$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json) Hash identifier: U5RME1KscVFMhTntg2DDz5p/SHeAYMWCfuDhIsmou00= Subject key identifier: C8:02:00:6F:94:66:5C:D9:12:B7:9C:29:C4:84:E8:98:4B:2D:87:0D Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft Manifest number: CF Signing time: Thu 07 Aug 2025 06:12:31 +0000 Manifest this update: Thu 07 Aug 2025 06:12:30 +0000 Manifest next update: Thu 14 Aug 2025 06:12:30 +0000 Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: 0B/fEtod8Mebeszl9fGMyq846bvR/kJ0SG1x5f4WL1M=) 2: 95C79E36379611EF87CBA24DC4F9AE02.roa (hash: ZMHJbDurrQwg9LuHdJ4fXoBTwDMXXjxbFZ/gpf/dfBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Validity Not Before: Aug 7 06:12:30 2025 GMT Not After : Aug 14 06:12:30 2025 GMT Subject: CN=689443ce-460f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:01:d5:0d:4d:f4:53:31:da:b7:3a:fe:01: 64:b9:08:c4:72:63:76:3a:d2:1e:b7:c3:a6:ca:d2: f1:a5:0d:69:77:2f:b8:34:7a:77:28:5c:76:0f:d4: 84:eb:61:93:98:c6:92:e3:40:f2:55:6b:aa:1f:df: ce:57:a4:70:da:ac:7f:9b:ba:d7:be:31:f7:61:6b: c4:1a:96:2b:57:4c:69:bd:77:54:7c:aa:a7:7b:62: 20:ec:63:04:2f:01:34:49:97:b5:a0:19:00:6d:cc: a2:20:0a:b1:ec:33:4f:c8:2e:2c:51:5b:49:a6:bc: 92:da:cb:25:71:92:4f:78:48:ba:13:12:68:42:92: b8:a5:eb:90:68:62:4f:40:27:74:b7:f5:75:a0:59: ae:5d:c5:e3:ef:40:25:da:44:08:c3:2d:72:a5:fc: cd:4b:cd:af:58:a6:28:24:f1:bf:2a:79:b7:76:f4: 5c:85:4e:db:23:43:14:ae:e4:a5:13:e7:51:4f:4a: 44:22:6f:80:53:96:78:8a:db:34:7c:1e:cd:c5:22: 48:ec:1c:97:8a:d7:6c:53:27:e4:94:2e:27:8c:39: 76:c4:35:60:45:e0:15:13:70:68:7e:61:78:00:01: 12:02:20:68:77:68:67:a0:e1:41:c1:95:d7:0e:1a: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:00:6F:94:66:5C:D9:12:B7:9C:29:C4:84:E8:98:4B:2D:87:0D X509v3 Authority Key Identifier: keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:93:f7:4e:ae:37:54:96:78:cb:6a:ba:0c:81:0f:0e:21:d9: e4:42:f3:bb:6b:6c:c5:85:43:50:95:63:4b:2f:b3:00:ee:c6: de:0b:ca:97:ba:c1:27:ce:e0:7f:9a:f5:55:c8:00:a5:08:a7: e2:fa:09:be:91:9b:0e:5d:0b:67:49:17:5e:24:5d:d3:30:a6: b0:00:d1:1d:f2:45:d9:64:05:b0:ba:c7:53:c2:c5:6b:66:41: ff:69:7f:2e:37:23:4e:23:56:10:f0:12:2e:7f:53:8e:ed:b8: c1:02:00:03:cd:1b:56:8e:77:a1:eb:ee:d2:2f:d8:76:ee:b1: 2d:ee:44:7a:d0:bb:34:50:f2:9c:6f:f8:ef:b3:8d:e9:b5:2d: 82:6e:8c:50:c1:10:c1:28:fe:88:be:08:ca:35:db:e6:fb:07: 7a:11:af:1b:34:ef:41:bf:a7:7d:45:07:ea:8a:c1:b8:7f:30: 67:72:5e:71:be:fa:1d:c0:8e:2b:c6:69:f4:09:a2:9e:2f:8c: 4e:73:33:b8:b4:b9:16:b0:57:9e:c4:37:4f:10:3a:f9:d4:b5: 48:5d:45:ba:32:41:08:cd:2c:eb:a0:ae:55:03:21:f9:33:28: 44:28:e7:76:bb:45:4b:5c:dd:fe:b1:75:24:bd:81:78:8c:48: 04:b7:a1:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD MEIxNUI4RTAwHhcNMjUwODA3MDYxMjMwWhcNMjUwODE0MDYxMjMwWjAYMRYwFAYD VQQDEw02ODk0NDNjZS00NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSIB1Q1N9FMx2rc6/gFkuQjEcmN2OtIet8OmytLxpQ1pdy+4NHp3KFx2D9SE 62GTmMaS40DyVWuqH9/OV6Rw2qx/m7rXvjH3YWvEGpYrV0xpvXdUfKqne2Ig7GME LwE0SZe1oBkAbcyiIAqx7DNPyC4sUVtJpryS2sslcZJPeEi6ExJoQpK4peuQaGJP QCd0t/V1oFmuXcXj70Al2kQIwy1ypfzNS82vWKYoJPG/Knm3dvRchU7bI0MUruSl E+dRT0pEIm+AU5Z4its0fB7NxSJI7ByXitdsUyfklC4njDl2xDVgReAVE3BofmF4 AAESAiBod2hnoOFBwZXXDhrz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgCAG+U ZlzZErecKcSE6JhLLYcNMB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArk/dOrjdUlnjLaroMgQ8OIdnkQvO7a2zFhUNQlWNLL7MA7sbeC8qX usEnzuB/mvVVyAClCKfi+gm+kZsOXQtnSRdeJF3TMKawANEd8kXZZAWwusdTwsVr ZkH/aX8uNyNOI1YQ8BIuf1OO7bjBAgADzRtWjneh6+7SL9h27rEt7kR60Ls0UPKc b/jvs43ptS2CboxQwRDBKP6IvgjKNdvm+wd6Ea8bNO9Bv6d9RQfqisG4fzBncl5x vvodwI4rxmn0CaKeL4xOczO4tLkWsFeexDdPEDr51LVIXUW6MkEIzSzroK5VAyH5 MyhEKOd2u0VLXN3+sXUkvYF4jEgEt6HM -----END CERTIFICATE-----Generated at Sat Aug 9 03:03:51 2025 by rpki-client