$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: 1NgoNJkrjYaTCOSEa6Oc35rdXZcJgu8L93J51lXunGg= Subject key identifier: 3A:38:FC:66:97:A6:70:2E:72:B3:36:D7:09:6F:4D:E7:23:BB:C8:38 Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 01BA Signing time: Fri 19 Sep 2025 03:31:21 +0000 Manifest this update: Fri 19 Sep 2025 03:31:20 +0000 Manifest next update: Fri 26 Sep 2025 03:31:20 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: 3PCLQEDyLZkuwAXRehKefw5Lli4iZRcotEjIi1B4kug=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: inMm5nvfP57Hl+fyHfmB7fCT1GborVKT6HpM1mM5xkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: Sep 19 03:31:20 2025 GMT Not After : Sep 26 03:31:20 2025 GMT Subject: CN=68ccce88-1832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:a6:82:4a:95:25:f5:cb:e7:4c:70:09:5b: 37:02:63:54:60:67:c8:0d:61:a3:fc:ee:62:5e:3a: 8e:06:fc:ef:5f:17:27:f2:85:78:10:36:ed:17:9b: c4:32:cf:10:16:1a:78:e8:a7:a0:b3:ed:a2:0f:d4: f1:67:49:62:12:a8:3b:dc:23:1b:cf:20:c6:ef:9d: 1d:6d:31:fc:d5:7a:31:42:cb:36:62:a6:7d:63:04: 07:03:c3:12:f4:27:61:f0:be:c1:dd:66:6a:04:25: cd:44:2a:b4:ba:01:8a:9b:ab:65:a6:6f:be:14:1a: f0:92:27:fd:a3:a7:55:b6:fd:d4:f7:b3:f1:ea:28: 66:05:e6:5b:9c:8a:7c:9d:09:61:d0:ab:67:cb:cf: 14:b7:4b:78:89:9e:07:c9:40:01:a8:4a:2d:0b:37: ea:5e:7a:47:0b:bc:5f:f9:cf:9d:df:e1:22:ba:33: 45:83:ce:85:25:8b:8b:d8:e7:ef:40:fa:0c:84:43: ca:46:29:50:a1:bd:e3:c2:f3:39:24:c1:cb:89:5a: 38:b7:0d:d3:5c:18:0a:47:b2:2f:fc:7f:26:73:ba: db:97:d2:b4:0a:0a:a3:18:05:5d:10:d4:29:26:12: 88:ab:c8:2c:4f:20:d0:b7:05:3f:84:f3:9c:f8:a1: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:FC:66:97:A6:70:2E:72:B3:36:D7:09:6F:4D:E7:23:BB:C8:38 X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:83:2d:7f:32:72:60:d0:7d:ca:14:a4:83:a7:f1:10:c8:f8: e4:8f:e9:62:ed:bf:46:fb:0b:61:f0:bb:62:dc:c9:d9:ab:59: d5:8a:e1:d9:83:93:17:5c:7b:d6:56:e9:8a:2d:96:26:1c:42: f8:fb:20:7e:72:fd:e5:1c:d4:68:e6:bd:8f:e7:01:24:f7:a4: 28:cc:7a:08:e3:9b:54:2c:a5:2b:c0:d7:fc:ac:5d:6b:43:ad: 66:b3:4f:38:10:11:5c:91:2a:66:84:35:9e:bf:a2:8e:a2:d2: b1:f6:e4:3c:bb:e7:64:95:07:e4:4e:54:d5:c9:71:f7:00:15: d5:72:d8:ae:e5:a9:bf:29:6b:c8:05:5c:c9:7a:c1:05:45:58: e8:ee:ad:79:7d:66:c5:2b:2c:24:2b:fa:71:b4:86:1f:10:ca: 7d:7d:dc:60:63:bb:41:af:10:99:34:6a:5f:49:8b:31:71:8b: 84:30:01:12:39:3d:5c:7c:44:7e:9f:46:0e:cd:fb:cd:b8:e5: 59:2a:f9:ae:2a:5b:e6:db:e5:fc:4f:51:e4:31:55:9c:c2:94: 24:fe:a4:01:af:a7:87:15:aa:00:21:53:d9:b5:fa:25:55:1c: 50:db:57:02:c7:52:ec:53:b2:d3:d6:1f:22:10:bd:a7:12:c7: 53:ae:e3:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjUwOTE5MDMzMTIwWhcNMjUwOTI2MDMzMTIwWjAYMRYwFAYD VQQDEw02OGNjY2U4OC0xODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GymgkqVJfXL50xwCVs3AmNUYGfIDWGj/O5iXjqOBvzvXxcn8oV4EDbtF5vE Ms8QFhp46Kegs+2iD9TxZ0liEqg73CMbzyDG750dbTH81XoxQss2YqZ9YwQHA8MS 9Cdh8L7B3WZqBCXNRCq0ugGKm6tlpm++FBrwkif9o6dVtv3U97Px6ihmBeZbnIp8 nQlh0Ktny88Ut0t4iZ4HyUABqEotCzfqXnpHC7xf+c+d3+EiujNFg86FJYuL2Ofv QPoMhEPKRilQob3jwvM5JMHLiVo4tw3TXBgKR7Iv/H8mc7rbl9K0CgqjGAVdENQp JhKIq8gsTyDQtwU/hPOc+KEWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo4/GaX pnAucrM21wlvTecju8g4MB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCigy1/MnJg0H3KFKSDp/EQyPjkj+li7b9G+wth8Lti3MnZq1nViuHZ g5MXXHvWVumKLZYmHEL4+yB+cv3lHNRo5r2P5wEk96QozHoI45tULKUrwNf8rF1r Q61ms084EBFckSpmhDWev6KOotKx9uQ8u+dklQfkTlTVyXH3ABXVctiu5am/KWvI BVzJesEFRVjo7q15fWbFKywkK/pxtIYfEMp9fdxgY7tBrxCZNGpfSYsxcYuEMAES OT1cfER+n0YOzfvNuOVZKvmuKlvm2+X8T1HkMVWcwpQk/qQBr6eHFaoAIVPZtfol VRxQ21cCx1LsU7LT1h8iEL2nEsdTruOi -----END CERTIFICATE-----Generated at Fri Sep 19 05:21:09 2025 by rpki-client