$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: ++xqCfMU51hrDw/rcecuPMMr+wIpdnaOo8TrZAtTJGY= Subject key identifier: 04:B2:CB:0F:13:2B:9E:38:51:0C:38:61:50:15:52:1D:52:F7:57:E3 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 01F9 Signing time: Tue 09 Sep 2025 02:33:22 +0000 Manifest this update: Tue 09 Sep 2025 02:33:22 +0000 Manifest next update: Tue 16 Sep 2025 02:33:22 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: mFLr9bTrKAHj1k7XNeIMtRL8NeDmBhUgs+y2Tjnv3W8=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: S5aqnIp8wBDzzuC/I2D/TZu1GPCH8szm3/gxMup7cPA=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: cOb2KOzEfKEZcsNXW8uSYWT5P5sqT/oMWjbiB66z740=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Sep 9 02:33:22 2025 GMT Not After : Sep 16 02:33:22 2025 GMT Subject: CN=68bf91f2-17e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:62:b6:0a:2f:15:c8:dd:b3:9a:92:ec:de: 49:dd:14:51:77:46:6d:1d:cf:b1:c7:61:9a:4e:0b: bd:02:9f:eb:bc:9c:42:9f:79:81:40:6a:62:d3:7f: 51:fe:b8:f7:7e:9f:24:1b:f5:97:79:16:e8:bd:37: bf:fc:64:da:35:66:5d:a7:61:29:a9:0d:7b:52:ed: f6:5b:3d:db:84:18:f2:d4:ab:94:bc:47:d2:c2:a3: a7:d8:3c:35:91:1f:63:ae:13:e3:f2:d6:fc:e2:22: 1f:ae:c2:6d:ac:8b:d5:db:3e:47:58:4b:85:cf:92: fe:2a:74:c3:a3:3d:4a:46:67:b0:bf:e6:fe:73:68: 66:cb:85:72:d7:e5:ab:99:96:77:09:8b:bd:10:eb: 22:3c:fc:d2:5a:6b:38:10:b7:ba:3b:77:7e:60:a1: bd:92:7a:c4:84:4c:64:02:2a:d3:a0:b5:d0:0e:c5: 3b:43:96:fa:7a:a1:ef:73:ad:e3:3b:6d:cd:f9:9a: c6:28:93:ac:75:23:ef:bb:3f:d2:5b:ed:0a:56:7f: 9f:80:e2:6a:79:54:77:f6:1d:c4:8f:bf:47:cd:00: 69:dd:06:b6:69:b4:91:a2:d0:74:04:c8:e0:a1:df: b1:0d:52:4d:06:55:4f:5b:5f:a3:ff:72:54:d3:5c: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:CB:0F:13:2B:9E:38:51:0C:38:61:50:15:52:1D:52:F7:57:E3 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:80:81:cc:2d:89:b6:b3:2b:c5:70:00:c0:a7:f7:b3:86:d4: 1a:f7:53:98:16:41:54:fe:96:9a:9d:5a:ba:9a:f6:51:54:d8: 6c:76:9c:e8:b4:29:44:a5:8b:ee:82:6e:43:66:16:a7:0c:54: 00:d7:01:64:11:e5:68:65:8e:8c:3e:59:df:06:09:ab:1e:f7: 91:3f:29:e2:17:28:59:f3:fa:cd:5f:6b:16:e8:00:ca:5d:a3: 5a:5a:ea:2f:fe:46:de:0d:71:84:8e:a5:e9:48:41:79:4f:f3: 22:f5:52:22:dc:f7:6d:e9:a2:51:c9:8b:cf:24:15:c0:29:73: 96:c2:52:f4:22:9a:9b:3c:5c:47:e4:b2:2a:99:62:8f:fd:ba: fa:6c:6a:fe:d8:a5:3f:7c:1b:81:8b:37:0c:6a:00:33:d9:a7: a5:c6:5e:d6:dd:7c:a9:b7:f3:d8:ee:b8:54:a9:28:11:68:48: 9e:e1:c1:d5:dc:73:01:c3:96:71:ce:ab:50:af:30:ca:35:86: 89:38:10:22:7e:4d:29:ae:3f:32:5a:cf:a3:13:1e:07:51:23: 13:6a:51:f6:bd:73:39:73:2f:b5:6c:f0:0c:a5:a1:fd:34:86: e3:23:76:a2:36:db:2d:79:79:c9:56:8d:63:9c:0b:50:c2:f9: 83:ba:85:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUwOTA5MDIzMzIyWhcNMjUwOTE2MDIzMzIyWjAYMRYwFAYD VQQDEw02OGJmOTFmMi0xN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DNitgovFcjds5qS7N5J3RRRd0ZtHc+xx2GaTgu9Ap/rvJxCn3mBQGpi039R /rj3fp8kG/WXeRbovTe//GTaNWZdp2EpqQ17Uu32Wz3bhBjy1KuUvEfSwqOn2Dw1 kR9jrhPj8tb84iIfrsJtrIvV2z5HWEuFz5L+KnTDoz1KRmewv+b+c2hmy4Vy1+Wr mZZ3CYu9EOsiPPzSWms4ELe6O3d+YKG9knrEhExkAirToLXQDsU7Q5b6eqHvc63j O23N+ZrGKJOsdSPvuz/SW+0KVn+fgOJqeVR39h3Ej79HzQBp3Qa2abSRotB0BMjg od+xDVJNBlVPW1+j/3JU01yBqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASyyw8T K544UQw4YVAVUh1S91fjMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRgIHMLYm2syvFcADAp/ezhtQa91OYFkFU/paanVq6mvZRVNhsdpzo tClEpYvugm5DZhanDFQA1wFkEeVoZY6MPlnfBgmrHveRPyniFyhZ8/rNX2sW6ADK XaNaWuov/kbeDXGEjqXpSEF5T/Mi9VIi3Pdt6aJRyYvPJBXAKXOWwlL0IpqbPFxH 5LIqmWKP/br6bGr+2KU/fBuBizcMagAz2aelxl7W3Xypt/PY7rhUqSgRaEie4cHV 3HMBw5ZxzqtQrzDKNYaJOBAifk0prj8yWs+jEx4HUSMTalH2vXM5cy+1bPAMpaH9 NIbjI3aiNtsteXnJVo1jnAtQwvmDuoX0 -----END CERTIFICATE-----Generated at Tue Sep 9 18:29:36 2025 by rpki-client