$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: RAWS0NGtD+TJgE68rnVkYp0acIMTTb0dqg12qX2JX/M= Subject key identifier: 8F:DB:87:ED:9B:A9:FD:A6:C9:07:8F:52:E0:5D:63:17:5A:FF:DB:6D Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 34C4 Signing time: Wed 06 Aug 2025 14:55:14 +0000 Manifest this update: Wed 06 Aug 2025 14:55:14 +0000 Manifest next update: Wed 13 Aug 2025 14:55:14 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: Keyl585c2RSaV9i/DFgaGuA6Q+8AuGNc6dFLlGdow6k=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Aug 6 14:55:14 2025 GMT Not After : Aug 13 14:55:14 2025 GMT Subject: CN=68936cd2-ee4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:8d:81:bd:f4:51:2a:50:b1:cb:06:4e:c8:6c: 67:aa:70:09:da:4d:ba:53:b1:56:df:a0:f0:e3:b6: 23:50:01:cd:4f:0a:ae:9c:54:2f:78:15:1a:6d:47: f0:01:b2:44:a8:c0:f2:21:95:00:0a:25:8f:ab:8b: 2f:b5:ef:a1:8f:f3:30:9f:5a:d1:37:3c:85:95:a7: 5e:63:01:44:5a:48:da:c1:d3:91:3c:70:d0:5e:e1: 7d:28:96:79:f3:c6:20:2c:e0:e8:86:b3:84:22:f4: 2f:53:be:cc:d1:22:85:dd:5d:7f:ef:d9:b0:e7:fc: 2b:92:38:1d:07:31:5c:4f:58:86:ce:3d:49:cf:58: f6:84:f3:d5:ca:c1:43:ce:a2:4e:6e:74:0e:3f:8a: 14:ae:5a:60:3c:39:6f:c3:b8:63:95:0e:21:51:fc: b6:22:32:c5:41:12:79:2d:c2:17:df:08:8a:96:50: de:4b:9d:bc:35:9a:70:cc:1d:06:c7:e1:22:f6:6b: 6a:a8:f0:76:4b:52:9d:ed:4e:48:77:05:92:e9:be: 91:b2:ea:80:a3:7e:6d:32:90:7d:17:4b:ee:67:86: 7c:ed:87:c9:b6:f8:38:59:94:f7:5d:91:17:26:16: df:9d:92:c1:74:6c:72:ef:6e:38:7c:84:3f:52:9f: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:87:ED:9B:A9:FD:A6:C9:07:8F:52:E0:5D:63:17:5A:FF:DB:6D X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9e:03:8d:30:8c:d7:b2:cb:a3:3d:86:6b:4d:6a:3c:31:16: 0b:42:88:ca:32:5c:22:9b:a2:71:01:86:6b:3e:29:5c:b8:8e: b7:32:97:da:63:52:12:4b:4c:57:42:df:2f:dc:f0:7f:c6:5b: c5:83:6f:e1:d4:9b:e4:5a:2c:f1:1c:54:41:e1:97:5e:c4:c3: 9f:66:6e:00:0e:16:53:9f:dc:32:d0:c2:da:67:94:89:a1:80: 82:04:a1:f7:58:aa:72:92:78:7c:01:cb:2d:c0:f4:38:f5:17: 46:bc:fe:5e:49:f7:20:e7:07:08:63:04:47:fc:7d:51:99:49: 83:6b:d3:cd:02:fa:aa:d0:c6:eb:1c:3c:db:02:a4:5c:fd:23: 38:83:9b:57:8f:26:bd:d9:47:72:2b:e1:81:3e:c3:8a:58:e1: 1b:f8:c5:6f:33:35:17:89:7d:09:75:8a:ff:5f:6d:2b:0a:df: 53:4d:64:04:7f:93:3e:a9:f4:a7:6b:6a:43:5c:5d:1d:39:85: 85:e3:14:fc:b4:0d:a4:53:8f:c4:14:e9:84:69:ba:3d:4a:dd: 22:f6:32:39:1f:0c:5f:04:df:c4:c1:09:44:62:d8:a7:a0:eb: e5:0c:dc:eb:9a:46:10:78:78:da:33:84:0d:5c:13:4e:08:b9: 54:a5:77:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwODA2MTQ1NTE0WhcNMjUwODEzMTQ1NTE0WjAYMRYwFAYD VQQDEw02ODkzNmNkMi1lZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Y2BvfRRKlCxywZOyGxnqnAJ2k26U7FW36Dw47YjUAHNTwqunFQveBUabUfw AbJEqMDyIZUACiWPq4svte+hj/Mwn1rRNzyFladeYwFEWkjawdORPHDQXuF9KJZ5 88YgLODohrOEIvQvU77M0SKF3V1/79mw5/wrkjgdBzFcT1iGzj1Jz1j2hPPVysFD zqJObnQOP4oUrlpgPDlvw7hjlQ4hUfy2IjLFQRJ5LcIX3wiKllDeS528NZpwzB0G x+Ei9mtqqPB2S1Kd7U5IdwWS6b6RsuqAo35tMpB9F0vuZ4Z87YfJtvg4WZT3XZEX JhbfnZLBdGxy7244fIQ/Up8v+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/bh+2b qf2myQePUuBdYxda/9ttMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ngONMIzXssujPYZrTWo8MRYLQojKMlwim6JxAYZrPilcuI63Mpfa Y1ISS0xXQt8v3PB/xlvFg2/h1JvkWizxHFRB4ZdexMOfZm4ADhZTn9wy0MLaZ5SJ oYCCBKH3WKpyknh8AcstwPQ49RdGvP5eSfcg5wcIYwRH/H1RmUmDa9PNAvqq0Mbr HDzbAqRc/SM4g5tXjya92UdyK+GBPsOKWOEb+MVvMzUXiX0JdYr/X20rCt9TTWQE f5M+qfSna2pDXF0dOYWF4xT8tA2kU4/EFOmEabo9St0i9jI5HwxfBN/EwQlEYtin oOvlDNzrmkYQeHjaM4QNXBNOCLlUpXfM -----END CERTIFICATE-----Generated at Thu Aug 7 23:59:32 2025 by rpki-client