$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: 8jV+2F5rMhwyKd05Sgh+esC7ML6AwKVd9M88qdyKUNE= Subject key identifier: D9:FD:F4:54:F2:CC:CC:81:23:1D:77:04:BC:9C:7C:3D:4C:10:E4:F9 Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 94 Signing time: Fri 05 Sep 2025 06:57:16 +0000 Manifest this update: Fri 05 Sep 2025 06:57:15 +0000 Manifest next update: Fri 12 Sep 2025 06:57:15 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: DPQ3DZCM0r32udr/yA8BNRf60asTFH3OSe+T0iN0+OY=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: f2L7OBQuOuTd2LqrR7JU6rutnUdXM8FYIeFEOoAz1u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Sep 5 06:57:15 2025 GMT Not After : Sep 12 06:57:15 2025 GMT Subject: CN=68ba89cc-1619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:08:78:95:f3:b3:fa:d4:1f:ca:d3:7f:89: 6d:9d:cf:5e:28:e5:c3:aa:1f:36:55:90:14:4b:69: 49:a7:7d:7e:e6:ca:fd:06:43:df:69:e0:44:ba:3f: 5a:96:3f:dd:45:33:56:11:78:8f:0d:03:58:4a:aa: 0c:fb:86:29:91:f0:5d:1a:67:da:b3:ee:fe:2b:d5: b0:03:95:70:f1:b7:58:f8:74:ca:bb:b6:29:29:d1: 83:24:f9:78:a7:f0:9d:17:a2:7b:ca:c4:27:c5:e0: ef:3d:41:b8:f0:19:a1:13:27:ac:44:0f:9f:35:06: 0f:95:cc:d2:01:55:41:a2:02:8e:ed:65:8d:df:02: ee:54:45:a0:2e:02:7e:62:fc:27:28:0c:3f:13:16: 3f:a0:5d:62:50:99:b8:0c:ec:21:e8:7a:dc:61:2a: f8:36:25:e2:75:8f:68:6f:b6:26:8a:2a:d0:0f:e0: 4d:45:6a:97:65:a3:72:49:2c:2f:30:85:94:4b:93: 53:a3:b5:d9:94:ae:46:41:43:14:d7:77:f5:d1:b3: 23:fe:25:5a:6a:1c:78:b7:aa:a3:0b:55:9e:c7:ea: ea:45:39:24:af:17:dc:a0:a4:1b:44:ba:cb:0d:43: 6d:68:50:bf:21:1c:8b:4c:8a:a4:34:79:a8:d0:e1: 6e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:F4:54:F2:CC:CC:81:23:1D:77:04:BC:9C:7C:3D:4C:10:E4:F9 X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:4f:cb:20:99:8f:fb:df:1b:d3:05:2c:ec:c9:e6:d2:fa:1f: 7b:02:e5:d5:2e:0b:b3:1d:ef:20:19:97:12:1a:68:32:0a:f5: a1:8e:7f:0e:8a:3f:07:12:0d:ed:76:41:ca:b0:b2:e8:b5:51: 68:7b:e1:a3:ff:7d:9c:7c:57:87:51:99:c1:f7:80:cf:ed:11: 94:6c:84:fb:85:4d:c7:99:60:f6:08:a7:6a:42:48:d5:e3:76: 2f:f9:c3:42:71:83:72:e2:18:e6:37:d9:ef:17:56:f4:18:fa: 95:a1:51:60:40:cc:70:d0:da:28:e0:b3:77:9e:4a:1e:cf:20: b6:59:5b:69:3f:07:8b:87:d9:6b:f3:1b:83:04:ee:a1:9c:28: 30:6c:10:ec:64:df:c8:6c:42:88:95:7d:62:52:6b:b7:80:11: 03:30:af:15:fa:0c:dc:01:cb:22:72:9c:00:fc:63:89:fa:41: 1f:7f:44:e0:18:94:a9:25:3a:ec:d0:da:3c:9e:8a:45:a9:f1: e7:f5:25:85:de:74:98:49:23:ec:be:9f:20:90:65:ea:ab:59: 07:3d:76:da:3b:95:47:e4:7e:2d:34:ad:41:d3:43:44:1b:74: 5b:b3:a7:ef:b6:8f:d5:c5:2a:a1:f9:34:68:d7:e8:15:de:01: 37:62:8a:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKDhGNzRDMTc1NUYxODg3MDhDQ0UzQTY3REVDMjg1OTkz NjQ4REYxODMwHhcNMjUwOTA1MDY1NzE1WhcNMjUwOTEyMDY1NzE1WjAYMRYwFAYD VQQDEw02OGJhODljYy0xNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaUIeJXzs/rUH8rTf4ltnc9eKOXDqh82VZAUS2lJp31+5sr9BkPfaeBEuj9a lj/dRTNWEXiPDQNYSqoM+4YpkfBdGmfas+7+K9WwA5Vw8bdY+HTKu7YpKdGDJPl4 p/CdF6J7ysQnxeDvPUG48BmhEyesRA+fNQYPlczSAVVBogKO7WWN3wLuVEWgLgJ+ YvwnKAw/ExY/oF1iUJm4DOwh6HrcYSr4NiXidY9ob7YmiirQD+BNRWqXZaNySSwv MIWUS5NTo7XZlK5GQUMU13f10bMj/iVaahx4t6qjC1Wex+rqRTkkrxfcoKQbRLrL DUNtaFC/IRyLTIqkNHmo0OFuQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn99FTy zMyBIx13BLycfD1MEOT5MB8GA1UdIwQYMBaAFI90wXVfGIcIzOOmfewoWZNkjfGD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My9GQzdENjA4NkFD ODMxMUVGODIxNDk3MkJDNEY5QUUwMi9qM1RCZFY4WWh3ak00Nlo5N0NoWmsyU044 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My9GQzdENjA4NkFDODMxMUVGODIxNDk3MkJDNEY5QUUwMi9qM1RCZFY4WWh3 ak00Nlo5N0NoWmsyU044WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCET8sgmY/73xvTBSzsyebS+h97AuXVLguzHe8gGZcSGmgyCvWhjn8O ij8HEg3tdkHKsLLotVFoe+Gj/32cfFeHUZnB94DP7RGUbIT7hU3HmWD2CKdqQkjV 43Yv+cNCcYNy4hjmN9nvF1b0GPqVoVFgQMxw0Noo4LN3nkoezyC2WVtpPweLh9lr 8xuDBO6hnCgwbBDsZN/IbEKIlX1iUmu3gBEDMK8V+gzcAcsicpwA/GOJ+kEff0Tg GJSpJTrs0No8nopFqfHn9SWF3nSYSSPsvp8gkGXqq1kHPXbaO5VH5H4tNK1B00NE G3Rbs6fvto/VxSqh+TRo1+gV3gE3YopG -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:31 2025 by rpki-client