$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: +nP0f+qWKeZhDFn0SsoetberNBUJ1LaM51h1RvLZ+LE= Subject key identifier: BB:E4:BE:5E:72:E4:FF:63:CD:3B:E1:C0:C1:EB:92:52:DC:77:BF:F6 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 02A8 Signing time: Tue 09 Sep 2025 01:39:37 +0000 Manifest this update: Tue 09 Sep 2025 01:39:37 +0000 Manifest next update: Tue 16 Sep 2025 01:39:37 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: Da76G8QZlzFmd2rShnQioLPNZ55c7IjRaZPBmn1pT8U=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: Af+2fxsg1OVRliv2YbtkhhRaDDPkEDX9Fcaj9HwzrTs=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: zVP6Lu1oo3kp6gcWozNx0s9g3feGp/J0qR06fS1o9cs=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: +LEU78x/LWwi5ap6sqbnvORUUGIW3bkmD1+ul2+yf4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Sep 9 01:39:37 2025 GMT Not After : Sep 16 01:39:37 2025 GMT Subject: CN=68bf8559-57a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:17:8c:1e:6c:82:2e:5d:0d:7b:6e:77:de:a6: ab:45:45:45:b5:15:35:f4:22:98:4c:14:d9:c6:34: c9:c9:4e:3e:28:4d:c2:82:77:1f:9f:ca:de:e1:f5: 8c:dc:c9:91:08:53:02:01:5a:da:16:0d:36:7b:3e: 0b:4e:97:3d:43:8b:0f:08:7e:c9:bf:a1:c2:30:9f: 8d:2e:5b:11:8a:32:b0:ee:06:92:1b:94:1b:f5:06: a6:d2:fd:69:93:c8:56:85:11:c6:8e:4c:f9:2f:16: 2f:7e:1c:a3:61:58:c6:e0:1e:c8:49:e6:29:c3:15: 64:7d:17:26:db:5d:17:b0:1b:ed:4c:fd:6d:dc:6b: 99:bd:29:aa:26:29:82:f3:0c:0b:fe:ca:7e:3d:98: 98:2b:f0:7e:38:0d:33:dd:91:3b:8f:1a:a4:79:d9: d0:08:5a:db:0a:d1:9a:c9:48:28:15:69:a4:60:2e: b4:33:b3:8e:68:7f:df:99:50:b9:21:0a:41:dd:ed: 45:17:df:2f:c0:35:30:3f:80:36:06:e8:db:f0:f3: d7:3e:67:68:31:25:1c:9d:16:45:9a:54:f9:fb:6b: 34:38:01:69:1f:3f:48:95:0e:74:7b:f7:59:bd:c8: 11:d9:3b:b9:36:f2:fa:d3:9c:d6:4c:ce:ed:c9:7c: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:BE:5E:72:E4:FF:63:CD:3B:E1:C0:C1:EB:92:52:DC:77:BF:F6 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cf:fe:ff:bf:65:6b:f6:d9:df:78:36:a6:fd:b6:d0:88:43: 4c:9c:81:04:34:0b:9c:66:48:d0:91:ea:83:95:b7:1d:12:88: ea:96:d0:90:9c:7c:fc:45:0a:0d:e2:e1:0d:86:fb:98:84:05: 2f:d1:f7:d0:4c:b9:cf:50:fd:6a:ea:23:25:ec:9e:23:9c:3b: 3f:e2:17:a6:d1:a4:3a:00:8b:0b:0d:9c:ca:0f:48:d7:0c:a6: ff:9e:7a:11:42:f7:4d:e7:53:6a:c6:72:68:0b:55:ff:d2:f8: 0e:d4:13:22:44:b7:d1:32:77:cb:f3:8b:a4:c8:3c:5f:ab:09: 8b:20:61:f9:01:0c:d1:a7:7a:83:cc:73:af:2a:ed:61:e3:16: 5b:c1:48:17:13:12:9a:51:82:46:4c:3c:ae:a9:4c:8a:2e:7f: fe:e4:4a:75:e3:b6:f9:72:f1:64:ad:56:9e:cd:16:8a:18:57: f4:fa:91:d8:73:7c:b1:66:4a:18:47:72:26:b9:94:ff:40:53: 86:40:0e:71:be:f6:99:61:e5:6d:d0:6f:1e:32:0d:cf:9d:d5: aa:68:bf:18:be:ad:af:c0:06:66:c2:25:94:a4:07:eb:60:87: 58:6c:f5:f2:19:0a:ab:c5:72:de:9a:95:a9:35:94:9f:af:d2: 80:be:80:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwOTA5MDEzOTM3WhcNMjUwOTE2MDEzOTM3WjAYMRYwFAYD VQQDEw02OGJmODU1OS01N2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xeMHmyCLl0Ne2533qarRUVFtRU19CKYTBTZxjTJyU4+KE3Cgncfn8re4fWM 3MmRCFMCAVraFg02ez4LTpc9Q4sPCH7Jv6HCMJ+NLlsRijKw7gaSG5Qb9Qam0v1p k8hWhRHGjkz5LxYvfhyjYVjG4B7ISeYpwxVkfRcm210XsBvtTP1t3GuZvSmqJimC 8wwL/sp+PZiYK/B+OA0z3ZE7jxqkednQCFrbCtGayUgoFWmkYC60M7OOaH/fmVC5 IQpB3e1FF98vwDUwP4A2Bujb8PPXPmdoMSUcnRZFmlT5+2s0OAFpHz9IlQ50e/dZ vcgR2Tu5NvL605zWTM7tyXw/AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvkvl5y 5P9jzTvhwMHrklLcd7/2MB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsz/7/v2Vr9tnfeDam/bbQiENMnIEENAucZkjQkeqDlbcdEojqltCQ nHz8RQoN4uENhvuYhAUv0ffQTLnPUP1q6iMl7J4jnDs/4hem0aQ6AIsLDZzKD0jX DKb/nnoRQvdN51NqxnJoC1X/0vgO1BMiRLfRMnfL84ukyDxfqwmLIGH5AQzRp3qD zHOvKu1h4xZbwUgXExKaUYJGTDyuqUyKLn/+5Ep147b5cvFkrVaezRaKGFf0+pHY c3yxZkoYR3ImuZT/QFOGQA5xvvaZYeVt0G8eMg3PndWqaL8Yvq2vwAZmwiWUpAfr YIdYbPXyGQqrxXLempWpNZSfr9KAvoDX -----END CERTIFICATE-----Generated at Tue Sep 9 13:25:27 2025 by rpki-client