$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: 2YDIbAwYWDyZLz9r98WmMBMH7/MQW0pT5v8MW5yWvHA= Subject key identifier: 5F:C8:0C:72:B7:1B:EA:58:21:E7:4C:24:C5:61:31:7D:E6:28:17:57 Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 94 Signing time: Thu 07 Aug 2025 07:00:31 +0000 Manifest this update: Thu 07 Aug 2025 07:00:31 +0000 Manifest next update: Thu 14 Aug 2025 07:00:31 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: G0Z/oo5N2vGlo3bB85myQkjOQf7f5KyEnOAo9l3sD7A=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Aug 7 07:00:31 2025 GMT Not After : Aug 14 07:00:31 2025 GMT Subject: CN=68944f0f-9196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:a4:c6:dc:33:82:5e:82:c9:95:99:27:cb: d9:99:e6:e8:5f:a6:b0:fe:5a:7a:94:ab:68:a7:5b: a3:c6:24:d2:0c:a8:2f:71:00:55:a0:bb:39:28:a8: 9b:74:fd:25:c0:9e:ed:c1:56:52:27:c5:0d:5d:09: 7f:ec:d2:83:d1:f2:d1:ea:7b:b9:d7:5b:a8:3c:e2: ad:96:20:67:f5:cb:1a:c1:62:14:ae:b7:7b:fa:8a: eb:81:41:4f:7e:96:ed:d5:5c:51:65:3f:75:c8:7c: 1b:25:d0:0e:36:0d:88:af:6b:99:7c:9f:6f:73:96: 8a:46:19:14:e6:74:61:24:8b:47:80:62:a5:eb:8e: 01:92:9a:c3:7a:0b:a2:28:b4:d7:03:57:35:29:97: f8:8a:83:c0:50:1f:13:56:23:dd:84:46:9c:53:92: 77:04:06:c9:3b:a5:1e:d4:55:be:ef:19:88:ec:34: 2d:0e:4a:e8:f9:a0:87:0f:bf:f2:32:ec:d9:ad:47: ba:2b:aa:f8:2f:c5:92:c3:53:de:2b:12:61:4f:4d: 5b:cb:bf:7e:31:74:e4:a8:3e:1d:e7:23:42:55:f9: 52:94:09:23:87:68:a6:f7:8d:43:ea:c6:5f:de:9e: 64:c6:04:71:b0:0f:d5:ff:e2:78:2e:cc:27:bb:16: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C8:0C:72:B7:1B:EA:58:21:E7:4C:24:C5:61:31:7D:E6:28:17:57 X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:af:dc:45:2b:ab:78:6b:bd:10:53:a3:8d:15:e1:93:35:75: d8:ad:75:e3:1e:0a:d9:6d:1b:c5:91:fe:0a:be:e7:53:5e:1d: d9:07:6a:6b:f0:55:7f:6f:db:54:2b:98:6a:f3:29:11:1e:7e: ad:1d:14:25:e4:64:48:d2:99:3b:10:8e:2b:ce:1f:70:eb:5f: 8d:60:d1:c5:e2:4b:1a:df:75:65:04:93:55:8d:9d:97:f5:b0: 9d:c5:a9:d2:43:86:6f:57:88:47:a4:c7:9c:45:95:85:13:87: 43:c8:8d:53:92:74:5b:ac:5e:fc:7d:c8:8c:d9:81:35:fa:92: c1:7d:f1:ca:25:4f:06:ca:f8:fa:56:49:b0:fa:2a:42:d3:af: bc:29:d1:96:02:c0:bc:39:4e:6e:30:4a:81:70:8f:67:24:1b: 67:51:bd:8d:fa:9e:27:9d:71:2f:a5:80:17:18:37:4b:99:48: ba:c7:20:84:aa:70:e2:66:3d:d7:ab:2d:6f:ed:20:e3:23:f8: 83:3d:fd:c4:1f:94:05:6f:89:d4:3c:8f:68:6b:e7:69:c4:f6: 22:b4:d7:8c:5b:98:11:9f:58:3c:84:5c:36:b2:75:b5:77:ed: 72:4e:b0:7f:f5:df:1c:7d:8e:02:b9:d3:e7:ca:fd:af:27:f4: 34:f2:7c:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjUwODA3MDcwMDMxWhcNMjUwODE0MDcwMDMxWjAYMRYwFAYD VQQDEw02ODk0NGYwZi05MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznKkxtwzgl6CyZWZJ8vZmeboX6aw/lp6lKtop1ujxiTSDKgvcQBVoLs5KKib dP0lwJ7twVZSJ8UNXQl/7NKD0fLR6nu511uoPOKtliBn9csawWIUrrd7+orrgUFP fpbt1VxRZT91yHwbJdAONg2Ir2uZfJ9vc5aKRhkU5nRhJItHgGKl644BkprDegui KLTXA1c1KZf4ioPAUB8TViPdhEacU5J3BAbJO6Ue1FW+7xmI7DQtDkro+aCHD7/y MuzZrUe6K6r4L8WSw1PeKxJhT01by79+MXTkqD4d5yNCVflSlAkjh2im941D6sZf 3p5kxgRxsA/V/+J4Lswnuxb0VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/IDHK3 G+pYIedMJMVhMX3mKBdXMB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmr9xFK6t4a70QU6ONFeGTNXXYrXXjHgrZbRvFkf4KvudTXh3ZB2pr 8FV/b9tUK5hq8ykRHn6tHRQl5GRI0pk7EI4rzh9w61+NYNHF4ksa33VlBJNVjZ2X 9bCdxanSQ4ZvV4hHpMecRZWFE4dDyI1TknRbrF78fciM2YE1+pLBffHKJU8Gyvj6 Vkmw+ipC06+8KdGWAsC8OU5uMEqBcI9nJBtnUb2N+p4nnXEvpYAXGDdLmUi6xyCE qnDiZj3Xqy1v7SDjI/iDPf3EH5QFb4nUPI9oa+dpxPYitNeMW5gRn1g8hFw2snW1 d+1yTrB/9d8cfY4CudPnyv2vJ/Q08nyp -----END CERTIFICATE-----Generated at Fri Aug 8 13:04:26 2025 by rpki-client