$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: UwOrgkzw+iU+N/b5tJmroX4atXylTttuqhuxD8Vv+/Y= Subject key identifier: B8:34:B0:15:E6:81:1B:A2:F1:AC:EF:96:D1:DD:B2:F6:7E:9D:60:CE Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0EAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0EA0 Signing time: Mon 08 Sep 2025 17:42:47 +0000 Manifest this update: Mon 08 Sep 2025 17:42:46 +0000 Manifest next update: Mon 15 Sep 2025 17:42:46 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: TuiHm+Yf+TW8iJtDFqEuNAFOSMyfMaYQA8XgjQ4jybY=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 8/+2CfJXmYqPi0mhCMFrcurlLwZm0SOUBFUC6aCqVwY=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: 1G+5ZDyz2QsGf1HTn6iCWFVSURJLuJWTrhUJ5NvAbhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3759 (0xeaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Sep 8 17:42:46 2025 GMT Not After : Sep 15 17:42:46 2025 GMT Subject: CN=68bf1597-101e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:a0:63:81:a6:41:be:2b:c4:84:84:67:32: ce:29:d4:04:9b:66:85:56:33:9e:bf:0f:6f:24:7e: 7a:ae:f2:c3:86:56:da:66:7d:8b:7b:66:b7:8a:d7: 81:22:f7:8b:10:a6:4f:a8:ec:4e:72:72:09:8e:ea: 25:07:20:fa:e3:c8:9f:2a:b6:17:23:cb:b9:ea:a6: af:5e:02:e2:2b:9a:fb:ad:85:58:da:d6:49:b9:1b: f4:cf:29:f0:4e:06:70:bf:28:08:80:fd:e6:80:84: 86:2e:c4:ba:1b:4b:20:0c:64:dd:49:50:be:ce:76: c9:c9:08:27:2f:73:2d:f5:f6:f1:b3:a8:a7:c0:98: b9:89:8a:62:3d:09:53:58:dd:5f:a3:05:4d:74:59: c8:c4:84:07:c1:ff:c0:cb:f7:1a:bb:d6:a9:8d:2b: 52:bc:b3:b6:e0:1c:39:0b:79:04:79:3d:e3:0e:21: cf:f3:60:ba:95:f5:3c:71:c5:a8:c1:56:52:3a:30: 56:f0:64:ea:7d:07:ac:0e:ad:57:7a:bd:4a:2c:e0: f1:da:69:13:59:93:1f:9f:2b:dc:42:d6:6b:74:0f: 76:cc:2b:95:63:dd:d9:9f:15:da:54:26:bd:5b:7f: 86:6d:8a:4d:73:a4:38:41:1d:f8:ef:16:b3:82:cb: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:34:B0:15:E6:81:1B:A2:F1:AC:EF:96:D1:DD:B2:F6:7E:9D:60:CE X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4f:28:b1:d8:c6:fd:b0:b3:44:02:c0:5c:5f:58:50:dc:a1: ec:96:98:86:a6:87:96:66:db:bd:c9:79:1d:0a:bf:1d:4b:c8: f2:e8:5a:8c:99:40:33:b0:b6:09:f8:83:41:eb:cb:d0:e5:6b: b7:bc:9d:0c:c6:f9:d6:ca:ce:1b:12:2f:77:a5:31:10:14:2b: 10:ef:f4:e3:1c:f4:b0:40:3d:36:34:90:51:56:ba:86:8d:43: d8:4e:e6:ae:b0:21:ab:03:0b:54:0f:e0:fd:ea:ee:f8:37:24: ea:d9:c2:8f:f1:39:82:62:4d:86:99:19:ee:e6:96:a8:07:15: 6d:e8:a7:3c:69:b4:ca:9b:db:61:ef:6c:63:d0:7f:2b:c0:fb: 2b:23:0c:8c:2a:4e:63:dc:ea:29:3a:4a:af:ca:1b:25:b2:b9: 56:39:8b:04:e3:a2:d4:0f:71:54:90:98:18:1d:52:32:43:75: 89:f4:1e:9f:0f:02:74:26:1d:10:b2:7f:ae:58:f2:3b:b0:da: 1a:8c:aa:d9:3b:f7:af:bc:aa:9d:36:72:9c:29:83:96:7b:09: 44:38:b5:05:5d:74:f9:72:04:0b:0e:0c:4d:bb:2d:4c:d8:73: 91:d1:12:06:3f:cb:fe:a8:64:8e:b9:70:85:83:d7:35:ce:e6: 8a:ce:12:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjUwOTA4MTc0MjQ2WhcNMjUwOTE1MTc0MjQ2WjAYMRYwFAYD VQQDEw02OGJmMTU5Ny0xMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTigY4GmQb4rxISEZzLOKdQEm2aFVjOevw9vJH56rvLDhlbaZn2Le2a3iteB IveLEKZPqOxOcnIJjuolByD648ifKrYXI8u56qavXgLiK5r7rYVY2tZJuRv0zynw TgZwvygIgP3mgISGLsS6G0sgDGTdSVC+znbJyQgnL3Mt9fbxs6inwJi5iYpiPQlT WN1fowVNdFnIxIQHwf/Ay/cau9apjStSvLO24Bw5C3kEeT3jDiHP82C6lfU8ccWo wVZSOjBW8GTqfQesDq1Xer1KLODx2mkTWZMfnyvcQtZrdA92zCuVY93ZnxXaVCa9 W3+GbYpNc6Q4QR347xazgsszZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg0sBXm gRui8azvltHdsvZ+nWDOMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdTyix2Mb9sLNEAsBcX1hQ3KHslpiGpoeWZtu9yXkdCr8dS8jy6FqM mUAzsLYJ+INB68vQ5Wu3vJ0MxvnWys4bEi93pTEQFCsQ7/TjHPSwQD02NJBRVrqG jUPYTuausCGrAwtUD+D96u74NyTq2cKP8TmCYk2GmRnu5paoBxVt6Kc8abTKm9th 72xj0H8rwPsrIwyMKk5j3OopOkqvyhslsrlWOYsE46LUD3FUkJgYHVIyQ3WJ9B6f DwJ0Jh0Qsn+uWPI7sNoajKrZO/evvKqdNnKcKYOWewlEOLUFXXT5cgQLDgxNuy1M 2HOR0RIGP8v+qGSOuXCFg9c1zuaKzhKN -----END CERTIFICATE-----Generated at Tue Sep 9 13:32:10 2025 by rpki-client