$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: MTZwa6ayYzDmPR+fu3MA6AFdRJs3YtPEx2OaKocXHDc= Subject key identifier: E2:A1:21:C9:B3:EB:02:18:07:4D:78:C3:7C:4E:38:69:4F:94:17:35 Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: DF Signing time: Sun 07 Sep 2025 05:54:36 +0000 Manifest this update: Sun 07 Sep 2025 05:54:36 +0000 Manifest next update: Sun 14 Sep 2025 05:54:36 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: mwN2RfqZOmiKW0hu5URydq4A3uuSvmkOdO5omvppEwA=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Sep 7 05:54:36 2025 GMT Not After : Sep 14 05:54:36 2025 GMT Subject: CN=68bd1e1c-41ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:db:a0:79:41:93:fa:71:1c:e7:0c:15:9e: ee:32:af:00:42:ef:9f:59:0d:85:8d:2f:32:92:4f: fd:6a:1a:be:78:91:b4:65:15:4d:8c:d8:a3:5f:de: a3:9c:80:0d:bb:6b:9f:a8:14:95:4a:f0:fc:e8:0c: 41:da:27:eb:67:65:cf:37:b6:29:9b:bb:70:39:d8: bc:72:8d:0e:67:14:99:c9:de:ce:5d:d8:a7:ee:d2: 8f:7b:51:b5:4c:06:f9:a3:13:cc:76:bb:be:87:46: 3d:4c:c2:26:7f:64:11:93:5b:71:d7:28:29:68:99: 72:14:c2:3d:1a:e2:16:48:11:8f:7d:af:ce:91:6f: 76:e8:62:96:43:f8:c8:f5:e0:4c:33:3d:01:96:14: 57:89:6f:12:dc:68:cf:6f:27:2a:f3:6d:3e:1e:48: d4:9d:f4:32:0a:a8:67:d1:59:e5:d8:a0:62:94:76: 22:db:99:8d:81:cf:41:39:27:02:34:0f:c8:dd:b0: 6e:02:83:4f:1a:0f:0a:34:a7:0a:eb:66:b0:84:99: 4b:3d:ca:cf:d7:34:cf:c8:31:7c:24:91:2a:f4:88: 66:ba:f9:d0:6a:18:e8:c2:87:30:c6:95:b4:0c:20: 23:0a:3d:81:cf:9c:58:ac:e0:a5:0a:50:82:36:cd: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:21:C9:B3:EB:02:18:07:4D:78:C3:7C:4E:38:69:4F:94:17:35 X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:11:b8:2f:06:0d:1a:fe:03:a1:fd:ae:d7:69:c9:11:23:e8: 73:30:cf:b2:3d:03:7b:ef:2f:f8:22:25:56:45:86:74:f0:96: 49:bb:5a:4c:de:21:d3:6a:2f:47:db:e0:2d:01:ab:44:11:54: 07:02:b4:d6:06:93:29:d6:62:da:52:b6:91:19:c6:04:3d:52: e6:b5:b2:b7:45:8d:92:e7:4a:a7:64:7f:3d:f0:01:9f:c2:50: 12:be:be:93:d0:23:79:63:c0:75:fd:5a:54:bf:13:21:45:37: 91:c5:d1:2f:59:bf:b7:ee:c2:15:c4:36:0f:4a:8a:ec:89:da: 9f:cf:38:ae:29:2d:19:8e:0d:6d:bd:45:47:99:83:8e:f4:d3: 5d:92:2e:04:5e:95:bb:a0:91:ce:b3:64:31:25:b5:d9:49:ed: e7:77:98:f9:6d:f2:64:6c:af:48:15:69:f5:29:1c:99:88:23: 08:67:74:45:81:f9:ec:e6:ed:15:50:d5:ac:8c:6f:80:36:c0: 67:66:5d:be:92:b7:00:84:3a:d8:ce:e7:94:6e:37:7e:6c:e6: 19:b2:b9:95:15:60:6c:9d:db:93:e4:3d:11:72:c3:0c:9f:05: 6b:ac:a1:98:9c:11:a3:a9:69:9e:63:9b:70:fd:15:28:e0:a1: de:c8:b6:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUwOTA3MDU1NDM2WhcNMjUwOTE0MDU1NDM2WjAYMRYwFAYD VQQDEw02OGJkMWUxYy00MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZnboHlBk/pxHOcMFZ7uMq8AQu+fWQ2FjS8ykk/9ahq+eJG0ZRVNjNijX96j nIANu2ufqBSVSvD86AxB2ifrZ2XPN7Ypm7twOdi8co0OZxSZyd7OXdin7tKPe1G1 TAb5oxPMdru+h0Y9TMImf2QRk1tx1ygpaJlyFMI9GuIWSBGPfa/OkW926GKWQ/jI 9eBMMz0BlhRXiW8S3GjPbycq820+HkjUnfQyCqhn0Vnl2KBilHYi25mNgc9BOScC NA/I3bBuAoNPGg8KNKcK62awhJlLPcrP1zTPyDF8JJEq9IhmuvnQahjowocwxpW0 DCAjCj2Bz5xYrOClClCCNs0o6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKhIcmz 6wIYB014w3xOOGlPlBc1MB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPEbgvBg0a/gOh/a7XackRI+hzMM+yPQN77y/4IiVWRYZ08JZJu1pM 3iHTai9H2+AtAatEEVQHArTWBpMp1mLaUraRGcYEPVLmtbK3RY2S50qnZH898AGf wlASvr6T0CN5Y8B1/VpUvxMhRTeRxdEvWb+37sIVxDYPSorsidqfzziuKS0Zjg1t vUVHmYOO9NNdki4EXpW7oJHOs2QxJbXZSe3nd5j5bfJkbK9IFWn1KRyZiCMIZ3RF gfns5u0VUNWsjG+ANsBnZl2+krcAhDrYzueUbjd+bOYZsrmVFWBsnduT5D0RcsMM nwVrrKGYnBGjqWmeY5tw/RUo4KHeyLZM -----END CERTIFICATE-----Generated at Tue Sep 9 06:15:07 2025 by rpki-client