$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json) Hash identifier: D7RJ42ceXGXc+NBzk1nGeGwYYjqD4bwm++GyK8O01rQ= Subject key identifier: 92:B1:B9:79:41:C6:8C:E2:DC:C0:FE:94:69:43:6B:8E:DF:F7:F1:14 Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft Manifest number: 0681 Signing time: Sun 10 Aug 2025 22:25:58 +0000 Manifest this update: Sun 10 Aug 2025 22:25:58 +0000 Manifest next update: Sun 17 Aug 2025 22:25:58 +0000 Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: qlYaExc57TYs9TlK5gvE3B1LNyukV/ywTNSt5Cg20uQ=) 2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: IYSv1L8CrFfVZhb7vVnKxPTFDHznaeEotmtw/x51wYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Validity Not Before: Aug 10 22:25:58 2025 GMT Not After : Aug 17 22:25:58 2025 GMT Subject: CN=68991c76-42c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:d9:aa:11:37:32:cd:1c:11:46:70:32:c7: 06:d8:b9:5f:6a:15:63:66:ca:5a:e5:4b:e9:b9:a2: 8e:02:da:08:fd:3d:d3:33:54:fe:15:0e:ae:c3:46: 07:92:d3:dc:f5:a2:10:41:0f:e2:29:8a:51:cf:b4: 65:a0:d5:8e:1b:7c:53:cd:fe:13:94:bc:d5:c3:8d: a8:18:81:54:1c:80:d3:66:11:b7:7c:f2:44:20:58: 39:66:4e:b1:49:e7:81:71:6f:7c:54:01:34:0b:ac: 87:7a:c3:6a:82:c5:83:d1:e1:9e:9f:61:5d:94:89: b1:87:e9:43:68:8d:8c:b3:ab:c1:f4:63:33:d7:ff: 47:1c:2e:42:8a:61:b1:14:a0:13:65:c6:f4:34:d0: c9:d7:74:7d:ad:eb:ab:d7:82:47:3e:2c:7b:d0:f0: 6e:d8:13:de:64:2a:7b:72:8c:23:8a:78:8f:37:d5: a9:9a:93:9b:c7:7b:c8:2e:52:6e:52:43:83:92:9e: 94:4a:75:1c:4c:64:ad:74:b1:be:e8:bd:cf:39:3c: 52:fb:99:d8:85:10:ab:bd:08:03:fd:01:b7:26:e7: 1f:ab:38:83:9a:34:c2:06:86:9b:42:f6:39:98:0a: 3c:69:a7:e3:cd:4d:68:1d:6e:25:d1:ee:8f:5e:70: 98:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:B9:79:41:C6:8C:E2:DC:C0:FE:94:69:43:6B:8E:DF:F7:F1:14 X509v3 Authority Key Identifier: keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:60:82:6e:c1:5c:af:75:cd:c5:b4:1b:4d:a3:6f:0f:d2:cc: 93:62:12:75:ca:63:e0:c3:59:ab:66:e7:dd:69:ad:ef:1a:55: 9b:2f:f3:bd:c6:70:18:f9:8c:4f:c3:b3:ce:8e:0e:6c:e7:4b: 01:97:d9:30:60:30:5e:9c:9d:21:7b:e5:97:f1:65:4d:ad:70: d3:d6:6b:a4:bf:af:04:5f:d1:9b:96:53:f4:dd:a5:85:cf:39: 9d:a2:b1:03:22:a8:e4:b7:a7:e2:a5:0a:ba:b8:d9:ad:88:c6: 27:d6:03:bb:2d:59:90:fc:54:5a:90:c0:ee:d9:cd:b7:7f:b4: 5b:6b:a6:26:2d:12:27:ce:f7:1e:9f:8a:fc:5e:48:93:af:69: c4:d1:5c:c8:73:55:0b:76:d3:64:32:8a:b2:04:ea:6d:c0:0d: 92:ab:cc:6b:f8:02:62:b5:ec:c6:4a:1f:b0:89:2a:b3:35:63: f5:73:b0:49:be:43:77:cf:5a:09:d2:9a:0d:c5:5a:43:ba:52: 45:c4:3e:70:dd:5a:71:f2:97:28:3c:45:fa:8c:cc:ea:1b:10: f5:3e:14:11:43:e9:80:8c:03:e6:64:23:89:49:50:78:9c:84: bc:4f:4a:9c:c0:70:b8:95:df:5a:70:98:f2:2c:9b:4f:11:b4: f5:68:13:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRCNTcxMTAvBgNVBAUTKDI1QjYxNzhCQTRGODZGRjBCNUYyNTUxNzgwOUJERjIw RDk0NjhFNjkwHhcNMjUwODEwMjIyNTU4WhcNMjUwODE3MjIyNTU4WjAYMRYwFAYD VQQDEw02ODk5MWM3Ni00MmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRvZqhE3Ms0cEUZwMscG2LlfahVjZspa5UvpuaKOAtoI/T3TM1T+FQ6uw0YH ktPc9aIQQQ/iKYpRz7RloNWOG3xTzf4TlLzVw42oGIFUHIDTZhG3fPJEIFg5Zk6x SeeBcW98VAE0C6yHesNqgsWD0eGen2FdlImxh+lDaI2Ms6vB9GMz1/9HHC5CimGx FKATZcb0NNDJ13R9reur14JHPix70PBu2BPeZCp7cowjiniPN9WpmpObx3vILlJu UkODkp6USnUcTGStdLG+6L3POTxS+5nYhRCrvQgD/QG3JucfqziDmjTCBoabQvY5 mAo8aafjzU1oHW4l0e6PXnCYJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKxuXlB xozi3MD+lGlDa47f9/EUMB8GA1UdIwQYMBaAFCW2F4uk+G/wtfJVF4Cb3yDZRo5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEI1Ny84MzhDODkxNjgz NTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJfQzE4bFVYZ0p2ZklObEdq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0piWVhpNlQ0Yl9DMThsVVhnSnZmSU5sR2ptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEI1Ny84MzhDODkxNjgzNTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJf QzE4bFVYZ0p2ZklObEdqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoYIJuwVyvdc3FtBtNo28P0syTYhJ1ymPgw1mrZufdaa3vGlWbL/O9 xnAY+YxPw7POjg5s50sBl9kwYDBenJ0he+WX8WVNrXDT1mukv68EX9GbllP03aWF zzmdorEDIqjkt6fipQq6uNmtiMYn1gO7LVmQ/FRakMDu2c23f7Rba6YmLRInzvce n4r8XkiTr2nE0VzIc1ULdtNkMoqyBOptwA2Sq8xr+AJitezGSh+wiSqzNWP1c7BJ vkN3z1oJ0poNxVpDulJFxD5w3Vpx8pcoPEX6jMzqGxD1PhQRQ+mAjAPmZCOJSVB4 nIS8T0qcwHC4ld9acJjyLJtPEbT1aBNl -----END CERTIFICATE-----Generated at Mon Aug 11 02:05:16 2025 by rpki-client