$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json) Hash identifier: NN2JLnaHbD5OlasYqeOcvuPNUBqbjZNqqWkO9on2lHo= Subject key identifier: AA:9C:CC:EE:B1:10:61:F1:FE:67:8F:15:7B:F7:95:6F:D6:55:DC:B3 Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft Manifest number: 0645 Signing time: Fri 08 Aug 2025 23:07:41 +0000 Manifest this update: Fri 08 Aug 2025 23:07:40 +0000 Manifest next update: Fri 15 Aug 2025 23:07:40 +0000 Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: s6454aI5fWltO4zfbF+s2+p7kbNYiIq7jsc9sc34Beg=) 2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: R1Y6eiOJRngWNoMb/hZgB+WoPatpFv2M5OZIAKAIm84=) 3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: HVmlfUboreM+5lOMQKNuZ66xB592Xa6SyHAFupxeouM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Validity Not Before: Aug 8 23:07:40 2025 GMT Not After : Aug 15 23:07:40 2025 GMT Subject: CN=6896833d-6c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:f9:67:05:84:f1:69:08:3c:52:f3:7a:b0: 20:39:20:91:4d:08:22:b9:09:80:7f:de:f8:5d:b7: d0:ff:ee:37:ce:89:3a:69:64:6f:9b:f6:5b:51:ea: fe:1f:bd:23:5c:97:2f:d0:ce:83:7d:bd:7f:06:1e: 82:00:7b:4b:97:bf:0e:31:f0:29:23:45:56:39:62: 5e:79:89:ea:ba:16:69:22:1f:a7:75:a4:a6:84:dd: 22:a1:9f:8b:54:1f:e4:62:7a:1a:76:dd:e8:eb:5c: 54:b0:66:d0:17:e9:4a:32:89:88:af:4e:fe:38:d2: 26:0d:c4:9c:23:30:d8:9a:44:0e:53:dd:d1:7e:14: 5b:f9:95:d5:20:29:19:49:97:fb:8f:ed:a1:b1:de: f2:50:fc:12:ce:88:c8:f3:f5:82:2d:75:c1:52:86: 44:b4:64:76:7a:f3:38:a5:8b:2b:c6:86:97:fc:cb: 3b:5c:4c:bb:60:6c:e4:58:78:6e:ee:a0:14:d3:3f: ff:10:58:a9:39:6d:c7:6b:5f:6c:99:c9:da:6d:a1: d3:8f:05:f1:3b:ca:7c:2a:93:1f:33:15:f4:76:61: 3a:72:24:57:c3:53:47:83:f9:7a:63:64:1e:12:1b: f2:34:40:30:cb:1f:dd:70:a1:71:a5:22:d3:71:a8: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9C:CC:EE:B1:10:61:F1:FE:67:8F:15:7B:F7:95:6F:D6:55:DC:B3 X509v3 Authority Key Identifier: keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4d:58:1e:c8:ab:c1:9f:cd:43:93:6c:30:1f:af:0e:bd:87: cb:f9:14:f2:a9:06:0e:7c:72:12:b9:a1:bd:75:dd:63:27:e2: 09:ea:f9:5a:bb:10:41:b0:7e:f2:94:f1:29:c4:58:20:99:6d: 7c:12:6d:58:68:98:fb:4b:9f:cc:c0:27:84:86:5f:39:d5:1b: c2:b2:98:dc:e3:6e:78:df:f9:e3:03:88:93:61:66:b8:23:ca: 72:0b:be:5c:38:22:8a:1f:94:38:2f:7a:f4:b7:7e:d9:8b:9d: 54:ca:fb:95:4d:7c:4e:a6:e5:2b:a6:f1:41:a5:10:45:76:b6: 5c:9a:8c:79:6c:b8:d4:26:60:06:fc:2c:37:89:8c:ad:1a:0c: 0f:32:5c:1c:6a:7c:b8:0d:59:f0:3f:85:fd:4e:b0:bd:ce:c5: b8:90:52:8e:ae:88:1d:8a:14:a8:7d:c5:46:ec:78:13:f5:e5: a2:10:13:10:06:6a:e0:ae:d8:c6:ec:3d:70:9d:a6:65:e0:dd: 49:b0:0e:0b:4b:a1:17:2a:ef:db:cf:35:74:60:9f:68:b7:46: bc:ea:80:f1:74:1a:28:75:20:81:d6:12:56:15:1d:70:2a:98: 67:04:f3:16:e1:d7:e3:4d:66:67:d3:0d:7c:5e:b9:3c:58:6d: 67:2e:33:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3 QUIyQjNCMkUwHhcNMjUwODA4MjMwNzQwWhcNMjUwODE1MjMwNzQwWjAYMRYwFAYD VQQDEw02ODk2ODMzZC02YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzL5ZwWE8WkIPFLzerAgOSCRTQgiuQmAf974XbfQ/+43zok6aWRvm/ZbUer+ H70jXJcv0M6Dfb1/Bh6CAHtLl78OMfApI0VWOWJeeYnquhZpIh+ndaSmhN0ioZ+L VB/kYnoadt3o61xUsGbQF+lKMomIr07+ONImDcScIzDYmkQOU93RfhRb+ZXVICkZ SZf7j+2hsd7yUPwSzojI8/WCLXXBUoZEtGR2evM4pYsrxoaX/Ms7XEy7YGzkWHhu 7qAU0z//EFipOW3Ha19smcnabaHTjwXxO8p8KpMfMxX0dmE6ciRXw1NHg/l6Y2Qe EhvyNEAwyx/dcKFxpSLTcagRlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqczO6x EGHx/mePFXv3lW/WVdyzMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdTVgeyKvBn81Dk2wwH68OvYfL+RTyqQYOfHISuaG9dd1jJ+IJ6vla uxBBsH7ylPEpxFggmW18Em1YaJj7S5/MwCeEhl851RvCspjc42543/njA4iTYWa4 I8pyC75cOCKKH5Q4L3r0t37Zi51UyvuVTXxOpuUrpvFBpRBFdrZcmox5bLjUJmAG /Cw3iYytGgwPMlwcany4DVnwP4X9TrC9zsW4kFKOrogdihSofcVG7HgT9eWiEBMQ BmrgrtjG7D1wnaZl4N1JsA4LS6EXKu/bzzV0YJ9ot0a86oDxdBoodSCB1hJWFR1w KphnBPMW4dfjTWZn0w18Xrk8WG1nLjPY -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:27 2025 by rpki-client