$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: y1wOnEH/8RMkkwLEhaldEXLDu2hePVLD7N+5PYt1lFI= Subject key identifier: 1C:13:98:DD:F2:81:A8:EF:03:94:C8:12:81:78:23:79:A7:E3:07:7D Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 08A3 Signing time: Wed 20 Aug 2025 20:35:46 +0000 Manifest this update: Wed 20 Aug 2025 20:35:46 +0000 Manifest next update: Wed 27 Aug 2025 20:35:46 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: BVcLrMWPYJMfxlTn/ZW+8br3pc76bd+9B3Vc2SOq9X0=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: oyNqHuI92CZn4/vowEHhL13J2MzcFLxMYrnO9NR1z4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Aug 20 20:35:46 2025 GMT Not After : Aug 27 20:35:46 2025 GMT Subject: CN=68a631a2-79d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:d4:2b:fc:63:2c:f3:c3:32:bf:65:bb:b1: 58:31:7b:28:ec:a8:3f:ca:ea:bb:e2:5a:31:83:c8: 18:8a:40:c5:27:c4:04:42:87:4f:d9:4f:0c:0c:76: bd:2e:0f:23:16:14:4f:41:bc:3b:d0:3e:79:5b:2a: 42:49:6d:12:b1:76:d9:45:c9:f7:79:c4:05:4f:7a: 23:b1:66:e7:9e:47:46:93:5f:4c:87:f1:47:ca:ab: a3:0c:78:f6:03:43:bb:60:e0:25:3d:9f:8f:30:3e: c9:01:e7:86:0a:db:24:f7:ba:89:e8:1e:df:e7:52: c5:36:67:2a:fb:30:0a:f2:f1:35:a9:2d:5b:82:c8: 7f:1e:86:4c:65:2f:b3:67:4b:37:b7:f9:57:00:88: 96:05:06:1e:7d:7c:74:6d:6b:4e:ad:f8:dd:35:d7: bf:17:a9:11:08:d4:3b:4f:e3:d3:ae:ea:04:2a:2c: 17:af:a0:89:a9:54:e9:ea:c6:82:d2:8c:f0:ab:a8: 3b:fc:19:bf:cc:07:cf:84:4a:df:8d:b2:a3:00:67: 38:17:b0:07:1c:18:e9:bd:d4:f2:0a:20:49:2d:53: 7b:de:cd:be:10:33:ce:a1:d7:3b:a9:0a:2d:ae:84: 96:44:a9:8e:9b:b0:cf:28:92:b0:39:14:af:84:b4: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:13:98:DD:F2:81:A8:EF:03:94:C8:12:81:78:23:79:A7:E3:07:7D X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:76:cb:24:fc:30:8c:11:02:85:b5:76:d7:07:59:c1:93:e4: a1:0c:39:88:d5:fc:26:c7:85:7d:17:11:1c:b5:d6:e3:39:c5: 52:f8:d6:de:93:b6:e8:9b:d2:e2:95:cc:76:7e:ae:39:ca:03: 5a:04:65:96:81:bc:df:78:8e:3f:7c:7b:d2:96:f1:7a:5c:72: ce:4b:34:6b:b7:f4:77:11:f0:20:f5:35:07:d0:e6:68:f4:4d: aa:dc:e2:3d:83:22:e5:8f:01:db:42:1f:f4:76:6f:d6:42:08: a6:b2:9a:41:84:cd:63:36:7f:95:8d:29:53:99:05:45:97:0b: f9:18:47:85:53:8b:2d:f3:17:6e:38:39:65:5e:90:9a:ff:89: f1:20:81:af:9c:1f:d9:db:c6:53:6d:3c:62:87:ae:e4:0c:2e: 95:c5:29:c3:df:3b:82:c4:a5:c6:57:d7:a8:76:1b:bb:57:a9: b6:b6:8b:4c:e4:ce:30:4e:29:7f:c8:1e:6a:f4:1f:35:1f:f8: bb:4c:71:37:93:04:16:a6:69:aa:d2:97:a0:3b:f7:ef:35:fe: 6f:7f:05:e1:bb:5c:63:05:c5:bb:99:2f:a5:e6:28:1b:57:d8: cc:60:d6:43:4a:14:4b:be:d4:06:95:83:1a:46:e1:7f:d3:05: 0a:19:41:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjUwODIwMjAzNTQ2WhcNMjUwODI3MjAzNTQ2WjAYMRYwFAYD VQQDEw02OGE2MzFhMi03OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzI7UK/xjLPPDMr9lu7FYMXso7Kg/yuq74loxg8gYikDFJ8QEQodP2U8MDHa9 Lg8jFhRPQbw70D55WypCSW0SsXbZRcn3ecQFT3ojsWbnnkdGk19Mh/FHyqujDHj2 A0O7YOAlPZ+PMD7JAeeGCtsk97qJ6B7f51LFNmcq+zAK8vE1qS1bgsh/HoZMZS+z Z0s3t/lXAIiWBQYefXx0bWtOrfjdNde/F6kRCNQ7T+PTruoEKiwXr6CJqVTp6saC 0ozwq6g7/Bm/zAfPhErfjbKjAGc4F7AHHBjpvdTyCiBJLVN73s2+EDPOodc7qQot roSWRKmOm7DPKJKwORSvhLTCMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwTmN3y gajvA5TIEoF4I3mn4wd9MB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFdssk/DCMEQKFtXbXB1nBk+ShDDmI1fwmx4V9FxEctdbjOcVS+Nbe k7bom9Lilcx2fq45ygNaBGWWgbzfeI4/fHvSlvF6XHLOSzRrt/R3EfAg9TUH0OZo 9E2q3OI9gyLljwHbQh/0dm/WQgimsppBhM1jNn+VjSlTmQVFlwv5GEeFU4st8xdu ODllXpCa/4nxIIGvnB/Z28ZTbTxih67kDC6VxSnD3zuCxKXGV9eodhu7V6m2totM 5M4wTil/yB5q9B81H/i7THE3kwQWpmmq0pegO/fvNf5vfwXhu1xjBcW7mS+l5igb V9jMYNZDShRLvtQGlYMaRuF/0wUKGUHA -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:18 2025 by rpki-client