$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: 7Q/IJ2EbESRYZc/jqqTKS9V49Jh2OQSfZyeC7tPr1xQ= Subject key identifier: E1:99:65:92:30:1D:87:35:22:E5:D2:3C:D4:4E:9F:07:4D:20:D1:B0 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 03E8 Signing time: Tue 09 Sep 2025 00:38:34 +0000 Manifest this update: Tue 09 Sep 2025 00:38:33 +0000 Manifest next update: Tue 16 Sep 2025 00:38:33 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: UfeNPSa7YKstGv+I0UmyLVXBPwsMUQQzhy+NkNhrniY=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 4GJunqqaJYIF16cCsMPgPX96ELnXrrR7663nppGhNhg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: QyHX2tVKdXvBrNBfn6kDQfZOmLtDJUfGgQzAxEofZ58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Sep 9 00:38:33 2025 GMT Not After : Sep 16 00:38:33 2025 GMT Subject: CN=68bf7709-95de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:f6:79:11:09:29:01:7b:d5:29:b7:84:3f: 4c:20:27:a2:cc:c9:6e:8f:fa:74:bd:be:c9:3d:60: 1e:44:08:af:05:61:67:fa:01:bd:20:16:94:1d:77: ca:4b:66:93:5e:03:82:e8:f6:1d:de:ad:4b:30:6b: 48:67:f7:8b:7a:2a:e7:94:36:fc:e3:ba:80:ae:6c: 91:a1:eb:77:a3:1f:a4:e7:c4:59:ac:49:0b:68:69: ac:a3:db:7d:50:da:61:ea:51:24:a1:e1:21:a3:24: a0:83:a3:14:25:39:fd:44:90:18:2b:c2:26:45:dd: 68:66:68:fa:f4:31:fd:d7:e7:4a:ee:1f:ad:4e:b2: ef:04:04:ab:79:df:39:c3:15:f7:7e:f1:d0:a0:ee: 22:93:42:e3:c5:69:84:81:0e:3f:29:20:73:54:4d: 27:3c:94:72:ba:80:7c:99:16:d3:36:0f:a3:1a:a5: 4c:25:f8:00:c2:a0:1c:46:20:7a:5a:73:7d:2c:42: 4e:0a:6c:48:91:bb:3f:14:a6:44:a8:fc:88:35:8b: c3:dc:c8:2c:51:f7:16:34:89:bc:c3:e1:da:64:ab: 0e:61:ba:34:d7:80:31:ec:8e:00:32:32:b7:ba:5d: 31:6f:a7:66:ba:76:7f:17:35:ce:55:dd:0e:f6:1c: 7d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:99:65:92:30:1D:87:35:22:E5:D2:3C:D4:4E:9F:07:4D:20:D1:B0 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2e:54:91:8c:db:04:4a:e8:0b:e8:86:aa:60:c1:bd:a0:2a: 9f:7e:c4:43:e9:36:93:d9:39:01:9c:eb:50:f9:2e:e8:0b:84: b5:37:98:27:17:2b:f1:5b:9c:e5:82:7f:35:a8:3b:c7:e9:20: 1c:12:d0:93:70:bb:ab:d9:92:81:5f:e1:a3:fa:4c:22:54:5e: 92:84:05:ed:b5:9d:ef:19:19:44:68:ca:c3:4d:57:bf:69:e0: 64:bf:e1:4d:aa:df:db:f1:95:cb:e7:70:69:4d:ed:7f:f7:ba: 34:a8:d7:99:f8:c6:28:c6:35:ae:f2:13:39:a4:8a:fe:d5:70: b2:fd:8d:f1:cb:48:78:96:85:5b:d4:82:1b:0d:60:9b:c1:8e: d8:54:ac:38:c5:b3:fa:d4:b5:ce:33:cf:99:79:3c:16:7b:59: c4:96:a9:78:f4:d4:50:5c:c0:cf:ed:67:74:29:35:87:8b:29: 7c:c2:93:e8:8a:dc:81:20:d5:2c:45:a4:49:9e:b4:ed:6f:f4: e1:0d:9b:20:ad:fc:c2:f5:01:8b:d9:0c:82:f2:5b:e3:23:83: 3d:5d:45:24:c0:3f:7a:ff:af:fe:59:ff:0a:9d:ff:b5:78:a6: 22:a5:6f:b8:f8:55:47:7a:80:e5:a5:94:2c:d1:3f:64:31:61: 28:d7:5f:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwOTA5MDAzODMzWhcNMjUwOTE2MDAzODMzWjAYMRYwFAYD VQQDEw02OGJmNzcwOS05NWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf/2eREJKQF71Sm3hD9MICeizMluj/p0vb7JPWAeRAivBWFn+gG9IBaUHXfK S2aTXgOC6PYd3q1LMGtIZ/eLeirnlDb847qArmyRoet3ox+k58RZrEkLaGmso9t9 UNph6lEkoeEhoySgg6MUJTn9RJAYK8ImRd1oZmj69DH91+dK7h+tTrLvBASred85 wxX3fvHQoO4ik0LjxWmEgQ4/KSBzVE0nPJRyuoB8mRbTNg+jGqVMJfgAwqAcRiB6 WnN9LEJOCmxIkbs/FKZEqPyINYvD3MgsUfcWNIm8w+HaZKsOYbo014Ax7I4AMjK3 ul0xb6dmunZ/FzXOVd0O9hx9hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGZZZIw HYc1IuXSPNROnwdNINGwMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCILlSRjNsESugL6IaqYMG9oCqffsRD6TaT2TkBnOtQ+S7oC4S1N5gn FyvxW5zlgn81qDvH6SAcEtCTcLur2ZKBX+Gj+kwiVF6ShAXttZ3vGRlEaMrDTVe/ aeBkv+FNqt/b8ZXL53BpTe1/97o0qNeZ+MYoxjWu8hM5pIr+1XCy/Y3xy0h4loVb 1IIbDWCbwY7YVKw4xbP61LXOM8+ZeTwWe1nElql49NRQXMDP7Wd0KTWHiyl8wpPo ityBINUsRaRJnrTtb/ThDZsgrfzC9QGL2QyC8lvjI4M9XUUkwD96/6/+Wf8Knf+1 eKYipW+4+FVHeoDlpZQs0T9kMWEo118z -----END CERTIFICATE-----Generated at Tue Sep 9 16:36:16 2025 by rpki-client