$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: rH08p4yF7zb/W0Rqa/FX/CnEjlvvNY7bPJgHaAbJ9cM= Subject key identifier: 15:6A:41:41:F5:7F:AB:EF:E7:75:49:BE:1B:31:77:C6:D2:C5:03:E0 Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 04CE Signing time: Fri 05 Sep 2025 00:07:08 +0000 Manifest this update: Fri 05 Sep 2025 00:07:08 +0000 Manifest next update: Fri 12 Sep 2025 00:07:08 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: 90TCN9h7U9ZTJQdd/Jq9yMPEwx/MHm2b0zXDP2eoUjw=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: Sep 5 00:07:08 2025 GMT Not After : Sep 12 00:07:08 2025 GMT Subject: CN=68ba29ac-25cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6c:60:95:88:28:a9:00:81:bc:ac:17:f7:6a: 6d:b6:f9:c5:a1:de:fe:ff:74:ff:ae:8b:4c:d2:e9: da:e4:5e:07:a3:cb:97:ac:fe:a6:37:19:8f:aa:64: 3e:74:61:b8:82:d6:8d:68:b7:d4:86:9c:ba:41:ef: fc:95:65:5c:a7:a4:fd:6c:28:08:d1:65:70:7a:f6: 91:50:b0:c5:d1:b1:ab:a6:1e:24:d7:a7:b0:b6:1c: cd:6f:9d:ac:3c:5d:9a:6c:9d:2d:7f:2f:c5:49:f6: 7b:32:55:ba:32:68:83:e0:86:46:d5:7f:06:09:59: 9e:90:fb:e1:e8:35:88:a0:d0:5c:1f:55:58:0b:8d: ae:1e:1b:76:97:24:83:ad:d2:30:29:0f:7c:1f:a0: 03:5f:7a:c7:1c:29:36:55:b9:03:a1:be:74:05:fe: de:94:97:e1:66:fd:b8:99:19:f8:5f:82:c9:ce:7a: a3:95:de:89:6e:b8:6a:ca:0e:77:d1:d3:f0:67:cd: 79:45:51:2d:c7:8f:e6:f9:d9:12:68:29:8b:9f:77: 71:84:58:b9:d7:86:be:8c:af:d6:dc:00:e5:33:6c: 2b:6d:96:2c:88:b9:51:ea:95:8c:28:4e:b0:81:20: 95:56:67:df:e8:c3:72:23:fa:17:89:58:71:e2:84: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6A:41:41:F5:7F:AB:EF:E7:75:49:BE:1B:31:77:C6:D2:C5:03:E0 X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ee:24:d4:ca:29:00:c1:10:d3:80:51:60:ff:0f:a7:fd:b3: 4a:a1:e2:2e:33:92:62:2c:6c:62:7a:c3:b1:ef:1d:c4:2f:cf: 9b:a7:1b:d9:5a:78:ce:12:a0:85:ef:84:f5:bb:e3:24:5f:3f: 8d:6f:18:ba:8d:da:3b:18:0b:f3:cf:5e:d9:8c:54:c0:b1:53: ac:50:d6:d6:7c:1c:79:d1:ff:b7:a7:19:aa:36:61:ff:17:43: 64:cd:de:bc:fc:92:d2:71:1b:2a:19:b2:b5:58:ae:14:ad:dd: ae:64:b1:03:14:01:9a:d3:4f:3f:b8:83:2b:97:f9:0c:00:e7: fc:39:a2:fe:b0:21:33:d9:96:2a:31:47:53:0e:cc:93:b1:9e: 85:c3:19:a2:51:9e:6b:af:ed:a4:cf:f7:a7:80:4f:8f:c1:0f: 73:5b:18:0c:a5:40:5f:bd:7b:60:24:31:54:0a:e8:a5:00:61: 8b:e2:9e:99:c3:a1:89:76:5c:60:56:df:87:78:ca:88:1e:7e: 63:95:25:00:e3:c6:cf:c3:d3:e7:66:e6:fd:38:22:a2:c8:1d: 11:ac:70:d1:ba:61:fa:19:4d:16:d1:74:97:9e:96:d6:9a:f6: f1:5c:81:bb:32:d5:50:97:b5:b1:74:24:c4:59:e1:3e:0e:d7: a5:40:ce:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwOTA1MDAwNzA4WhcNMjUwOTEyMDAwNzA4WjAYMRYwFAYD VQQDEw02OGJhMjlhYy0yNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mxglYgoqQCBvKwX92pttvnFod7+/3T/rotM0una5F4Ho8uXrP6mNxmPqmQ+ dGG4gtaNaLfUhpy6Qe/8lWVcp6T9bCgI0WVwevaRULDF0bGrph4k16ewthzNb52s PF2abJ0tfy/FSfZ7MlW6MmiD4IZG1X8GCVmekPvh6DWIoNBcH1VYC42uHht2lySD rdIwKQ98H6ADX3rHHCk2VbkDob50Bf7elJfhZv24mRn4X4LJznqjld6Jbrhqyg53 0dPwZ815RVEtx4/m+dkSaCmLn3dxhFi514a+jK/W3ADlM2wrbZYsiLlR6pWMKE6w gSCVVmff6MNyI/oXiVhx4oTwnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVqQUH1 f6vv53VJvhsxd8bSxQPgMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7iTUyikAwRDTgFFg/w+n/bNKoeIuM5JiLGxiesOx7x3EL8+bpxvZ WnjOEqCF74T1u+MkXz+Nbxi6jdo7GAvzz17ZjFTAsVOsUNbWfBx50f+3pxmqNmH/ F0Nkzd68/JLScRsqGbK1WK4Urd2uZLEDFAGa008/uIMrl/kMAOf8OaL+sCEz2ZYq MUdTDsyTsZ6FwxmiUZ5rr+2kz/engE+PwQ9zWxgMpUBfvXtgJDFUCuilAGGL4p6Z w6GJdlxgVt+HeMqIHn5jlSUA48bPw9PnZub9OCKiyB0RrHDRumH6GU0W0XSXnpbW mvbxXIG7MtVQl7WxdCTEWeE+DtelQM43 -----END CERTIFICATE-----Generated at Sat Sep 6 08:01:28 2025 by rpki-client