$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: 4vWHPkOUu01DfHknzpoEghHA4oJeTlT304jSo+No4yY= Subject key identifier: C4:C8:13:D2:5F:A2:7F:EA:55:9E:BF:78:F6:AE:DD:DC:4B:49:D6:A9 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 02DB Signing time: Thu 21 Aug 2025 01:30:12 +0000 Manifest this update: Thu 21 Aug 2025 01:30:11 +0000 Manifest next update: Thu 28 Aug 2025 01:30:11 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: eZmlSQK+hyqPkVJ5wmeH1r7IrFi/+SvmYjs7L6zoYg8=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: G/i4Pg8jdMHmXjQNkM+eJFlsVzQq6gbZlmc97MQExQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Aug 21 01:30:11 2025 GMT Not After : Aug 28 01:30:11 2025 GMT Subject: CN=68a676a3-4664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:29:3a:c0:7b:97:8c:0e:e7:d7:62:b4:cb: d2:05:44:46:f7:ff:ab:f9:f5:8a:f6:c3:a4:49:fc: b0:d3:be:be:32:e1:a9:9e:8b:10:a6:72:4e:b8:71: 98:c5:ad:d5:1a:00:92:8f:c6:dc:4c:a6:e7:16:e4: fb:70:92:e0:5d:78:c0:6e:82:54:06:9f:4c:e2:f8: 4e:56:ea:73:35:e6:95:c2:bb:ab:dc:6b:f1:7d:39: 52:9a:9c:4a:64:b5:cb:be:0d:0b:7b:ce:e7:5c:9a: 4d:01:d7:00:c5:13:7c:45:90:98:6a:c0:a3:c9:4f: bf:28:b0:42:f1:dc:c2:22:99:41:7e:35:45:72:3d: b1:5d:dc:19:01:91:bd:bc:61:8b:9c:b1:a4:1c:bd: 38:bc:44:62:66:86:74:0c:76:17:6d:7d:c5:c6:f9: f8:1a:d2:27:7a:d5:e1:dd:00:95:8a:32:23:c1:d7: ce:9d:f3:da:dc:07:85:7b:55:71:f4:61:58:10:44: 32:42:81:26:f5:4c:23:b2:56:a4:e6:d2:73:9d:19: 78:97:44:2f:b2:d0:7f:a7:98:f3:81:57:ab:69:e4: 5d:0e:c0:bb:37:f2:69:77:9e:e6:7e:74:61:f6:33: e0:b7:50:f3:2d:82:cc:67:a4:bb:b5:19:7a:17:a7: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:13:D2:5F:A2:7F:EA:55:9E:BF:78:F6:AE:DD:DC:4B:49:D6:A9 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:68:90:7b:09:c0:88:df:f5:8e:88:97:39:fd:37:14:93:6c: 8c:b0:cc:08:d9:26:1a:81:c0:de:5b:c5:05:d8:f6:3c:87:6a: 7a:f2:43:2f:89:22:95:24:ee:6a:f4:95:eb:16:cf:ec:07:60: 21:6f:f5:ae:a2:f7:13:d5:7c:e6:6a:b4:a4:84:94:82:eb:1d: 7c:28:2e:dc:b7:d0:0d:4b:25:4d:1e:e5:b1:40:4b:4e:d6:e6: fe:c2:ee:2f:88:bc:11:c7:c0:13:ee:ef:d5:00:4e:73:8e:a3: 96:d1:fe:25:a4:09:3a:64:60:3c:ea:d1:7d:70:1f:f5:be:39: 44:80:90:22:15:bd:ee:91:d2:1c:79:bd:f5:29:8f:7e:64:f2: e3:16:42:cf:fa:dd:25:61:e6:22:f4:c3:0b:29:00:bd:a4:dc: ca:4d:5e:da:35:22:bc:62:08:d4:cc:67:08:25:1c:87:54:78: 9c:b8:eb:32:b6:80:9d:14:1f:5b:b5:bc:8d:71:03:e9:d1:c6: 7d:d8:ca:f6:58:a6:e0:eb:db:fd:c2:98:af:16:56:65:b7:d6: a1:43:25:cb:9f:0b:35:45:8a:ad:23:44:32:3a:29:e6:d4:1f: 35:f7:45:53:ad:96:8d:54:73:d5:25:3c:9f:77:7c:00:14:11: 81:d4:bd:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUwODIxMDEzMDExWhcNMjUwODI4MDEzMDExWjAYMRYwFAYD VQQDEw02OGE2NzZhMy00NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynIpOsB7l4wO59ditMvSBURG9/+r+fWK9sOkSfyw076+MuGpnosQpnJOuHGY xa3VGgCSj8bcTKbnFuT7cJLgXXjAboJUBp9M4vhOVupzNeaVwrur3GvxfTlSmpxK ZLXLvg0Le87nXJpNAdcAxRN8RZCYasCjyU+/KLBC8dzCIplBfjVFcj2xXdwZAZG9 vGGLnLGkHL04vERiZoZ0DHYXbX3Fxvn4GtInetXh3QCVijIjwdfOnfPa3AeFe1Vx 9GFYEEQyQoEm9Uwjslak5tJznRl4l0QvstB/p5jzgVeraeRdDsC7N/Jpd57mfnRh 9jPgt1DzLYLMZ6S7tRl6F6fyFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTIE9Jf on/qVZ6/ePau3dxLSdapMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlaJB7CcCI3/WOiJc5/TcUk2yMsMwI2SYagcDeW8UF2PY8h2p68kMv iSKVJO5q9JXrFs/sB2Ahb/WuovcT1XzmarSkhJSC6x18KC7ct9ANSyVNHuWxQEtO 1ub+wu4viLwRx8AT7u/VAE5zjqOW0f4lpAk6ZGA86tF9cB/1vjlEgJAiFb3ukdIc eb31KY9+ZPLjFkLP+t0lYeYi9MMLKQC9pNzKTV7aNSK8YgjUzGcIJRyHVHicuOsy toCdFB9btbyNcQPp0cZ92Mr2WKbg69v9wpivFlZlt9ahQyXLnws1RYqtI0QyOinm 1B8190VTrZaNVHPVJTyfd3wAFBGB1L1P -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:27 2025 by rpki-client