raZVAoW eo7iORvOhRCYD5cNLyl15u9njGo9qz9h -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:42 2025 by rpki-client