$ rpki-client -vvf rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft File: JSBFeBemYmHoez5BhOhi2ka6nw0.mft (raw, json) Hash identifier: e1savb85uJ+e6EEbhbglUc+cUHmx6y5eRZom/cy4MZs= Subject key identifier: 27:AE:36:31:2D:79:E1:78:0A:D8:75:05:0F:2F:0A:53:1D:D3:CF:1B Authority key identifier: 25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D Certificate issuer: /CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft Manifest number: 068A Signing time: Tue 12 Aug 2025 22:38:57 +0000 Manifest this update: Tue 12 Aug 2025 22:38:56 +0000 Manifest next update: Tue 19 Aug 2025 22:38:56 +0000 Files and hashes: 1: JSBFeBemYmHoez5BhOhi2ka6nw0.crl (hash: hFRwAlgzjkRU8OhEbA6eq8VtefiQlx90ibdFEjhGDfI=) 2: 81ACEA76E74711EFA8F61A3DC4F9AE02.roa (hash: ukg+6KCGHkrsTy11bBIK1xYhpVPUVwZenM7mxd/8rc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151EB5, serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Validity Not Before: Aug 12 22:38:56 2025 GMT Not After : Aug 19 22:38:56 2025 GMT Subject: CN=689bc280-5a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:34:4a:fc:76:fa:66:dc:10:d6:e1:75:da: 96:f8:f8:25:e3:da:95:2f:04:f4:a4:97:d3:b5:04: 54:c0:eb:55:a6:db:a9:26:84:d4:0f:4c:b0:f9:31: 3f:ad:7c:bc:e9:58:c8:40:db:40:d0:bf:bb:df:03: c9:0e:c8:39:63:3f:ff:20:01:bc:8c:7b:74:a1:cb: 21:e7:35:90:a8:45:e9:eb:84:8b:cc:8d:a5:52:97: 55:26:2e:09:fe:20:b2:58:5e:82:cf:cf:b3:ae:25: 39:80:94:31:07:b4:50:3e:3d:9d:db:96:46:21:1d: be:13:7a:d5:22:a1:13:0a:e5:5e:61:23:1d:58:2d: 52:7a:96:e7:92:ac:7a:37:9d:f7:9a:34:c6:0b:3a: 1c:db:5d:2e:e7:dd:a5:e7:e2:72:73:a6:83:7a:37: 60:64:25:e1:a4:16:52:51:a5:fa:76:d5:6a:2c:59: 7f:da:18:2e:21:d7:62:f0:e6:80:63:9c:26:c6:5b: f5:2a:a7:97:58:ac:3f:6f:eb:75:6c:7a:bb:76:91: 1c:54:e9:2c:9e:53:db:43:bf:dc:cf:e6:9a:b7:af: b5:67:47:50:26:22:3c:d9:fa:0b:60:6b:98:94:a8: a8:ab:be:28:6c:7e:5b:ac:f5:a5:8d:7e:34:10:2a: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:36:31:2D:79:E1:78:0A:D8:75:05:0F:2F:0A:53:1D:D3:CF:1B X509v3 Authority Key Identifier: keyid:25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ff:4b:f0:96:0f:5e:b8:a0:c6:06:77:6e:18:3a:af:96:25: 99:e7:61:b5:d8:e8:93:b5:ec:c5:44:01:49:9d:4e:0e:f7:f8: 96:bf:ae:a7:21:99:eb:c4:0b:4e:75:5d:fb:08:4b:50:af:ec: 48:07:94:ff:f6:a1:14:e3:3c:c4:f0:c3:9e:5d:28:30:d4:ed: 7d:a8:e4:03:3d:fe:c1:2e:17:bd:14:34:0a:d3:ed:6d:9a:48: d0:ce:03:b1:1b:ea:8e:9b:f4:15:c5:2d:fb:b5:23:fc:58:a1: 00:0f:7f:76:25:85:ff:5e:a9:0e:29:b3:e0:4e:cf:b8:73:42: 6c:1b:fe:8f:e4:c6:52:f4:fa:61:c7:a2:24:bc:9f:8e:74:44: 7c:26:11:4e:58:47:4a:a7:fe:17:1d:d5:9e:6d:18:f3:f4:1f: 49:98:cf:75:73:ff:a4:a5:98:3d:5a:6f:f8:07:d3:98:a6:d1: 44:a9:55:09:d5:f0:91:80:af:fe:c3:e2:16:2e:af:2e:2a:85: 39:0e:73:e4:32:f0:c6:06:7f:8e:5d:fe:37:71:6f:e6:5c:f2: 1f:a0:41:e6:22:c9:3b:29:48:28:cd:ba:8b:1a:d2:44:39:3e: ec:0a:53:aa:dc:1e:ea:a4:2c:a8:74:c1:42:6e:62:40:e7:9a: 01:98:8f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFQjUxMTAvBgNVBAUTKDI1MjA0NTc4MTdBNjYyNjFFODdCM0U0MTg0RTg2MkRB NDZCQTlGMEQwHhcNMjUwODEyMjIzODU2WhcNMjUwODE5MjIzODU2WjAYMRYwFAYD VQQDEw02ODliYzI4MC01YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sE0Svx2+mbcENbhddqW+Pgl49qVLwT0pJfTtQRUwOtVptupJoTUD0yw+TE/ rXy86VjIQNtA0L+73wPJDsg5Yz//IAG8jHt0ocsh5zWQqEXp64SLzI2lUpdVJi4J /iCyWF6Cz8+zriU5gJQxB7RQPj2d25ZGIR2+E3rVIqETCuVeYSMdWC1Sepbnkqx6 N533mjTGCzoc210u592l5+Jyc6aDejdgZCXhpBZSUaX6dtVqLFl/2hguIddi8OaA Y5wmxlv1KqeXWKw/b+t1bHq7dpEcVOksnlPbQ7/cz+aat6+1Z0dQJiI82foLYGuY lKioq74obH5brPWljX40ECpM0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeuNjEt eeF4Cth1BQ8vClMd088bMB8GA1UdIwQYMBaAFCUgRXgXpmJh6Hs+QYToYtpGup8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUVCNS9DNTdFMzhGQzdG OUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVltSG9lejVCaE9oaTJrYTZu dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTQkZlQmVtWW1Ib2V6NUJoT2hpMmthNm53MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUVCNS9DNTdFMzhGQzdGOUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVlt SG9lejVCaE9oaTJrYTZudzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe/0vwlg9euKDGBnduGDqvliWZ52G12OiTtezFRAFJnU4O9/iWv66n IZnrxAtOdV37CEtQr+xIB5T/9qEU4zzE8MOeXSgw1O19qOQDPf7BLhe9FDQK0+1t mkjQzgOxG+qOm/QVxS37tSP8WKEAD392JYX/XqkOKbPgTs+4c0JsG/6P5MZS9Pph x6IkvJ+OdER8JhFOWEdKp/4XHdWebRjz9B9JmM91c/+kpZg9Wm/4B9OYptFEqVUJ 1fCRgK/+w+IWLq8uKoU5DnPkMvDGBn+OXf43cW/mXPIfoEHmIsk7KUgozbqLGtJE OT7sClOq3B7qpCyodMFCbmJA55oBmI9A -----END CERTIFICATE-----Generated at Wed Aug 13 05:54:17 2025 by rpki-client