$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft File: jiZ6MV35Dplf9M1LLPj8TDMksts.mft (raw, json) Hash identifier: TJru4m85h/HI2wYpsIEjRfN090CSHFn+yl2EOYTcqos= Subject key identifier: CF:12:50:B7:FE:6F:41:1F:51:85:FB:3E:7D:43:1C:77:25:88:34:72 Authority key identifier: 8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB Certificate issuer: /CN=A91B35DF/serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft Manifest number: 7D Signing time: Wed 17 Sep 2025 07:28:46 +0000 Manifest this update: Wed 17 Sep 2025 07:28:45 +0000 Manifest next update: Wed 24 Sep 2025 07:28:45 +0000 Files and hashes: 1: jiZ6MV35Dplf9M1LLPj8TDMksts.crl (hash: gUPnuv8z4+DazJs3GMZLOrdOmrzYuXJvicN4MV7utnU=) 2: EF714C70D89F11EFA1D2E672C4F9AE02.roa (hash: TZSTn/V1Hb26UcW7zXgR6yK/030+S0LlzJiALzOU8GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35DF, serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB Validity Not Before: Sep 17 07:28:45 2025 GMT Not After : Sep 24 07:28:45 2025 GMT Subject: CN=68ca632e-fea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:33:4c:61:b6:9a:2d:59:8c:d6:eb:ff:2b:8a: 4b:38:06:96:7b:ef:e5:80:53:09:b8:d3:16:b0:33: 14:08:64:d7:1f:65:d2:61:4a:c2:c4:e4:67:81:81: 56:86:1e:17:e3:68:81:70:d7:a5:a1:71:90:c2:4c: f0:33:d5:67:f3:da:73:05:73:e8:c9:21:22:37:f5: 2f:ab:5d:0f:e0:27:e7:f2:54:04:6f:11:e4:bf:f4: 45:6e:88:78:f1:79:34:97:7e:af:8a:28:fc:f7:74: 1f:e8:51:b9:cd:0a:f6:40:f9:d9:69:87:a9:cb:a4: 91:ad:1f:1f:14:a8:07:86:03:f0:ab:dc:9d:41:14: 8e:6a:f6:fa:db:b1:b2:9d:60:d7:ab:73:3c:fb:5c: e2:5d:da:ad:38:37:00:2b:95:ac:0f:fa:8e:11:b3: 16:74:ed:17:71:df:6a:36:0e:32:ef:0d:d8:b4:06: d5:9d:ce:bb:21:b1:7c:f3:6a:8a:ac:50:63:1e:d0: fa:2e:47:2d:0e:50:e5:a0:80:b4:06:c1:83:b7:5a: da:da:29:29:30:52:57:72:13:cc:c4:c5:94:5c:d2: 9c:e4:d7:59:67:53:1f:6a:d9:ca:9e:c9:22:c8:d5: ef:54:7d:5e:96:d9:40:91:6d:f9:ad:bd:84:27:bc: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:12:50:B7:FE:6F:41:1F:51:85:FB:3E:7D:43:1C:77:25:88:34:72 X509v3 Authority Key Identifier: keyid:8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e8:87:6a:5e:d5:a3:4e:f7:02:f0:a1:65:b4:af:bd:3b:28: f4:7d:64:e4:4c:f7:cc:b8:8a:ee:10:05:e8:02:c8:1e:1b:03: 8e:cc:e9:b1:df:16:0f:24:70:26:12:52:42:f9:c1:e7:88:fc: ae:19:4c:1d:9d:b7:12:52:19:47:46:b7:df:29:2a:d1:6e:73: 5a:05:be:2e:dd:02:d1:c4:e5:88:4b:14:1c:37:65:f3:c2:e8: f1:ea:93:a3:df:da:70:4f:8f:e6:dc:9f:0e:7d:08:3a:d6:aa: 60:66:68:0a:55:2e:c9:9d:b6:c2:81:4a:37:ac:0a:47:49:e7: 7a:30:a6:d1:48:e9:ac:ab:5d:92:e6:df:1b:be:17:00:7a:af: d4:75:80:3b:18:00:f7:ae:20:4d:82:d7:e9:20:81:c9:c5:ab: 1b:b3:18:4e:25:b4:30:87:cf:fc:25:36:cc:62:c8:b7:56:ed: 67:7d:40:89:59:f8:c5:90:11:9e:94:6f:08:5c:aa:66:30:fe: 02:af:b3:c6:8e:4a:89:6d:fc:1d:dd:74:74:cd:9f:65:8e:ee: 72:2e:d1:71:19:5a:27:c2:7a:46:d3:46:78:82:b3:46:67:9c: 6a:1d:de:05:8a:44:1f:ee:ee:21:d7:0b:f4:e1:7d:27:4e:72: 9c:6e:8b:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzVERjExMC8GA1UEBRMoOEUyNjdBMzE1REY5MEU5OTVGRjRDRDRCMkNGOEZDNEMz MzI0QjJEQjAeFw0yNTA5MTcwNzI4NDVaFw0yNTA5MjQwNzI4NDVaMBgxFjAUBgNV BAMTDTY4Y2E2MzJlLWZlYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnM0xhtpotWYzW6/8riks4BpZ77+WAUwm40xawMxQIZNcfZdJhSsLE5GeBgVaG HhfjaIFw16WhcZDCTPAz1Wfz2nMFc+jJISI39S+rXQ/gJ+fyVARvEeS/9EVuiHjx eTSXfq+KKPz3dB/oUbnNCvZA+dlph6nLpJGtHx8UqAeGA/Cr3J1BFI5q9vrbsbKd YNerczz7XOJd2q04NwArlawP+o4RsxZ07Rdx32o2DjLvDdi0BtWdzrshsXzzaoqs UGMe0PouRy0OUOWggLQGwYO3WtraKSkwUldyE8zExZRc0pzk11lnUx9q2cqeySLI 1e9UfV6W2UCRbfmtvYQnvFWhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzxJQt/5v QR9Rhfs+fUMcdyWINHIwHwYDVR0jBBgwFoAUjiZ6MV35Dplf9M1LLPj8TDMkstsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzNURGLzFFQTAxOTlDRDg5 RTExRUZCNDIxMkM1NkM0RjlBRTAyL2ppWjZNVjM1RHBsZjlNMUxMUGo4VERNa3N0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamlaNk1WMzVEcGxmOU0xTExQajhURE1rc3RzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz NURGLzFFQTAxOTlDRDg5RTExRUZCNDIxMkM1NkM0RjlBRTAyL2ppWjZNVjM1RHBs ZjlNMUxMUGo4VERNa3N0cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHoh2pe1aNO9wLwoWW0r707KPR9ZORM98y4iu4QBegCyB4bA47M6bHf Fg8kcCYSUkL5weeI/K4ZTB2dtxJSGUdGt98pKtFuc1oFvi7dAtHE5YhLFBw3ZfPC 6PHqk6Pf2nBPj+bcnw59CDrWqmBmaApVLsmdtsKBSjesCkdJ53owptFI6ayrXZLm 3xu+FwB6r9R1gDsYAPeuIE2C1+kggcnFqxuzGE4ltDCHz/wlNsxiyLdW7Wd9QIlZ +MWQEZ6UbwhcqmYw/gKvs8aOSolt/B3ddHTNn2WO7nIu0XEZWifCekbTRniCs0Zn nGod3gWKRB/u7iHXC/ThfSdOcpxuizo= -----END CERTIFICATE-----Generated at Fri Sep 19 03:58:02 2025 by rpki-client