$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: DC/4NsrSEkXOj/RSttUjGarj2e/N3b7pXXOpH23hEcU= Subject key identifier: 86:71:55:5B:AB:87:0F:FD:5F:8D:66:33:D8:D6:03:97:D9:9D:84:AE Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 051A Signing time: Sun 10 Aug 2025 23:43:28 +0000 Manifest this update: Sun 10 Aug 2025 23:43:27 +0000 Manifest next update: Sun 17 Aug 2025 23:43:27 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: SeBQ1Q75toiUlwC6p0VuIdVfqeJuBJDr39z3QcdCegk=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Aug 10 23:43:27 2025 GMT Not After : Aug 17 23:43:27 2025 GMT Subject: CN=68992ea0-1ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:d9:c7:a9:87:9d:2c:33:96:18:e9:eb:25: 8a:db:94:88:25:94:20:15:24:0d:dd:ab:dd:40:fe: 8e:4d:dd:0f:45:91:d6:a4:76:77:bd:45:42:64:83: 64:e3:e6:9b:3d:0e:28:e3:db:51:9e:cb:b2:e9:9e: e4:46:0b:74:ae:54:8a:fa:36:61:e3:d5:f4:a3:51: 41:3a:26:5b:d6:b6:c1:1f:01:b8:cc:ec:e5:07:f6: 0c:e7:1f:cb:dc:08:97:d1:aa:bc:8e:19:1b:73:96: ac:ed:4d:a3:27:54:0c:c5:18:b8:d2:e7:a6:6b:e2: 39:45:2c:c5:e0:32:bc:11:c5:28:de:c9:6b:7e:9b: 78:08:44:d9:52:f0:bb:78:07:29:b2:8b:a2:a8:0d: e6:e5:e7:73:92:ff:46:46:cc:50:ac:b9:49:c8:ce: ef:f1:7c:ac:c2:f6:46:54:09:c6:b8:d0:84:3d:ee: 92:f7:35:f7:c0:64:a6:94:2c:3e:54:66:14:7b:0f: 1c:6a:f0:03:2a:3a:5c:d7:8f:8a:36:6a:84:fe:43: 62:3a:40:3a:8a:82:c5:f7:72:3c:53:65:95:64:04: 36:f2:ef:dd:81:28:62:6f:57:e5:07:d9:07:f7:67: 3f:ef:a0:d1:51:c3:d7:a8:fa:2d:88:6f:f1:95:35: 57:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:71:55:5B:AB:87:0F:FD:5F:8D:66:33:D8:D6:03:97:D9:9D:84:AE X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:ed:2b:54:41:a8:f1:eb:6c:ef:d3:01:d7:bb:40:21:5e: 08:e3:ff:05:d2:a1:af:25:a0:a2:5f:82:99:de:f7:b6:ba:35: c4:fe:79:2e:89:b8:cd:5a:a2:b6:4c:a8:9d:dc:83:b8:fd:26: 37:e3:a6:0f:d2:08:eb:24:8e:38:6e:9b:6f:3a:f1:ba:16:99: 5a:f0:72:e5:a6:1d:3e:36:f6:42:3c:f5:aa:78:19:a9:22:a1: 29:9c:b0:03:50:f1:b9:60:de:2a:8d:7b:ca:e9:bf:bd:53:8f: c4:35:6e:e8:6a:4d:92:02:60:10:3c:0c:08:4e:d4:81:36:0b: c0:b0:94:3e:9d:1a:57:a8:61:fa:ee:bf:66:93:c7:82:9e:d7: aa:09:46:9f:26:33:aa:0f:3a:8a:8a:32:56:6f:b8:e3:2d:15: 96:40:80:ac:9e:40:00:fc:e9:07:5b:ff:2c:26:6b:d6:14:10: 09:ca:e6:84:32:52:c0:4f:18:cd:2e:3c:9f:98:c1:ca:0a:2b: 5f:a7:4a:96:54:92:73:95:46:41:75:f3:e0:72:29:96:81:fc: bf:74:95:db:ad:28:d1:b4:c7:d0:5a:f0:8b:65:5e:12:83:5d: 1a:1c:45:b7:42:98:f4:b0:90:a0:4f:b2:6b:42:64:17:04:ed: 98:70:2d:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUwODEwMjM0MzI3WhcNMjUwODE3MjM0MzI3WjAYMRYwFAYD VQQDEw02ODk5MmVhMC0xYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/jZx6mHnSwzlhjp6yWK25SIJZQgFSQN3avdQP6OTd0PRZHWpHZ3vUVCZINk 4+abPQ4o49tRnsuy6Z7kRgt0rlSK+jZh49X0o1FBOiZb1rbBHwG4zOzlB/YM5x/L 3AiX0aq8jhkbc5as7U2jJ1QMxRi40uema+I5RSzF4DK8EcUo3slrfpt4CETZUvC7 eAcpsouiqA3m5edzkv9GRsxQrLlJyM7v8XyswvZGVAnGuNCEPe6S9zX3wGSmlCw+ VGYUew8cavADKjpc14+KNmqE/kNiOkA6ioLF93I8U2WVZAQ28u/dgShib1flB9kH 92c/76DRUcPXqPotiG/xlTVX3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZxVVur hw/9X41mM9jWA5fZnYSuMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBdO0rVEGo8ets79MB17tAIV4I4/8F0qGvJaCiX4KZ3ve2ujXE/nku ibjNWqK2TKid3IO4/SY346YP0gjrJI44bptvOvG6Fpla8HLlph0+NvZCPPWqeBmp IqEpnLADUPG5YN4qjXvK6b+9U4/ENW7oak2SAmAQPAwITtSBNgvAsJQ+nRpXqGH6 7r9mk8eCnteqCUafJjOqDzqKijJWb7jjLRWWQICsnkAA/OkHW/8sJmvWFBAJyuaE MlLATxjNLjyfmMHKCitfp0qWVJJzlUZBdfPgcimWgfy/dJXbrSjRtMfQWvCLZV4S g10aHEW3Qpj0sJCgT7JrQmQXBO2YcC2R -----END CERTIFICATE-----Generated at Mon Aug 11 01:48:54 2025 by rpki-client