$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: qwgptvYhJGSJIUD+RKzua903XatBdwhanqVYXvfjq6w= Subject key identifier: F5:E0:07:45:FD:5C:DC:29:06:B5:72:69:71:FA:C0:17:F0:0F:A3:F3 Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0C84 Signing time: Tue 12 Aug 2025 18:26:06 +0000 Manifest this update: Tue 12 Aug 2025 18:26:06 +0000 Manifest next update: Tue 19 Aug 2025 18:26:06 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: kYFLDGPmoF9vKVRtHE19e+vnsV1ajjYM9BBb7RSuonE=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Aug 12 18:26:06 2025 GMT Not After : Aug 19 18:26:06 2025 GMT Subject: CN=689b873e-f70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:f0:68:9b:58:4d:f7:d0:0c:ef:05:19:f8: 00:6a:cd:ac:6a:36:89:f9:78:b2:c1:84:83:50:ac: 58:1a:75:41:66:b2:33:00:21:32:10:f4:7d:cf:85: 60:8f:9e:92:0c:7b:d2:8e:af:f1:33:37:f7:87:64: a0:4a:fc:d0:b9:24:67:c0:fa:59:93:90:7b:c0:7f: 68:d9:82:24:34:4b:97:6b:31:0b:48:a3:e0:02:95: ba:17:94:7d:d6:e9:01:f4:92:60:b2:66:a9:b8:9f: c4:a4:38:40:2a:de:84:72:bf:e3:b6:b9:bc:44:a2: 64:33:5c:7e:9b:d7:e5:a3:da:24:fd:f9:a2:a2:ed: 02:52:dc:a0:27:73:55:eb:f1:5a:80:49:c0:dd:08: 34:f7:7c:c5:9f:cb:bc:37:a7:81:6e:f4:57:6b:2d: d0:51:b7:f3:68:25:70:c8:02:80:94:26:2c:48:15: ff:16:b8:e8:e6:36:50:ef:3b:1c:72:8b:8b:56:e6: 9a:5d:49:14:c5:8d:af:a9:f0:b6:ed:e6:4a:59:96: 44:d4:dd:70:53:1c:df:0c:ec:f8:61:ba:a5:8a:5e: df:ed:a5:2f:a6:dd:79:e0:26:52:a5:46:54:7f:c8: 8d:d1:50:95:df:b4:bc:d6:97:13:d6:83:b6:db:6d: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E0:07:45:FD:5C:DC:29:06:B5:72:69:71:FA:C0:17:F0:0F:A3:F3 X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c3:60:d7:95:bd:3d:dd:7c:56:fc:68:bf:cd:a4:7d:66:40: a9:3b:5a:8a:d0:cc:7c:12:59:48:10:2a:d7:cf:e5:62:cf:50: 50:12:9a:fd:aa:24:04:e5:a7:79:bf:ed:f7:6d:85:dc:8e:ed: a7:f7:30:c7:25:8a:c8:b9:dc:eb:56:4d:7b:23:08:36:11:f8: ac:0a:5b:63:dd:d8:ab:0a:da:26:38:c4:a3:3f:e1:75:a2:d1: 99:c5:a0:54:3e:07:66:c6:93:8d:e6:52:31:09:d6:40:65:d8: 16:3f:23:f4:dc:1d:ff:69:08:8c:05:50:35:30:70:09:aa:08: 4c:a8:85:a4:3d:ac:2c:6d:60:9f:32:13:00:e1:db:d8:05:d9: b0:39:d7:d7:fd:a2:a2:f7:f4:1d:b9:8f:cf:63:df:d4:c3:c4: 80:50:10:d1:7f:ca:8c:33:cd:3e:74:93:9a:e6:72:d8:a6:1e: e2:5f:e1:97:ac:8d:11:4f:f2:c3:bc:0f:fe:ec:69:43:56:54: 75:c6:ae:90:b9:5e:7b:3b:c7:ad:2e:59:02:7e:89:9e:22:38: 10:70:b6:bd:a7:a4:ab:ef:ed:8f:04:6f:dd:03:62:18:e9:e7: ac:a1:9b:cb:19:a4:a4:74:35:8f:d8:4d:af:e2:7a:3b:79:93: 5d:90:f9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUwODEyMTgyNjA2WhcNMjUwODE5MTgyNjA2WjAYMRYwFAYD VQQDEw02ODliODczZS1mNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkXwaJtYTffQDO8FGfgAas2sajaJ+XiywYSDUKxYGnVBZrIzACEyEPR9z4Vg j56SDHvSjq/xMzf3h2SgSvzQuSRnwPpZk5B7wH9o2YIkNEuXazELSKPgApW6F5R9 1ukB9JJgsmapuJ/EpDhAKt6Ecr/jtrm8RKJkM1x+m9flo9ok/fmiou0CUtygJ3NV 6/FagEnA3Qg093zFn8u8N6eBbvRXay3QUbfzaCVwyAKAlCYsSBX/Frjo5jZQ7zsc couLVuaaXUkUxY2vqfC27eZKWZZE1N1wUxzfDOz4Ybqlil7f7aUvpt154CZSpUZU f8iN0VCV37S81pcT1oO2221jQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXgB0X9 XNwpBrVyaXH6wBfwD6PzMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuw2DXlb093XxW/Gi/zaR9ZkCpO1qK0Mx8EllIECrXz+Viz1BQEpr9 qiQE5ad5v+33bYXcju2n9zDHJYrIudzrVk17Iwg2EfisCltj3dirCtomOMSjP+F1 otGZxaBUPgdmxpON5lIxCdZAZdgWPyP03B3/aQiMBVA1MHAJqghMqIWkPawsbWCf MhMA4dvYBdmwOdfX/aKi9/QduY/PY9/Uw8SAUBDRf8qMM80+dJOa5nLYph7iX+GX rI0RT/LDvA/+7GlDVlR1xq6QuV57O8etLlkCfomeIjgQcLa9p6Sr7+2PBG/dA2IY 6eesoZvLGaSkdDWP2E2v4no7eZNdkPm0 -----END CERTIFICATE-----Generated at Wed Aug 13 00:37:47 2025 by rpki-client