$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: gL/1+Dq5/S5fbiHEJfWJg2n4C9E5TIa6M6mcIXQ7hTo= Subject key identifier: 1B:3A:50:3F:DD:75:5B:A8:EC:E5:A1:FA:AD:06:97:4C:0E:1F:92:EB Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 041E Signing time: Tue 09 Sep 2025 00:25:23 +0000 Manifest this update: Tue 09 Sep 2025 00:25:22 +0000 Manifest next update: Tue 16 Sep 2025 00:25:22 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: cCZkBKWjBrHFHY8bc/OnmgBb/GcnaXCfj37kBf53G8o=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Sep 9 00:25:22 2025 GMT Not After : Sep 16 00:25:22 2025 GMT Subject: CN=68bf73f3-7aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:d1:d6:75:29:72:37:c3:a6:81:cd:8f:2b: 03:b8:ca:75:18:2a:f0:c1:f2:fb:12:6a:4c:9f:86: 5b:07:4c:1e:4b:1b:ae:66:5e:2d:bc:9a:af:35:bd: b4:d5:2d:90:5b:41:22:6d:f6:81:26:57:c2:df:a0: 75:df:35:e3:ce:3e:9a:a5:d2:9b:86:00:ff:26:3d: 56:88:65:aa:96:96:09:d6:bb:3e:44:58:a2:97:53: b7:67:8c:f5:40:17:dd:94:0c:80:7c:e5:ec:c3:70: d1:b2:bd:2f:0c:f3:48:88:f3:cc:bb:74:48:a9:7d: 19:82:25:53:0e:dc:39:4b:5f:6a:71:03:53:cf:02: 59:7f:93:35:1f:ae:93:6f:59:0f:ef:24:da:0d:2c: cb:41:b1:9a:c0:9c:cf:c9:eb:43:87:89:f3:66:71: e4:d2:fe:1f:ac:e9:b6:b4:10:c1:0f:32:96:e2:7c: 60:18:05:72:4c:fc:ee:6a:11:6e:b1:f3:cc:87:39: 80:8e:2c:dd:f0:ca:7a:e8:ef:2b:48:5f:c3:40:06: 9a:c7:59:30:36:38:35:3e:72:83:a5:de:de:d2:b3: f5:cd:92:f9:a3:c5:8a:42:e4:bb:de:16:cc:d6:de: 56:46:06:60:e1:87:44:62:2c:0b:9c:97:01:48:74: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:50:3F:DD:75:5B:A8:EC:E5:A1:FA:AD:06:97:4C:0E:1F:92:EB X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4b:c3:21:f6:eb:2b:3f:18:2b:3b:aa:71:11:37:50:ed:9c: 9b:8e:db:5f:1f:75:7e:f3:9c:45:60:6b:4f:6b:0e:16:f2:de: 97:b7:e2:ab:42:fc:87:8c:e0:d7:e0:c2:5a:83:ec:3c:3f:d3: 94:62:0a:ed:44:60:46:f0:f7:f7:54:44:24:2b:f1:3d:52:8d: df:7b:6a:18:ca:ed:ba:a9:0f:0b:15:7e:b2:31:1a:9f:70:f6: 99:6b:2d:ca:c1:c8:d4:f9:8b:25:2b:7b:fe:5d:ac:2b:ee:41: 04:f1:25:34:f7:75:0d:4a:8f:86:8f:2b:d7:b9:78:6d:d2:26: 9e:92:b5:90:20:4b:8b:da:2f:a7:2c:da:4e:db:2a:c1:69:8e: b2:fc:5d:10:a4:6b:26:e2:b9:55:0b:ea:55:2c:75:85:39:b6: 92:45:39:68:1f:c5:8d:e6:9f:03:0d:2c:b1:cf:3e:c2:bd:39: 95:3c:fa:b0:d6:fd:88:06:f6:eb:c1:c6:df:6d:42:93:88:92: 6d:cf:24:5b:47:d8:47:ee:1a:07:62:8f:d7:9e:6b:08:0d:c9: d8:a0:8a:26:6b:85:b7:05:57:fb:fd:fb:1f:84:5f:f2:fa:f7: 59:d6:7f:8c:fb:fd:7d:bf:b4:31:6d:a4:fa:d7:3a:a0:41:cd: 60:1e:82:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUwOTA5MDAyNTIyWhcNMjUwOTE2MDAyNTIyWjAYMRYwFAYD VQQDEw02OGJmNzNmMy03YWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PnR1nUpcjfDpoHNjysDuMp1GCrwwfL7EmpMn4ZbB0weSxuuZl4tvJqvNb20 1S2QW0EibfaBJlfC36B13zXjzj6apdKbhgD/Jj1WiGWqlpYJ1rs+RFiil1O3Z4z1 QBfdlAyAfOXsw3DRsr0vDPNIiPPMu3RIqX0ZgiVTDtw5S19qcQNTzwJZf5M1H66T b1kP7yTaDSzLQbGawJzPyetDh4nzZnHk0v4frOm2tBDBDzKW4nxgGAVyTPzuahFu sfPMhzmAjizd8Mp66O8rSF/DQAaax1kwNjg1PnKDpd7e0rP1zZL5o8WKQuS73hbM 1t5WRgZg4YdEYiwLnJcBSHRWSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs6UD/d dVuo7OWh+q0Gl0wOH5LrMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQS8Mh9usrPxgrO6pxETdQ7ZybjttfH3V+85xFYGtPaw4W8t6Xt+Kr QvyHjODX4MJag+w8P9OUYgrtRGBG8Pf3VEQkK/E9Uo3fe2oYyu26qQ8LFX6yMRqf cPaZay3KwcjU+YslK3v+Xawr7kEE8SU093UNSo+GjyvXuXht0iaekrWQIEuL2i+n LNpO2yrBaY6y/F0QpGsm4rlVC+pVLHWFObaSRTloH8WN5p8DDSyxzz7CvTmVPPqw 1v2IBvbrwcbfbUKTiJJtzyRbR9hH7hoHYo/XnmsIDcnYoIoma4W3BVf7/fsfhF/y +vdZ1n+M+/19v7QxbaT61zqgQc1gHoLt -----END CERTIFICATE-----Generated at Tue Sep 9 13:33:57 2025 by rpki-client