$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft File: JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft (raw, json) Hash identifier: gW2WkeeKNspJ3gCfSmbmRuNq7kT5V3bqGxuN5UF0G1U= Subject key identifier: 3D:38:BB:E9:91:42:25:80:01:F9:C5:C3:3E:C4:6C:B2:7E:F3:A2:F4 Authority key identifier: 25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 Certificate issuer: /CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft Manifest number: D4 Signing time: Thu 07 Aug 2025 06:05:39 +0000 Manifest this update: Thu 07 Aug 2025 06:05:39 +0000 Manifest next update: Thu 14 Aug 2025 06:05:39 +0000 Files and hashes: 1: JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl (hash: mQrPCMqTntRTbyQB/F9Uaz6oQ5XFsso26J1gVCRimwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Validity Not Before: Aug 7 06:05:39 2025 GMT Not After : Aug 14 06:05:39 2025 GMT Subject: CN=68944233-4768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:b9:5f:5e:6d:9f:fa:a0:bb:34:a8:04:a8: ce:01:e4:af:6d:d0:d0:47:35:5e:0f:88:53:79:eb: eb:27:65:d5:bb:86:e1:75:b9:8e:6c:a7:1f:bf:6f: fc:e2:15:b6:5a:a8:43:06:1a:34:cf:19:bd:0c:ca: 7c:66:00:00:7e:28:b2:7a:ea:0d:03:eb:4e:84:9a: ee:03:f2:32:60:ae:95:6f:39:c2:86:a8:ed:c5:1e: 90:04:cb:3f:78:bc:7b:67:0c:d1:e4:c8:e9:bb:23: 45:03:07:ec:e9:63:65:3c:26:08:e0:c8:08:ea:e2: 59:03:11:b8:94:69:72:74:99:79:70:92:94:24:46: a3:b7:f1:73:56:94:e6:98:70:7e:f4:57:6f:31:46: a1:f2:ae:9e:94:6b:2b:cd:26:8b:19:1b:cb:46:b0: c8:23:7a:fc:c9:7f:ae:40:0e:ce:ff:86:c2:de:44: e6:57:4c:ba:22:95:3b:26:26:39:29:a6:4a:f7:6f: bf:fd:d3:91:41:40:f6:1f:59:ef:7c:d5:ef:a8:68: 51:d6:4e:d0:c7:ac:9d:95:b1:c5:9d:13:35:1a:14: 3e:7a:b0:9d:94:43:fe:be:3a:ea:2f:ab:05:b0:0b: 6a:3b:76:27:7c:84:24:ff:67:9b:76:bd:4e:72:0d: f2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:38:BB:E9:91:42:25:80:01:F9:C5:C3:3E:C4:6C:B2:7E:F3:A2:F4 X509v3 Authority Key Identifier: keyid:25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:fc:e9:3a:88:5b:c9:a2:13:c4:50:9e:f2:a3:42:bd:37:c7: dd:b0:fd:51:da:e6:98:d6:51:7f:33:1f:b9:5c:11:fd:b5:08: 97:d0:45:25:e2:3a:63:fe:70:fc:f3:1e:11:7d:5d:d1:71:51: e2:24:4b:11:8d:b4:9d:1e:e6:22:17:ac:b2:35:ab:da:47:da: a9:c2:16:a3:a9:40:be:b8:57:7d:78:6c:dd:05:a1:b9:5e:0b: 69:24:86:e0:4a:bd:ab:af:57:7e:6a:7d:1a:9d:21:e9:6d:0f: 98:3a:67:e1:73:39:72:d0:9f:c1:a9:df:24:97:25:7f:0e:d4: 50:0d:a9:c1:e0:03:7a:11:44:e9:03:ce:ba:22:f1:65:6e:26: 06:2b:29:d1:27:68:8a:b0:a3:dd:95:f9:3d:93:d9:80:b9:7e: 90:93:68:b8:2a:d2:61:74:f9:73:4a:e7:59:b0:b2:63:43:80: 6d:48:d6:1c:39:c9:19:1e:5c:60:17:00:bc:09:6b:28:6b:75: 70:83:47:02:92:e5:05:80:f1:e5:fa:21:ae:c1:e7:5d:7a:43: e5:23:11:bb:b3:d6:81:c6:5f:0e:a9:cc:d9:b8:8a:5c:92:e5: 30:66:dd:2f:2f:e7:0f:82:cd:b1:7f:32:6f:a0:01:00:33:f5: 38:18:1f:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKDI1ODE3RjhBMDU5MTJFMkQ2QkQ1OUJFRjFGOTUxMzdF OTNEQzk5MzMwHhcNMjUwODA3MDYwNTM5WhcNMjUwODE0MDYwNTM5WjAYMRYwFAYD VQQDEw02ODk0NDIzMy00NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdS5X15tn/qguzSoBKjOAeSvbdDQRzVeD4hTeevrJ2XVu4bhdbmObKcfv2/8 4hW2WqhDBho0zxm9DMp8ZgAAfiiyeuoNA+tOhJruA/IyYK6VbznChqjtxR6QBMs/ eLx7ZwzR5MjpuyNFAwfs6WNlPCYI4MgI6uJZAxG4lGlydJl5cJKUJEajt/FzVpTm mHB+9FdvMUah8q6elGsrzSaLGRvLRrDII3r8yX+uQA7O/4bC3kTmV0y6IpU7JiY5 KaZK92+//dORQUD2H1nvfNXvqGhR1k7Qx6ydlbHFnRM1GhQ+erCdlEP+vjrqL6sF sAtqO3YnfIQk/2ebdr1Ocg3yQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD04u+mR QiWAAfnFwz7EbLJ+86L0MB8GA1UdIwQYMBaAFCWBf4oFkS4ta9Wb7x+VE36T3Jkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8xNDMyM0Q3NDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxpMXIxWnZ2SDVVVGZwUGNt VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZRl9pZ1dSTGkxcjFadnZINVVUZnBQY21UTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8xNDMyM0Q3NDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxp MXIxWnZ2SDVVVGZwUGNtVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx/Ok6iFvJohPEUJ7yo0K9N8fdsP1R2uaY1lF/Mx+5XBH9tQiX0EUl 4jpj/nD88x4RfV3RcVHiJEsRjbSdHuYiF6yyNavaR9qpwhajqUC+uFd9eGzdBaG5 XgtpJIbgSr2rr1d+an0anSHpbQ+YOmfhczly0J/Bqd8klyV/DtRQDanB4AN6EUTp A866IvFlbiYGKynRJ2iKsKPdlfk9k9mAuX6Qk2i4KtJhdPlzSudZsLJjQ4BtSNYc OckZHlxgFwC8CWsoa3Vwg0cCkuUFgPHl+iGuweddekPlIxG7s9aBxl8OqczZuIpc kuUwZt0vL+cPgs2xfzJvoAEAM/U4GB91 -----END CERTIFICATE-----Generated at Fri Aug 8 00:47:26 2025 by rpki-client