$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: TPhJpXq5CEtcapyPgX4G7Cipqq4E3jxVz6zWP2f77zs= Subject key identifier: A0:F9:84:2D:78:1A:28:1B:F1:7D:5C:FE:70:80:76:5B:08:6E:5D:3E Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 34C8 Signing time: Sun 24 Aug 2025 15:15:25 +0000 Manifest this update: Sun 24 Aug 2025 15:15:25 +0000 Manifest next update: Sun 31 Aug 2025 15:15:25 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: WjvkS1f4TZqVOtyPfRO34HkLMfm5zbARqPcbHQ4aygE=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Aug 24 15:15:25 2025 GMT Not After : Aug 31 15:15:25 2025 GMT Subject: CN=68ab2c8d-4af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:3a:2e:ff:df:11:1d:34:be:52:79:5d:44: f2:b6:3f:42:2f:e2:26:94:e3:e6:1e:9b:0b:43:ed: bf:1f:25:0d:92:5c:15:f6:82:e9:30:9d:12:e6:15: f6:23:36:59:b5:e4:57:e4:25:f9:c0:30:02:10:00: 9c:1b:85:0d:29:7c:4e:78:73:f3:3e:7f:7a:ed:3f: 89:9e:d3:28:da:cb:4a:ff:56:13:33:98:b5:a1:18: 0b:4b:78:2d:ec:39:9c:fc:5a:74:e5:18:da:b3:1b: 0c:3f:c0:96:8e:c9:b1:8f:8d:77:d0:5c:30:ad:9f: b0:0e:ab:00:89:02:88:8a:7e:12:c9:ae:61:a1:0a: 94:ad:8a:1c:0a:57:b1:e9:8a:9d:d3:6e:99:e4:c0: 78:11:75:2b:44:b6:ed:4c:0c:f0:7e:32:63:1e:d1: 74:4b:d6:f1:92:b2:d7:94:ac:6f:b5:fe:0f:21:54: 2f:29:93:06:12:d8:83:35:b9:cb:8d:ea:08:73:d8: 64:46:84:8e:fb:7b:5f:9b:2e:f3:e5:b5:ef:ed:b4: 15:f9:14:be:39:6e:33:73:c0:46:37:ba:aa:36:6d: 20:2c:11:91:e5:35:a1:61:a7:a3:04:9f:8b:9e:b8: 0a:a6:48:37:c6:d3:bf:23:a5:c8:4c:da:b1:3b:e3: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:84:2D:78:1A:28:1B:F1:7D:5C:FE:70:80:76:5B:08:6E:5D:3E X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:77:c0:f5:f4:19:5c:81:47:26:4d:1b:55:06:c6:63:9e:0c: 9a:f9:8f:80:87:15:7c:33:55:c7:37:47:2c:76:1e:3b:e6:09: 1d:0f:9a:40:be:af:e7:10:eb:99:59:1e:15:36:4d:f3:61:01: 53:46:8f:21:e5:9c:d8:f9:5b:7b:f1:e6:c1:a5:06:3d:40:1d: 8b:13:b5:98:60:1a:0b:02:0b:a7:34:cc:de:d6:f6:58:9a:87: 2c:5c:4d:90:0a:40:ea:d1:46:88:12:4f:b6:6c:9d:be:6a:5c: dc:58:b2:47:8f:31:fe:b2:1a:c2:e4:c0:28:36:c3:2e:e1:9f: 65:d3:ee:3a:cd:6e:16:a5:f0:e9:f2:06:d2:4f:30:69:c4:37: d0:93:96:d6:d6:15:4f:fd:d6:71:63:f7:25:80:cb:f6:29:d0: f3:01:01:fe:3e:a0:82:a1:c9:ce:3c:8a:26:88:e6:12:e6:e4: 95:3c:83:9a:f1:19:ea:d3:ae:6a:29:c4:d6:03:1d:6f:ca:38: ca:8d:99:81:02:96:f0:50:1c:52:25:71:ab:db:1d:ed:a4:df: eb:27:1e:98:ad:c4:0a:06:ae:53:59:43:47:24:70:2e:e8:32: fb:a0:05:5b:58:95:6c:de:cc:b8:e7:3d:81:c9:d6:15:69:d7: 39:7f:61:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwODI0MTUxNTI1WhcNMjUwODMxMTUxNTI1WjAYMRYwFAYD VQQDEw02OGFiMmM4ZC00YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth06Lv/fER00vlJ5XUTytj9CL+ImlOPmHpsLQ+2/HyUNklwV9oLpMJ0S5hX2 IzZZteRX5CX5wDACEACcG4UNKXxOeHPzPn967T+JntMo2stK/1YTM5i1oRgLS3gt 7Dmc/Fp05RjasxsMP8CWjsmxj4130FwwrZ+wDqsAiQKIin4Sya5hoQqUrYocClex 6Yqd026Z5MB4EXUrRLbtTAzwfjJjHtF0S9bxkrLXlKxvtf4PIVQvKZMGEtiDNbnL jeoIc9hkRoSO+3tfmy7z5bXv7bQV+RS+OW4zc8BGN7qqNm0gLBGR5TWhYaejBJ+L nrgKpkg3xtO/I6XITNqxO+OexQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD5hC14 Gigb8X1c/nCAdlsIbl0+MB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDd8D19BlcgUcmTRtVBsZjngya+Y+AhxV8M1XHN0csdh475gkdD5pA vq/nEOuZWR4VNk3zYQFTRo8h5ZzY+Vt78ebBpQY9QB2LE7WYYBoLAgunNMze1vZY mocsXE2QCkDq0UaIEk+2bJ2+alzcWLJHjzH+shrC5MAoNsMu4Z9l0+46zW4WpfDp 8gbSTzBpxDfQk5bW1hVP/dZxY/clgMv2KdDzAQH+PqCCocnOPIomiOYS5uSVPIOa 8Rnq065qKcTWAx1vyjjKjZmBApbwUBxSJXGr2x3tpN/rJx6YrcQKBq5TWUNHJHAu 6DL7oAVbWJVs3sy45z2BydYVadc5f2Fm -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:15 2025 by rpki-client