$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft File: JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json) Hash identifier: klA+BGU9kACy4VCiXaPn0b3OF3olSulTXlo40zkZoKk= Subject key identifier: F5:00:6C:52:94:E7:2F:79:92:A2:C4:C5:4F:AB:B8:98:EE:EB:74:1C Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 Certificate issuer: /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft Manifest number: 89 Signing time: Sat 09 Aug 2025 03:01:06 +0000 Manifest this update: Sat 09 Aug 2025 03:01:06 +0000 Manifest next update: Sat 16 Aug 2025 03:01:06 +0000 Files and hashes: 1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: xgTQbsiXp1gDfo+Yv2v6xBgGJ0VJenkuvwGMUFVX4So=) 2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: Ha8TSc6ylXlULsjvosE3YzdnyL+kFFYkOUZjNUZAybA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68 Validity Not Before: Aug 9 03:01:06 2025 GMT Not After : Aug 16 03:01:06 2025 GMT Subject: CN=6896b9f2-c0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:8f:b6:d4:94:87:15:db:09:58:d8:96:ac: 17:fc:70:cc:ab:ec:ea:9b:51:dc:95:44:a1:02:1e: f7:07:bc:82:f4:37:58:b9:b4:f0:6c:27:44:9e:6e: 01:c7:6e:ba:ac:ec:7f:0d:da:02:16:50:b9:3e:72: 3f:5f:51:fd:0c:46:45:47:31:17:ac:8c:6e:bd:de: cd:52:a4:a3:69:49:ee:f0:af:ea:d3:ca:6b:38:ab: b9:27:ff:82:78:b6:12:99:f8:a0:f4:06:9f:e6:78: 89:9e:e0:0b:dc:93:37:d6:e0:ab:da:92:a9:a8:fb: 8a:17:fa:c2:39:1d:1f:ad:f9:6a:c8:ca:33:27:1f: fc:7a:77:d5:15:09:f7:25:68:f5:38:45:22:a6:a1: ea:6c:5f:09:a6:28:a1:66:9d:22:a7:70:69:11:2b: 6d:dd:1a:75:5c:99:bc:e8:b5:a5:8f:0c:a2:6a:ba: aa:ba:90:a9:f3:bc:ac:b2:3c:25:c7:42:9f:78:62: be:08:84:f6:c6:b1:46:e5:e1:ad:fd:e5:f3:14:e0: 23:7f:42:38:c4:af:c0:74:01:54:5f:5d:da:38:e7: 00:95:e4:f0:4c:82:e3:58:04:0a:15:26:60:cc:d3: 49:d1:1b:3d:c6:1d:f2:23:d5:62:f3:96:c5:14:a0: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:00:6C:52:94:E7:2F:79:92:A2:C4:C5:4F:AB:B8:98:EE:EB:74:1C X509v3 Authority Key Identifier: keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:49:63:49:e4:66:47:43:31:22:89:8a:6f:33:00:7d:44:57: 64:dc:13:ac:6d:31:40:7a:b6:96:3d:77:b8:de:32:9a:15:ac: 31:7a:17:17:4f:e9:60:03:fb:54:c5:1f:84:53:73:8f:af:b1: 05:d2:84:ad:ff:45:66:d5:56:20:08:43:cb:8d:8f:41:12:a5: 69:35:cf:87:45:27:d6:e2:ea:57:a8:83:53:c9:88:6f:af:ea: d4:f1:14:df:c3:50:95:9e:05:74:5a:7d:1d:1b:24:c8:de:8e: a7:c2:2a:a0:44:9f:15:94:5b:6e:5e:15:e2:b0:d2:21:86:6d: 23:12:eb:71:42:7a:9b:b3:8e:3a:cd:73:23:d2:32:e8:45:6b: cf:ff:aa:c4:44:f8:d3:ed:13:fb:8a:43:24:2e:49:14:79:47: d7:f7:ee:50:ef:e4:d2:05:b1:49:d5:90:55:38:42:48:6a:1a: de:69:10:0a:d2:0f:2d:a8:d3:ea:f3:3c:d5:d2:99:bd:87:17: e2:c4:75:46:70:3b:74:9e:e3:cf:bb:5c:b3:4b:55:b1:44:8b: dc:69:39:9a:ef:9e:54:60:72:2f:8e:42:62:21:68:c9:04:9c: 51:bd:cb:4e:76:54:7f:4b:ea:42:ef:13:0a:9a:52:07:8a:29: 26:88:55:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBMjYxMTAvBgNVBAUTKDI1MkMwMEU5N0U3QTc4Njk1OTM4OENGMjA0QTRDN0U2 NDU1ODBDNjgwHhcNMjUwODA5MDMwMTA2WhcNMjUwODE2MDMwMTA2WjAYMRYwFAYD VQQDEw02ODk2YjlmMi1jMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2KPttSUhxXbCVjYlqwX/HDMq+zqm1HclUShAh73B7yC9DdYubTwbCdEnm4B x266rOx/DdoCFlC5PnI/X1H9DEZFRzEXrIxuvd7NUqSjaUnu8K/q08prOKu5J/+C eLYSmfig9Aaf5niJnuAL3JM31uCr2pKpqPuKF/rCOR0frflqyMozJx/8enfVFQn3 JWj1OEUipqHqbF8JpiihZp0ip3BpEStt3Rp1XJm86LWljwyiarqqupCp87yssjwl x0KfeGK+CIT2xrFG5eGt/eXzFOAjf0I4xK/AdAFUX13aOOcAleTwTILjWAQKFSZg zNNJ0Rs9xh3yI9Vi85bFFKA6DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUAbFKU 5y95kqLExU+ruJju63QcMB8GA1UdIwQYMBaAFCUsAOl+enhpWTiM8gSkx+ZFWAxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi9GNTEwNUU0Q0Ey RjcxMUVGQTIzNjhGNzdDNEY5QUUwMi9KU3dBNlg1NmVHbFpPSXp5QktUSDVrVllE R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pTd0E2WDU2ZUdsWk9JenlCS1RINWtWWURHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REEyNi9GNTEwNUU0Q0EyRjcxMUVGQTIzNjhGNzdDNEY5QUUwMi9KU3dBNlg1NmVH bFpPSXp5QktUSDVrVllER2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxSWNJ5GZHQzEiiYpvMwB9RFdk3BOsbTFAeraWPXe43jKaFawxehcX T+lgA/tUxR+EU3OPr7EF0oSt/0Vm1VYgCEPLjY9BEqVpNc+HRSfW4upXqINTyYhv r+rU8RTfw1CVngV0Wn0dGyTI3o6nwiqgRJ8VlFtuXhXisNIhhm0jEutxQnqbs446 zXMj0jLoRWvP/6rERPjT7RP7ikMkLkkUeUfX9+5Q7+TSBbFJ1ZBVOEJIahreaRAK 0g8tqNPq8zzV0pm9hxfixHVGcDt0nuPPu1yzS1WxRIvcaTma755UYHIvjkJiIWjJ BJxRvctOdlR/S+pC7xMKmlIHiikmiFXQ -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:48 2025 by rpki-client