$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: hfBXq0D8nab4OA0MTR1ZvTJmZ4m749/h7u3O7G8UpbU= Subject key identifier: C9:C2:AA:15:F2:BD:9C:13:A7:C0:33:F7:B3:E8:CF:C5:BD:F8:98:51 Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DE8 Signing time: Sun 10 Aug 2025 17:53:11 +0000 Manifest this update: Sun 10 Aug 2025 17:53:10 +0000 Manifest next update: Sun 17 Aug 2025 17:53:10 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: HEmnw8MFl9izj5qOebEvdld9bKLJfrGxtpsq6hi7J8o=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: cYdmS5wLlGFfq5Y1sGvt09KmgEcXdc6nHMkHCfvEFrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3567 (0xdef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Aug 10 17:53:10 2025 GMT Not After : Aug 17 17:53:10 2025 GMT Subject: CN=6898dc87-5ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:76:7a:43:60:49:05:8f:3f:dd:0d:9d:ec: 2b:d2:1a:d8:79:20:fa:e8:cd:1f:58:f0:ed:f8:e7: 6b:be:41:2a:d3:e3:dd:e6:78:2b:82:5f:f8:ce:66: 55:aa:dc:75:cf:f2:fc:9a:fe:5f:d2:81:4e:60:fe: 6f:04:d2:34:ad:49:88:5e:88:b7:2f:df:44:a0:7a: f7:c6:c4:4a:94:f4:aa:ab:03:e0:5c:c2:8c:62:34: 1a:9f:29:8c:16:3a:3e:4d:22:a2:d1:dc:6e:c6:d6: 60:71:74:80:80:f4:d3:5b:64:0c:8a:e3:3e:d7:a9: ea:d0:29:67:80:e5:c8:07:d2:c9:57:80:52:b0:58: 39:33:ab:56:c5:cf:41:b0:5a:8b:4d:65:52:68:28: f4:96:c9:27:83:17:0d:31:c7:06:5b:39:f2:59:1a: 91:85:de:f6:f5:05:69:c0:e6:c9:4f:d5:1f:33:56: c4:6d:56:1d:d1:0c:af:fd:4c:88:b8:17:57:ab:9a: f4:db:61:b1:3a:1e:38:47:a8:8e:4b:af:c7:4d:11: 33:3e:21:02:eb:4c:cb:1f:8b:4b:69:b2:64:5a:7e: bf:2e:ee:a5:77:04:68:9b:8d:7b:b0:ef:99:a1:af: 51:01:89:05:af:1c:a4:27:1e:a0:3b:6b:4d:fa:be: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:AA:15:F2:BD:9C:13:A7:C0:33:F7:B3:E8:CF:C5:BD:F8:98:51 X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f4:35:c2:03:8c:6a:7f:64:24:82:b6:92:ac:73:ab:85:6e: 5d:c6:27:6e:44:ed:05:92:38:d6:37:b8:21:05:84:97:cf:3e: c9:0d:fb:2f:62:44:b9:3c:35:f3:79:d1:e8:1f:95:01:83:97: 38:ab:29:db:43:c6:52:a2:b7:e1:57:af:4f:f0:05:64:aa:2b: 53:d2:41:80:fa:cb:ec:a8:87:65:73:ac:5f:5f:e1:6a:8f:30: 5f:1e:a0:d8:80:f6:97:5c:c7:0e:f8:da:c3:24:f6:da:51:aa: 1c:99:60:49:ad:20:ed:01:c3:fb:8f:1e:28:f5:5e:49:c9:79: 62:ea:e8:51:28:31:70:f2:6a:c5:32:ba:fc:a3:4a:41:b5:1d: 4b:b8:c1:fb:44:b9:dc:29:8e:dc:74:1d:f2:27:79:ea:07:eb: e9:9a:9b:af:6c:f9:af:44:1a:59:88:b8:26:39:2e:27:db:ea: 0f:16:04:d1:4c:3f:5e:06:23:c2:77:0f:73:95:77:cd:2c:f8: a5:e7:e6:9d:c0:f7:83:50:22:81:17:7c:29:a9:dd:19:65:fb: 60:1e:12:2d:34:9e:e3:f8:38:2a:ac:fb:51:e2:7a:99:e4:9c: 02:c0:06:8d:2a:51:18:40:4c:27:e2:3f:0b:c0:87:c4:6b:f5: 4b:e2:99:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwODEwMTc1MzEwWhcNMjUwODE3MTc1MzEwWjAYMRYwFAYD VQQDEw02ODk4ZGM4Ny01ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzl2ekNgSQWPP90Nnewr0hrYeSD66M0fWPDt+OdrvkEq0+Pd5ngrgl/4zmZV qtx1z/L8mv5f0oFOYP5vBNI0rUmIXoi3L99EoHr3xsRKlPSqqwPgXMKMYjQanymM Fjo+TSKi0dxuxtZgcXSAgPTTW2QMiuM+16nq0ClngOXIB9LJV4BSsFg5M6tWxc9B sFqLTWVSaCj0lskngxcNMccGWznyWRqRhd729QVpwObJT9UfM1bEbVYd0Qyv/UyI uBdXq5r022GxOh44R6iOS6/HTREzPiEC60zLH4tLabJkWn6/Lu6ldwRom417sO+Z oa9RAYkFrxykJx6gO2tN+r4LhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnCqhXy vZwTp8Az97Poz8W9+JhRMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa9DXCA4xqf2QkgraSrHOrhW5dxiduRO0FkjjWN7ghBYSXzz7JDfsv YkS5PDXzedHoH5UBg5c4qynbQ8ZSorfhV69P8AVkqitT0kGA+svsqIdlc6xfX+Fq jzBfHqDYgPaXXMcO+NrDJPbaUaocmWBJrSDtAcP7jx4o9V5JyXli6uhRKDFw8mrF Mrr8o0pBtR1LuMH7RLncKY7cdB3yJ3nqB+vpmpuvbPmvRBpZiLgmOS4n2+oPFgTR TD9eBiPCdw9zlXfNLPil5+adwPeDUCKBF3wpqd0ZZftgHhItNJ7j+DgqrPtR4nqZ 5JwCwAaNKlEYQEwn4j8LwIfEa/VL4pkS -----END CERTIFICATE-----Generated at Mon Aug 11 04:26:50 2025 by rpki-client