$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: xAkcMcZsiu8BPNV59LPxuhb7rlrXoWhndJe4PtVxUtA= Subject key identifier: D0:CF:96:8C:65:48:43:15:A4:71:B8:F7:C4:64:FC:97:D8:AB:3F:8B Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 38 Signing time: Sat 09 Aug 2025 08:05:37 +0000 Manifest this update: Sat 09 Aug 2025 08:05:37 +0000 Manifest next update: Sat 16 Aug 2025 08:05:37 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: KhQOUaGI0dqufJ8BGSsaARLb+IEmvxrLqqOCdzMCdf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Aug 9 08:05:37 2025 GMT Not After : Aug 16 08:05:37 2025 GMT Subject: CN=68970151-0a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:8f:b3:74:ad:6b:53:c3:b9:33:86:3a:85: ed:78:d9:dd:45:da:c1:8d:9c:a2:86:ba:79:09:66: d4:b8:13:75:1f:18:9d:3f:3c:f6:6a:20:4e:5c:03: 95:b6:22:e1:31:cf:0b:04:6f:55:b9:a5:e7:53:fa: e2:fb:9d:61:c8:3d:72:ea:3a:0b:c3:14:6c:73:1d: 45:d9:71:8d:00:e2:2d:7b:8f:f4:12:c9:c0:f7:50: 79:2d:21:38:ff:0e:8b:5a:99:df:72:3a:2d:6f:3d: 10:37:5b:0c:70:d3:24:db:ea:e2:f3:d1:73:2c:9a: f0:aa:98:54:6a:94:15:2d:0c:20:47:bf:51:73:f6: 11:0f:15:9d:2a:be:37:9b:6d:1d:41:b8:87:94:5c: 33:60:c3:be:6a:6a:19:9f:60:c3:84:66:80:2e:58: 0e:bc:e5:a2:9c:b1:1b:6a:f3:6d:0c:64:c2:da:f1: f9:51:c1:77:95:f1:92:d5:84:26:6a:4a:dc:d9:8b: 7c:dd:a1:06:16:47:5b:d4:ac:8e:81:54:5d:c7:d0: 17:cd:19:ea:5f:c3:9c:ac:21:fc:96:4d:3b:5e:52: 9a:f6:92:f8:c2:d7:18:25:0c:2f:c8:41:55:38:a7: 86:1b:a3:3c:0b:38:7d:a9:31:ed:23:43:af:26:e0: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CF:96:8C:65:48:43:15:A4:71:B8:F7:C4:64:FC:97:D8:AB:3F:8B X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9a:9d:e3:cb:7b:f9:f5:61:79:fb:dd:41:51:4c:20:63:e2: 20:30:a1:83:a4:8a:d1:91:f1:a5:e8:a4:77:35:e7:56:53:7b: 17:59:9d:a1:ac:2f:bf:cb:01:4e:fb:96:b5:54:e1:08:d8:fc: f8:10:4f:15:2b:61:18:f2:0d:11:c9:ef:25:fd:64:6a:e7:fd: a7:63:24:d0:fe:8d:74:91:bb:fe:14:99:59:d2:3d:6d:8c:60: cc:06:8c:87:2d:47:76:35:da:f7:7a:8a:a5:19:e5:fd:6a:6f: 6f:1e:56:56:1c:df:02:16:fc:d6:e2:8b:be:df:3e:ba:83:3f: 51:fd:d6:c1:54:e9:74:f4:d3:cc:95:18:be:c6:21:32:2f:11: 76:67:46:aa:9c:4c:7a:b0:c9:a8:55:0f:e1:a1:9b:25:3d:90: 31:eb:91:f3:44:4a:70:70:14:29:ca:97:7a:c6:a3:de:54:4d: 35:f5:37:c0:a5:8b:83:07:2a:7a:fe:54:b7:08:5e:3a:f1:20: aa:93:7d:67:35:76:8a:ac:ed:7c:ba:42:7f:5a:80:87:3d:7d: 9e:0e:09:b8:8f:94:80:61:98:00:07:77:57:47:e7:9f:39:d7: b6:ea:8d:a3:c0:74:01:7d:7e:b8:b6:aa:8d:70:0e:89:d6:ba: 66:bc:ca:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTA4MDkwODA1MzdaFw0yNTA4MTYwODA1MzdaMBgxFjAUBgNV BAMTDTY4OTcwMTUxLTBhNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI84+zdK1rU8O5M4Y6he142d1F2sGNnKKGunkJZtS4E3UfGJ0/PPZqIE5cA5W2 IuExzwsEb1W5pedT+uL7nWHIPXLqOgvDFGxzHUXZcY0A4i17j/QSycD3UHktITj/ Dotamd9yOi1vPRA3Wwxw0yTb6uLz0XMsmvCqmFRqlBUtDCBHv1Fz9hEPFZ0qvjeb bR1BuIeUXDNgw75qahmfYMOEZoAuWA685aKcsRtq820MZMLa8flRwXeV8ZLVhCZq StzZi3zdoQYWR1vUrI6BVF3H0BfNGepfw5ysIfyWTTteUpr2kvjC1xglDC/IQVU4 p4YbozwLOH2pMe0jQ68m4NJZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0M+WjGVI QxWkcbj3xGT8l9irP4swHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyanePLe/n1YXn73UFRTCBj4iAwoYOkitGR8aXopHc151ZTexdZnaGs L7/LAU77lrVU4QjY/PgQTxUrYRjyDRHJ7yX9ZGrn/adjJND+jXSRu/4UmVnSPW2M YMwGjIctR3Y12vd6iqUZ5f1qb28eVlYc3wIW/Nbii77fPrqDP1H91sFU6XT008yV GL7GITIvEXZnRqqcTHqwyahVD+GhmyU9kDHrkfNESnBwFCnKl3rGo95UTTX1N8Cl i4MHKnr+VLcIXjrxIKqTfWc1doqs7Xy6Qn9agIc9fZ4OCbiPlIBhmAAHd1dH5585 17bqjaPAdAF9fri2qo1wDonWuma8ysc= -----END CERTIFICATE-----Generated at Mon Aug 11 05:16:46 2025 by rpki-client