$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: ju3pZGbuAoapAZd89J/PQH+SBZyP1Va1gH7+zc915OM= Subject key identifier: E7:AF:B8:2B:8E:36:F9:61:1D:F5:EF:C7:BF:59:AE:7E:2E:CF:28:BD Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 43 Signing time: Sat 09 Aug 2025 07:57:24 +0000 Manifest this update: Sat 09 Aug 2025 07:57:23 +0000 Manifest next update: Sat 16 Aug 2025 07:57:23 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: M1VvQyRFaT+U1gnXp4vOibuwCX5y/7gLBFgafBjy7HQ=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: Aug 9 07:57:23 2025 GMT Not After : Aug 16 07:57:23 2025 GMT Subject: CN=6896ff64-b578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:b8:45:f5:1d:f0:61:0e:ca:7c:63:c1:22: 2e:06:4d:3d:92:96:d9:b2:76:a9:94:99:bf:50:40: 7f:4a:5d:ce:59:95:8f:79:be:ec:b0:8e:ce:d8:2b: 66:04:dd:1c:a0:a2:86:a3:0d:34:60:de:fd:ff:d2: 32:e7:96:47:b2:c3:db:05:6f:e1:c7:69:a3:af:bf: d3:b8:36:cc:17:f7:5e:05:cc:a6:61:17:d9:54:46: 44:57:d7:55:1a:6c:c4:6a:9b:7f:c4:c2:8a:df:63: ba:2c:b9:f7:32:5f:ce:ea:ba:09:1e:99:68:10:f7: e9:1f:b8:dd:b7:d8:ca:4a:35:6e:b0:b3:44:3c:8e: cf:4c:75:f5:ff:13:2b:c5:6d:0e:1e:7e:4f:9a:b8: 65:7b:64:cc:87:5d:a7:e8:74:5f:d8:f5:0f:1c:17: 4c:18:28:03:69:ec:b9:a8:44:79:22:1d:5a:50:dd: 9f:ed:e1:8c:81:be:04:d9:bf:da:c6:f0:74:fb:4b: 42:51:7f:86:c4:d0:5b:20:d8:41:70:57:ee:47:b1: ad:a1:9e:c2:44:e5:fd:4a:93:ce:50:36:8a:3f:f4: 00:e9:a7:87:ec:8d:c3:98:69:7b:e6:fe:07:e1:9d: a0:74:15:fe:d0:51:a3:8e:b8:4a:38:41:0f:a5:ca: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:B8:2B:8E:36:F9:61:1D:F5:EF:C7:BF:59:AE:7E:2E:CF:28:BD X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0a:a7:a5:fb:6d:89:8e:4e:31:f1:b7:23:5c:b1:42:38:8f: 95:46:8c:85:e9:e8:e5:04:fd:25:aa:65:ad:67:a7:f4:c8:04: 7c:43:e6:b0:59:b4:36:5d:27:68:26:86:46:54:35:69:6d:46: 09:da:43:f0:a1:f0:de:58:bc:42:9c:2a:b4:0c:ba:2b:cc:49: 99:0d:e2:e1:f7:79:c5:b9:f1:4f:74:59:64:ab:0c:db:69:51: ed:f3:15:2c:73:34:6a:a2:81:73:93:6e:ce:2c:1b:50:32:73: b4:03:87:d5:16:0d:b4:c9:79:be:58:4e:6f:b3:aa:82:27:b2: 13:93:d6:bb:f7:f0:ea:20:30:27:ea:76:cc:9e:21:04:22:4a: b1:a8:47:12:52:39:d4:d6:34:7f:ff:d5:f7:51:48:cb:44:48: 0e:48:53:27:e9:b9:88:8a:11:6e:08:0d:98:12:47:b5:cc:b8: 9c:dc:c1:71:b7:a5:37:7f:8b:46:81:10:d9:e7:66:ba:67:ef: 2c:3a:4e:fe:9c:5a:57:a7:de:4b:53:54:7f:82:14:38:88:05: d0:db:ef:63:77:1c:cc:e1:8a:13:05:75:98:4d:53:5e:e7:fe: d6:1b:8a:a3:60:e4:d1:d2:44:8b:37:c4:ce:4f:ba:00:d5:28: ff:24:e7:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTA4MDkwNzU3MjNaFw0yNTA4MTYwNzU3MjNaMBgxFjAUBgNV BAMTDTY4OTZmZjY0LWI1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV+LhF9R3wYQ7KfGPBIi4GTT2SltmydqmUmb9QQH9KXc5ZlY95vuywjs7YK2YE 3RygooajDTRg3v3/0jLnlkeyw9sFb+HHaaOvv9O4NswX914FzKZhF9lURkRX11Ua bMRqm3/EworfY7osufcyX87qugkemWgQ9+kfuN232MpKNW6ws0Q8js9MdfX/EyvF bQ4efk+auGV7ZMyHXafodF/Y9Q8cF0wYKANp7LmoRHkiHVpQ3Z/t4YyBvgTZv9rG 8HT7S0JRf4bE0Fsg2EFwV+5Hsa2hnsJE5f1Kk85QNoo/9ADpp4fsjcOYaXvm/gfh naB0Ff7QUaOOuEo4QQ+lypaZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU56+4K442 +WEd9e/Hv1mufi7PKL0wHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcKp6X7bYmOTjHxtyNcsUI4j5VGjIXp6OUE/SWqZa1np/TIBHxD5rBZ tDZdJ2gmhkZUNWltRgnaQ/Ch8N5YvEKcKrQMuivMSZkN4uH3ecW58U90WWSrDNtp Ue3zFSxzNGqigXOTbs4sG1Ayc7QDh9UWDbTJeb5YTm+zqoInshOT1rv38OogMCfq dsyeIQQiSrGoRxJSOdTWNH//1fdRSMtESA5IUyfpuYiKEW4IDZgSR7XMuJzcwXG3 pTd/i0aBENnnZrpn7yw6Tv6cWlen3ktTVH+CFDiIBdDb72N3HMzhihMFdZhNU17n /tYbiqNg5NHSRIs3xM5PugDVKP8k5/k= -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:25 2025 by rpki-client