$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: VcWjLm5BlEab0pK7L7NRZENMQNGQejDWHS5l5sUKkv4= Subject key identifier: 7B:B0:76:C0:AB:A3:0E:13:F5:27:98:C3:DD:3F:0D:C7:E5:6F:5D:6C Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: 38 Signing time: Tue 09 Sep 2025 07:44:27 +0000 Manifest this update: Tue 09 Sep 2025 07:44:27 +0000 Manifest next update: Tue 16 Sep 2025 07:44:27 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: T6YmlyOEJG1EYHAEKuBHfUox4X4bZD9ZorUCCB0xXwc=) 2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: tOvv14j7PVKjZOUCL/zHGwFCXfHBrWhMTrZ97/b78ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Sep 9 07:44:27 2025 GMT Not After : Sep 16 07:44:27 2025 GMT Subject: CN=68bfdadb-7648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:0c:68:31:80:59:61:89:dc:5a:c7:c5:6d: 2d:1c:35:48:4d:40:95:9e:ac:15:38:22:8a:a9:27: 91:36:8a:33:87:3e:e1:6c:b0:f6:da:08:af:15:5f: 5d:31:d3:a6:d1:3e:5f:5c:fc:5f:bb:6f:a9:61:71: 0f:1b:a2:27:cb:b8:f3:77:b4:26:a2:2e:7e:01:99: 48:f9:a8:65:6d:4f:56:7c:a1:7e:b3:36:e9:89:1c: ec:9c:8e:80:c4:4b:03:45:a1:f9:21:b5:a6:10:28: 39:08:0a:16:fa:a2:56:c2:90:50:c7:81:70:d2:bd: b9:82:62:eb:9e:b9:4c:61:a1:b6:8e:49:40:19:61: 3f:62:34:33:43:1a:ca:26:ed:49:a0:00:1d:15:f1: 59:fb:ec:92:bc:37:09:9f:8a:36:a8:05:ac:a8:b5: ed:b9:7e:d1:ca:6d:88:71:24:46:29:30:b2:87:7a: dd:36:75:2c:3d:3a:b0:3d:8c:d9:22:51:98:23:6a: 5b:d4:2f:89:c2:a7:e4:44:52:77:42:de:77:5b:c0: d7:d1:20:f0:88:d7:c6:ef:20:65:7b:31:d3:92:0d: 6a:2f:dd:10:e0:2f:24:d4:3d:bb:2d:53:6d:7e:4b: 06:9c:07:9b:8e:ca:6d:ea:82:12:41:eb:b2:d8:19: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B0:76:C0:AB:A3:0E:13:F5:27:98:C3:DD:3F:0D:C7:E5:6F:5D:6C X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:90:68:7e:97:06:c6:68:1a:d4:08:08:f7:f5:f0:31:10:3c: 74:59:e3:e2:7d:f4:b9:ea:92:ca:13:d4:ea:89:a0:0a:05:09: 1a:df:ba:20:d5:7f:f6:8e:ce:e4:38:eb:1a:ae:cb:39:e4:76: 5c:ff:20:c9:27:5f:b2:5c:db:f9:0d:ac:ea:16:0a:8b:b8:d6: 88:e7:e7:39:59:34:a3:65:e2:9e:45:28:d0:16:c6:5e:48:11: 06:db:0b:3b:35:34:9f:28:dc:97:4c:ab:45:1a:d0:86:9f:5f: 22:a6:97:29:19:b7:cc:28:ce:4b:aa:5e:91:55:1e:db:a0:ab: 86:5b:03:33:17:9a:db:ff:a0:17:02:8a:55:df:c7:47:c8:25: 24:4c:29:53:72:3f:e9:5f:83:07:b1:8c:50:19:ee:06:62:9f: 71:ca:44:a2:a3:a6:66:a6:0d:e9:98:ee:94:35:b7:20:2e:c7: 64:23:78:cd:0e:99:68:ca:99:44:7a:b6:93:c0:de:f9:2f:68: 8e:5a:48:9e:dc:9d:68:6f:80:3e:cc:3e:64:01:6a:31:82:b6: 0e:3c:f8:a0:de:31:d8:97:5f:90:ba:da:7a:b4:3d:84:83:d1: 01:9a:d2:6a:59:27:75:55:ff:b2:86:da:8e:13:3e:fb:87:2e: 41:62:75:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoOERFOUQwNzRGRjNDOEQ1MTU0MTVFQkYwRjBFNTZBQzAz RUVBREQzQTAeFw0yNTA5MDkwNzQ0MjdaFw0yNTA5MTYwNzQ0MjdaMBgxFjAUBgNV BAMTDTY4YmZkYWRiLTc2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjMQxoMYBZYYncWsfFbS0cNUhNQJWerBU4IoqpJ5E2ijOHPuFssPbaCK8VX10x 06bRPl9c/F+7b6lhcQ8boifLuPN3tCaiLn4BmUj5qGVtT1Z8oX6zNumJHOycjoDE SwNFofkhtaYQKDkIChb6olbCkFDHgXDSvbmCYuueuUxhobaOSUAZYT9iNDNDGsom 7UmgAB0V8Vn77JK8NwmfijaoBayote25ftHKbYhxJEYpMLKHet02dSw9OrA9jNki UZgjalvUL4nCp+REUndC3ndbwNfRIPCI18bvIGV7MdOSDWov3RDgLyTUPbstU21+ SwacB5uOym3qghJB67LYGVE1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe7B2wKuj DhP1J5jD3T8Nx+VvXWwwHwYDVR0jBBgwFoAUjenQdP88jVFUFevw8OVqwD7q3Tow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzNEOEFDNTQ2M0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamVuUWRQODhqVkZVRmV2dzhPVnF3RDdxM1RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzNEOEFDNTQ2M0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZG VUZldnc4T1Zxd0Q3cTNUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmQaH6XBsZoGtQICPf18DEQPHRZ4+J99LnqksoT1OqJoAoFCRrfuiDV f/aOzuQ46xquyznkdlz/IMknX7Jc2/kNrOoWCou41ojn5zlZNKNl4p5FKNAWxl5I EQbbCzs1NJ8o3JdMq0Ua0IafXyKmlykZt8wozkuqXpFVHtugq4ZbAzMXmtv/oBcC ilXfx0fIJSRMKVNyP+lfgwexjFAZ7gZin3HKRKKjpmamDemY7pQ1tyAux2QjeM0O mWjKmUR6tpPA3vkvaI5aSJ7cnWhvgD7MPmQBajGCtg48+KDeMdiXX5C62nq0PYSD 0QGa0mpZJ3VV/7KG2o4TPvuHLkFidXU= -----END CERTIFICATE-----Generated at Tue Sep 9 17:41:04 2025 by rpki-client