$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: XVDOps3s6vjvkOQyE9hjak5IKxdJoTRPFNjRjV6uAYs= Subject key identifier: 24:D9:11:96:54:32:12:C8:14:39:20:65:42:04:A6:8A:82:B0:91:26 Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 1829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 180D Signing time: Mon 04 Aug 2025 16:42:45 +0000 Manifest this update: Mon 04 Aug 2025 16:42:45 +0000 Manifest next update: Mon 11 Aug 2025 16:42:45 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: FFyq1ytWilwyv6uzg/gziPTqojy2nS8TLZja7pNagQk=) 2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: AJVJFbnvPCGmDcQ1w9Ifor0vZahtLKDl6qkkbnsRLEw=) 3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: vQNKqM+IPJTV8w/FcMbZHdV0h0wCR5wUymZdMLOlrMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6185 (0x1829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: Aug 4 16:42:45 2025 GMT Not After : Aug 11 16:42:45 2025 GMT Subject: CN=6890e305-d525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a8:80:f1:2e:de:89:7f:36:8f:83:54:2a:87: dc:26:27:4e:00:26:a8:20:11:d7:fa:11:73:ae:a7: a4:37:6d:c3:76:46:0b:61:1f:7d:3c:ab:18:99:c1: fb:dc:6e:1f:f6:2c:18:e0:ef:6b:a0:a5:e9:e2:c7: ec:48:24:b9:c5:6c:1b:c2:f3:f2:be:46:22:92:20: fc:1d:84:e9:7c:73:48:a3:7e:da:77:44:d6:3c:af: 5f:37:70:7c:43:92:fe:de:84:57:31:aa:00:a4:d0: 64:e9:b6:f2:e9:12:18:39:fb:20:d4:88:06:27:fa: bb:3b:47:48:96:2e:01:41:73:01:db:31:d8:61:f1: 67:8f:27:8c:5d:6c:f3:71:61:36:6e:e0:8e:d4:e0: 3d:d9:61:ff:48:da:3a:0a:a6:ff:c8:a7:f2:ac:95: 91:d7:2e:f4:16:70:ff:b4:2a:31:f7:42:ef:0f:51: ee:7e:47:0c:b7:9a:8b:7e:2e:44:64:95:d7:eb:9c: 90:aa:4b:91:f6:01:f2:43:a4:d4:f9:97:3c:09:5e: 8c:93:71:48:23:00:0f:c9:11:f1:30:23:56:73:84: ab:1d:3f:59:0c:0e:b9:75:d0:f6:55:04:a2:f1:92: 75:8d:54:0f:98:62:0b:42:c5:df:88:d8:cc:91:3f: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:11:96:54:32:12:C8:14:39:20:65:42:04:A6:8A:82:B0:91:26 X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:81:f3:72:66:19:40:e5:fa:5a:57:c7:37:09:b2:eb:0d:a7: 41:d8:6a:cf:8a:90:cf:48:1e:0f:a7:de:c3:16:c2:15:8f:7d: 72:ba:00:b7:81:8b:ed:09:f6:2e:38:5b:a1:eb:a6:8a:d4:07: 0e:2b:9b:e5:46:32:8f:6f:12:08:e3:c5:97:9c:5c:d0:f2:b5: a5:ff:bf:9c:4c:09:4a:31:a0:e4:78:30:f9:04:54:7c:57:6c: ae:91:fd:39:a0:94:b3:bd:32:7c:a5:b9:37:df:a3:9d:87:a9: 2e:b6:ad:02:39:1d:e9:ca:1f:43:db:5f:1a:87:54:4d:0e:7e: 5f:c0:2a:7a:71:11:ee:43:0c:96:5f:44:9d:c7:3b:ad:6e:03: c8:e1:1d:74:60:29:6c:ad:eb:72:cd:03:f5:c0:96:c5:93:4d: 6f:07:e9:c6:74:e7:56:d7:4a:2b:53:38:83:1f:e2:81:84:7d: 16:3d:6b:a1:9a:29:21:9b:1f:f4:58:09:6f:b8:f5:f3:04:23: 46:ee:92:5e:71:5e:2b:24:c6:de:7d:80:4c:75:5b:2e:94:69: 26:fb:23:c7:e2:9c:ed:1e:25:82:ed:56:d6:ff:24:61:03:31: a3:13:3a:85:20:67:ea:c2:c8:00:e8:01:c9:8c:86:52:8f:3a: b1:94:e6:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjUwODA0MTY0MjQ1WhcNMjUwODExMTY0MjQ1WjAYMRYwFAYD VQQDEw02ODkwZTMwNS1kNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KiA8S7eiX82j4NUKofcJidOACaoIBHX+hFzrqekN23DdkYLYR99PKsYmcH7 3G4f9iwY4O9roKXp4sfsSCS5xWwbwvPyvkYikiD8HYTpfHNIo37ad0TWPK9fN3B8 Q5L+3oRXMaoApNBk6bby6RIYOfsg1IgGJ/q7O0dIli4BQXMB2zHYYfFnjyeMXWzz cWE2buCO1OA92WH/SNo6Cqb/yKfyrJWR1y70FnD/tCox90LvD1HufkcMt5qLfi5E ZJXX65yQqkuR9gHyQ6TU+Zc8CV6Mk3FIIwAPyRHxMCNWc4SrHT9ZDA65ddD2VQSi 8ZJ1jVQPmGILQsXfiNjMkT8I5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTZEZZU MhLIFDkgZUIEpoqCsJEmMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLgfNyZhlA5fpaV8c3CbLrDadB2GrPipDPSB4Pp97DFsIVj31yugC3 gYvtCfYuOFuh66aK1AcOK5vlRjKPbxII48WXnFzQ8rWl/7+cTAlKMaDkeDD5BFR8 V2yukf05oJSzvTJ8pbk336Odh6kutq0COR3pyh9D218ah1RNDn5fwCp6cRHuQwyW X0SdxzutbgPI4R10YClsretyzQP1wJbFk01vB+nGdOdW10orUziDH+KBhH0WPWuh mikhmx/0WAlvuPXzBCNG7pJecV4rJMbefYBMdVsulGkm+yPH4pztHiWC7VbW/yRh AzGjEzqFIGfqwsgA6AHJjIZSjzqxlObd -----END CERTIFICATE-----Generated at Wed Aug 6 14:14:40 2025 by rpki-client