$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: NpbkUj2oa7tmJ+vAPSq0hI52cLVwdrWPp7SVJPGDylY= Subject key identifier: F2:B3:88:42:C0:16:C1:38:88:F6:CC:B2:FB:2B:10:2B:3D:F0:46:74 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 0149 Signing time: Sun 07 Sep 2025 04:45:47 +0000 Manifest this update: Sun 07 Sep 2025 04:45:47 +0000 Manifest next update: Sun 14 Sep 2025 04:45:46 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: q2CpN3kKhmPQjrx9Ndt6KHl6kEFDE9zJCmTARm5d8i8=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Sep 7 04:45:47 2025 GMT Not After : Sep 14 04:45:46 2025 GMT Subject: CN=68bd0dfb-53cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:47:2d:6d:45:38:5c:70:ec:36:1e:65:63: 8d:8d:ec:1b:16:83:8c:a4:40:f6:2a:d8:02:1b:f9: 16:fa:a0:88:24:d4:eb:43:a3:b8:27:2d:47:fe:65: 5b:db:c5:77:42:f6:f2:e0:f2:35:4b:1f:9e:68:ff: 74:5e:90:2e:1f:b2:4e:19:1b:e6:ee:64:4f:97:c8: b8:33:56:25:b6:8d:e9:8d:c4:6c:97:26:c2:60:23: b7:20:45:e4:28:e6:25:27:1c:b8:9f:d3:c1:2a:d4: 57:fa:de:ab:28:d2:ab:19:2a:9e:cc:cd:d8:db:5e: 32:21:91:ed:4d:26:5c:e1:2c:97:e9:29:ce:84:8b: 86:e1:4b:e3:d0:8b:f7:4b:4c:c2:65:ec:98:45:0f: 5c:cd:b8:75:f8:c2:c4:b5:72:2c:51:62:39:cc:07: 92:33:09:60:2f:29:fe:18:e5:e7:fe:63:15:c3:8d: eb:24:6b:08:ab:80:8e:f3:c3:9b:4e:16:83:75:8d: 96:dd:df:f9:45:ad:d5:a0:f4:04:ce:e3:a4:2b:68: 74:1b:53:0d:fa:2f:32:78:2e:2a:4f:b6:0f:21:95: a0:2d:58:a2:fa:31:98:82:66:6b:f4:34:57:0c:71: aa:7b:b6:59:c1:a6:eb:c5:25:0e:ee:80:d5:10:b3: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:88:42:C0:16:C1:38:88:F6:CC:B2:FB:2B:10:2B:3D:F0:46:74 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:67:67:5f:09:c9:38:0b:c0:eb:92:e0:db:2e:39:fb:b9:de: 90:37:23:3a:b4:5e:90:9b:81:3b:5c:02:5f:4d:fe:3a:c9:70: 72:e0:8c:df:95:b7:fd:72:e8:34:56:02:4e:e2:cc:96:be:4a: 86:7b:83:f3:f0:ee:de:41:9e:aa:02:a3:69:e8:c5:40:40:89: 95:32:27:1c:97:3f:c4:d8:63:85:42:a9:ac:e2:c2:74:76:fb: 01:78:c9:64:9a:47:2c:45:9b:57:d0:e8:5d:d9:f0:25:75:b3: 20:6f:ce:33:49:89:75:35:ad:69:e9:ca:4f:fb:f7:95:4f:ef: 9c:83:c4:52:b6:ee:74:f6:dd:a8:9d:47:83:06:56:a6:66:48: 75:f6:e8:45:e6:d5:e7:70:37:41:27:db:97:cb:8e:80:8d:97: 84:e2:bc:bb:71:c5:a9:a2:87:18:b5:e7:8a:70:37:c6:8c:55: 26:36:bb:a6:86:7c:d1:0d:4b:69:4c:c1:f9:70:b8:93:e1:71: 76:db:c5:b7:03:ec:ec:99:1d:a1:7c:a3:10:58:30:31:0a:e6: 56:ce:0e:e9:8b:7d:8a:6a:4e:ae:2e:6d:74:15:5b:e0:9b:6d: d7:ff:e1:bf:fe:80:da:b1:4d:74:c5:ea:44:48:0f:ac:1b:5d: 24:eb:26:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwOTA3MDQ0NTQ3WhcNMjUwOTE0MDQ0NTQ2WjAYMRYwFAYD VQQDEw02OGJkMGRmYi01M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGhHLW1FOFxw7DYeZWONjewbFoOMpED2KtgCG/kW+qCIJNTrQ6O4Jy1H/mVb 28V3Qvby4PI1Sx+eaP90XpAuH7JOGRvm7mRPl8i4M1Ylto3pjcRslybCYCO3IEXk KOYlJxy4n9PBKtRX+t6rKNKrGSqezM3Y214yIZHtTSZc4SyX6SnOhIuG4Uvj0Iv3 S0zCZeyYRQ9czbh1+MLEtXIsUWI5zAeSMwlgLyn+GOXn/mMVw43rJGsIq4CO88Ob ThaDdY2W3d/5Ra3VoPQEzuOkK2h0G1MN+i8yeC4qT7YPIZWgLVii+jGYgmZr9DRX DHGqe7ZZwabrxSUO7oDVELOLPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKziELA FsE4iPbMsvsrECs98EZ0MB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbZ2dfCck4C8DrkuDbLjn7ud6QNyM6tF6Qm4E7XAJfTf46yXBy4Izf lbf9cug0VgJO4syWvkqGe4Pz8O7eQZ6qAqNp6MVAQImVMicclz/E2GOFQqms4sJ0 dvsBeMlkmkcsRZtX0Ohd2fAldbMgb84zSYl1Na1p6cpP+/eVT++cg8RStu509t2o nUeDBlamZkh19uhF5tXncDdBJ9uXy46AjZeE4ry7ccWpoocYteeKcDfGjFUmNrum hnzRDUtpTMH5cLiT4XF228W3A+zsmR2hfKMQWDAxCuZWzg7pi32Kak6uLm10FVvg m23X/+G//oDasU10xepESA+sG10k6yZK -----END CERTIFICATE-----Generated at Mon Sep 8 06:20:11 2025 by rpki-client