$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: Dh0dEg4Mpp1/V3oimln/6NzRU7C68S0w0DHrJNwWe/Y= Subject key identifier: D0:D4:0A:02:1A:8E:ED:33:3F:CF:47:0C:88:A3:4E:6D:E2:FF:8F:D3 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 128C Signing time: Fri 08 Aug 2025 19:56:52 +0000 Manifest this update: Fri 08 Aug 2025 19:56:52 +0000 Manifest next update: Fri 15 Aug 2025 19:56:52 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: Y2MbD5AEw+LUXdqTdBJ2Nxd5vy4T2zXm2TdsE+f3tDw=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Aug 8 19:56:52 2025 GMT Not After : Aug 15 19:56:52 2025 GMT Subject: CN=68965684-84c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:29:c2:ac:07:f1:b9:4a:98:ea:6d:1b:31: 3d:d8:b5:cf:cf:37:14:e5:e0:71:56:37:7f:a9:df: c9:87:c0:82:96:6a:6b:75:b1:33:83:ba:64:a5:0e: 8c:5a:74:e7:c8:75:65:fc:bf:78:8f:42:d3:cc:e1: 9a:81:b5:78:e7:43:ff:d0:13:3e:66:c1:bb:ca:75: ed:e8:91:fc:70:fb:62:f4:9a:92:81:7c:2d:a5:6a: 95:eb:28:5c:99:50:b9:cf:5f:a5:e5:f5:9c:f7:93: ec:f5:be:c4:c2:9b:03:c4:9a:97:a6:3e:01:ee:49: 86:78:08:b1:ad:af:cd:15:62:9b:55:16:22:8c:51: 9d:2d:85:44:3e:17:5e:62:f1:b0:db:84:aa:e0:a9: 53:3c:1d:56:b4:31:9d:8a:a3:ae:b4:a3:14:bf:78: 3c:50:3d:16:d3:74:d8:7b:b4:1f:83:33:44:1e:f5: 5d:d6:1e:05:ac:28:36:a3:39:41:22:b2:5a:0a:1d: e5:94:f9:92:b8:4c:7f:20:20:dd:10:a1:55:d9:0a: a6:8c:1e:d7:e9:4a:21:86:98:85:1a:52:d0:6d:4a: f9:96:2d:3b:c9:6a:83:7f:ce:e9:07:5a:84:4c:2a: 99:7c:32:e4:ef:8f:83:63:15:5b:49:d0:86:d3:4c: 2b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D4:0A:02:1A:8E:ED:33:3F:CF:47:0C:88:A3:4E:6D:E2:FF:8F:D3 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d3:f5:b2:b2:89:51:19:33:c2:5c:34:60:50:62:1a:04:bc: dd:4a:d8:a0:45:3e:a8:3a:5c:6e:20:6a:27:71:b5:8e:df:c5: a6:4b:21:a4:35:ba:b9:14:11:64:77:97:84:73:f6:55:a5:dd: 3d:35:7c:79:c9:49:03:a5:eb:23:18:7d:29:3b:ac:91:35:7e: 05:5b:eb:f0:53:12:4a:a2:5d:c2:f3:79:d8:7d:f5:d8:8e:8d: 09:9f:3b:98:dd:fc:39:33:6a:8c:6e:d0:c2:fe:d2:a1:be:f9: 2a:b4:f9:9c:8a:6f:16:cf:d1:9b:c6:c5:9f:1a:73:38:bc:87: 5c:02:27:81:6f:22:aa:1b:4b:f6:71:0e:17:6a:3c:9c:04:b2: a3:a4:d4:c6:3d:a1:a4:62:89:cd:7d:83:85:8d:43:ec:d9:ce: be:74:9b:dc:72:e2:10:d1:52:70:24:9c:49:94:7a:6f:8c:85: b1:40:cf:63:ea:53:50:11:fc:bf:6d:43:4d:db:73:83:7a:60: 6c:1b:e2:d2:b9:5a:e2:9e:ff:c7:2a:5f:50:8a:aa:50:e5:30: 48:d7:1a:21:95:cb:6d:b3:a0:76:95:ad:c7:3f:44:df:cc:db: c8:9f:3b:4b:c1:1c:b4:c5:1e:28:01:60:e0:f1:67:1a:d6:03: bf:b2:1f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUwODA4MTk1NjUyWhcNMjUwODE1MTk1NjUyWjAYMRYwFAYD VQQDEw02ODk2NTY4NC04NGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmgpwqwH8blKmOptGzE92LXPzzcU5eBxVjd/qd/Jh8CClmprdbEzg7pkpQ6M WnTnyHVl/L94j0LTzOGagbV450P/0BM+ZsG7ynXt6JH8cPti9JqSgXwtpWqV6yhc mVC5z1+l5fWc95Ps9b7EwpsDxJqXpj4B7kmGeAixra/NFWKbVRYijFGdLYVEPhde YvGw24Sq4KlTPB1WtDGdiqOutKMUv3g8UD0W03TYe7QfgzNEHvVd1h4FrCg2ozlB IrJaCh3llPmSuEx/ICDdEKFV2QqmjB7X6UohhpiFGlLQbUr5li07yWqDf87pB1qE TCqZfDLk74+DYxVbSdCG00wrtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDUCgIa ju0zP89HDIijTm3i/4/TMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB00/WysolRGTPCXDRgUGIaBLzdStigRT6oOlxuIGoncbWO38WmSyGk Nbq5FBFkd5eEc/ZVpd09NXx5yUkDpesjGH0pO6yRNX4FW+vwUxJKol3C83nYffXY jo0JnzuY3fw5M2qMbtDC/tKhvvkqtPmcim8Wz9GbxsWfGnM4vIdcAieBbyKqG0v2 cQ4XajycBLKjpNTGPaGkYonNfYOFjUPs2c6+dJvccuIQ0VJwJJxJlHpvjIWxQM9j 6lNQEfy/bUNN23ODemBsG+LSuVrinv/HKl9QiqpQ5TBI1xohlctts6B2la3HP0Tf zNvInztLwRy0xR4oAWDg8Wca1gO/sh++ -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:30 2025 by rpki-client