$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json) Hash identifier: BUjBbHWd2l4Fngj9T9uFCmTr6suyK1PncgFf7d2B7/Q= Subject key identifier: 9D:9E:61:71:E5:69:C2:72:EE:B0:DB:F7:8F:42:6D:C8:81:71:D6:54 Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft Manifest number: 01AE Signing time: Tue 09 Sep 2025 03:13:50 +0000 Manifest this update: Tue 09 Sep 2025 03:13:50 +0000 Manifest next update: Tue 16 Sep 2025 03:13:50 +0000 Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: m0EKl4oPPXHOg5I4JOys+GNrE7IOSg766oLFhMdFrl8=) 2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: bEYOw16YffGMy8yneXxHr3Zrg83Aj3Be9wOSROcVCMY=) 3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: 43u6VU4uVf/bt9Gf14qd7/mI+N905JTL9noJWyloshU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Validity Not Before: Sep 9 03:13:50 2025 GMT Not After : Sep 16 03:13:50 2025 GMT Subject: CN=68bf9b6e-e77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:2d:e4:a4:cd:0c:e3:d8:76:d6:b1:03:00: be:a5:fd:6c:4b:f5:8c:4f:6f:46:ea:e6:6d:41:2f: 42:4b:4e:3b:1a:15:52:5c:c5:e5:82:14:d4:9a:64: 61:bb:83:0a:ab:53:9b:2c:c9:4b:4f:04:08:a4:d3: e2:36:af:ea:f4:d0:f6:d3:32:55:64:92:2c:bd:44: 7d:58:70:80:4d:02:3a:24:9b:c9:f7:aa:37:d5:c9: fe:fa:2e:34:88:80:78:79:10:83:bf:ac:ac:c0:5c: b6:f2:ab:15:6a:5d:1d:75:0f:7d:d6:96:42:37:da: 50:b8:e3:50:da:37:18:02:df:2c:61:c2:78:ed:72: 6d:7f:98:48:00:48:01:cd:36:05:33:92:0c:d9:3f: c9:24:dd:cd:9f:d4:ef:9a:a9:0d:54:df:98:b5:3c: 78:1b:eb:42:ef:66:80:41:e2:b5:b2:a6:05:0c:13: 52:68:d7:17:9a:36:27:e6:ad:3a:20:c8:dd:de:37: 1f:2a:2d:55:17:1e:5f:27:5c:5b:ce:5c:3a:75:59: ee:41:ac:63:78:ea:a6:fd:bb:23:6a:ad:36:81:f1: 8d:27:01:42:9f:b6:b9:4b:16:00:51:9e:41:95:3c: 0d:9a:af:75:02:dd:07:b2:e3:2f:61:ac:b7:d7:00: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9E:61:71:E5:69:C2:72:EE:B0:DB:F7:8F:42:6D:C8:81:71:D6:54 X509v3 Authority Key Identifier: keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9d:47:64:15:85:8a:56:f3:13:6d:e3:6c:15:ac:b1:ba:e9: e7:c0:b8:67:22:92:92:18:75:ee:2e:78:5e:24:ed:83:55:f5: 5f:40:de:12:a0:6b:9b:b8:5f:24:fe:62:65:fd:14:c0:bd:9e: aa:71:d2:15:3c:f9:63:b2:e7:32:7f:6b:a3:f9:64:18:31:13: cd:55:0f:8a:d7:5a:5a:3d:da:0a:d0:c5:f7:62:82:d6:4f:3a: 58:e4:94:c1:35:20:77:28:fa:8f:b7:19:69:a5:da:06:72:2d: 9b:c2:96:4c:75:a3:75:77:6e:40:58:32:17:de:1e:da:16:b3: a2:63:7a:9d:b7:72:de:0a:6a:f0:c6:d0:8d:f6:fd:bc:13:74: 27:12:72:9d:52:b9:a5:5f:cb:fc:25:39:a8:45:a1:54:4b:77: 7b:08:3f:68:39:0c:f0:cd:de:65:be:62:f7:15:d1:6f:b1:6c: f0:bb:55:06:97:4c:1d:57:e8:f8:c9:97:8a:31:fe:76:f6:d3: d1:b8:0d:a1:e4:f5:1d:0d:af:98:81:c9:d5:77:54:43:75:3d: 68:e8:e4:36:3b:16:30:ae:03:07:ac:f6:da:f3:79:aa:b8:3d: 70:12:59:8b:13:85:fd:c8:46:81:cf:c1:2d:41:89:d1:48:6b: 96:ed:06:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RUMxMTAvBgNVBAUTKDI2QjJDODQ2MkZFQTFEQTUxNDE2NkI1QjEzOTBBRDBD QzI3N0E1QTgwHhcNMjUwOTA5MDMxMzUwWhcNMjUwOTE2MDMxMzUwWjAYMRYwFAYD VQQDEw02OGJmOWI2ZS1lNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjIt5KTNDOPYdtaxAwC+pf1sS/WMT29G6uZtQS9CS047GhVSXMXlghTUmmRh u4MKq1ObLMlLTwQIpNPiNq/q9ND20zJVZJIsvUR9WHCATQI6JJvJ96o31cn++i40 iIB4eRCDv6yswFy28qsVal0ddQ991pZCN9pQuONQ2jcYAt8sYcJ47XJtf5hIAEgB zTYFM5IM2T/JJN3Nn9TvmqkNVN+YtTx4G+tC72aAQeK1sqYFDBNSaNcXmjYn5q06 IMjd3jcfKi1VFx5fJ1xbzlw6dVnuQaxjeOqm/bsjaq02gfGNJwFCn7a5SxYAUZ5B lTwNmq91At0HsuMvYay31wBWjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2eYXHl acJy7rDb949CbciBcdZUMB8GA1UdIwQYMBaAFCayyEYv6h2lFBZrWxOQrQzCd6Wo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFQy8wNTMxNURFRUZE REIxMUVEQTAzMkJGNDJDNEY5QUUwMi9KckxJUmlfcUhhVVVGbXRiRTVDdERNSjNw YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyTElSaV9xSGFVVUZtdGJFNUN0RE1KM3BhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFQy8wNTMxNURFRUZEREIxMUVEQTAzMkJGNDJDNEY5QUUwMi9KckxJUmlfcUhh VVVGbXRiRTVDdERNSjNwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAonUdkFYWKVvMTbeNsFayxuunnwLhnIpKSGHXuLnheJO2DVfVfQN4S oGubuF8k/mJl/RTAvZ6qcdIVPPljsucyf2uj+WQYMRPNVQ+K11paPdoK0MX3YoLW TzpY5JTBNSB3KPqPtxlppdoGci2bwpZMdaN1d25AWDIX3h7aFrOiY3qdt3LeCmrw xtCN9v28E3QnEnKdUrmlX8v8JTmoRaFUS3d7CD9oOQzwzd5lvmL3FdFvsWzwu1UG l0wdV+j4yZeKMf529tPRuA2h5PUdDa+YgcnVd1RDdT1o6OQ2OxYwrgMHrPba83mq uD1wElmLE4X9yEaBz8EtQYnRSGuW7QZJ -----END CERTIFICATE-----Generated at Tue Sep 9 07:37:29 2025 by rpki-client