$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: T8T6Rod6WZqVPL/btledgZnAIwwwyXLcjgV9umnG6Rs= Subject key identifier: DE:9E:8B:85:F3:68:DC:70:7C:6D:48:74:22:B7:B0:70:32:69:8D:F9 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 02B0 Signing time: Tue 09 Sep 2025 01:38:24 +0000 Manifest this update: Tue 09 Sep 2025 01:38:24 +0000 Manifest next update: Tue 16 Sep 2025 01:38:24 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: tN3amEtZqlR9bift6nMNEKnC0lI7w7hMF01Vw4frmS8=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Sep 9 01:38:24 2025 GMT Not After : Sep 16 01:38:24 2025 GMT Subject: CN=68bf8510-6366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:27:59:eb:81:25:04:27:d9:e0:4e:11:93: 09:c4:39:94:83:82:69:d9:ce:e8:47:e4:38:1c:f4: a4:5f:29:d4:89:d1:1b:bd:9b:31:e1:7f:ac:2d:c7: 10:89:62:d8:ea:5f:af:53:cc:60:8a:d6:e7:d9:2f: d9:ce:a4:94:fd:95:18:9f:9c:e2:4b:dc:6d:64:2c: e3:8c:18:29:7a:45:08:8f:5a:51:52:e8:bf:64:e1: 9c:af:80:88:e6:d3:0e:dc:b5:88:81:13:96:b3:e5: e1:ce:56:fc:21:f0:a7:95:e8:69:e3:e2:38:56:dc: 4c:23:16:db:4e:4c:59:28:f8:bf:cc:3a:e9:50:8b: 73:f9:c6:f7:29:ef:5b:2b:69:7d:63:48:a8:06:19: e4:a9:a3:4a:b3:5c:05:89:6e:01:51:63:45:5f:68: 9c:61:e9:23:25:8c:9f:1d:ed:44:ae:35:b0:65:21: 23:be:fa:db:42:fa:63:ff:1d:5a:60:97:f4:55:b5: 29:3c:29:74:bb:ca:32:99:d9:c8:e9:7e:0b:c6:8a: aa:51:b2:bb:a1:97:25:c4:a4:5d:ec:09:a1:c2:63: e2:5f:2e:9f:45:89:42:d7:79:e8:59:7d:7b:15:f3: 52:57:20:78:de:05:f4:7c:54:ca:0a:95:a3:ee:bd: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9E:8B:85:F3:68:DC:70:7C:6D:48:74:22:B7:B0:70:32:69:8D:F9 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:cc:64:14:6d:48:14:5b:f4:81:d8:6a:f1:07:84:41:36:0b: a3:22:36:21:cd:62:71:29:fc:18:1e:29:69:40:ca:5c:b3:96: 4b:6e:e1:66:ad:06:1b:84:76:ad:db:03:e5:1a:4b:b6:74:97: d0:93:ce:5a:06:55:62:0b:9c:68:cf:5b:f1:84:16:1e:e6:19: 2b:09:f1:9f:df:e2:99:4b:b9:7c:07:06:b5:82:a2:c7:86:33: 63:2c:c5:64:8d:75:a5:24:7a:76:d7:b6:5d:69:03:41:14:9b: c1:ba:17:f0:2c:7b:12:d9:84:09:1f:f8:cc:fc:ab:38:6e:11: 42:20:4e:9b:40:d9:c8:82:0d:6c:65:16:c4:7e:b0:4c:4c:ae: fd:35:07:35:85:e2:9f:66:28:a2:47:f2:89:ab:b9:7a:18:c7: 6c:9f:03:97:45:d9:bb:cc:73:6c:33:5c:27:e5:0a:eb:a5:12: 8b:ed:f8:c9:30:48:5f:ea:49:1d:d5:57:be:e5:de:b6:1f:af: b1:8a:96:6b:7e:58:32:c1:6a:0e:8c:06:6b:07:3f:2f:7a:78: 98:d1:67:d9:66:19:91:c2:a2:6c:62:81:3d:88:34:e3:f9:49: 48:08:f8:2c:87:1a:31:04:f4:23:33:52:ea:01:08:43:f4:b2: c0:1e:1d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUwOTA5MDEzODI0WhcNMjUwOTE2MDEzODI0WjAYMRYwFAYD VQQDEw02OGJmODUxMC02MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOMnWeuBJQQn2eBOEZMJxDmUg4Jp2c7oR+Q4HPSkXynUidEbvZsx4X+sLccQ iWLY6l+vU8xgitbn2S/ZzqSU/ZUYn5ziS9xtZCzjjBgpekUIj1pRUui/ZOGcr4CI 5tMO3LWIgROWs+Xhzlb8IfCnlehp4+I4VtxMIxbbTkxZKPi/zDrpUItz+cb3Ke9b K2l9Y0ioBhnkqaNKs1wFiW4BUWNFX2icYekjJYyfHe1ErjWwZSEjvvrbQvpj/x1a YJf0VbUpPCl0u8oymdnI6X4LxoqqUbK7oZclxKRd7AmhwmPiXy6fRYlC13noWX17 FfNSVyB43gX0fFTKCpWj7r0/awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6ei4Xz aNxwfG1IdCK3sHAyaY35MB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnzGQUbUgUW/SB2GrxB4RBNgujIjYhzWJxKfwYHilpQMpcs5ZLbuFm rQYbhHat2wPlGku2dJfQk85aBlViC5xoz1vxhBYe5hkrCfGf3+KZS7l8Bwa1gqLH hjNjLMVkjXWlJHp217ZdaQNBFJvBuhfwLHsS2YQJH/jM/Ks4bhFCIE6bQNnIgg1s ZRbEfrBMTK79NQc1heKfZiiiR/KJq7l6GMdsnwOXRdm7zHNsM1wn5QrrpRKL7fjJ MEhf6kkd1Ve+5d62H6+xipZrflgywWoOjAZrBz8veniY0WfZZhmRwqJsYoE9iDTj +UlICPgshxoxBPQjM1LqAQhD9LLAHh36 -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:51 2025 by rpki-client