$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: 7t4be9YmyzmKptLQj4oHsmhC1e8Pr97QQn8wtEFlCjM= Subject key identifier: 0F:BA:88:A3:39:ED:19:A9:9C:F8:7C:86:B5:73:2B:E1:92:F8:78:68 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 040F Signing time: Mon 11 Aug 2025 00:33:58 +0000 Manifest this update: Mon 11 Aug 2025 00:33:58 +0000 Manifest next update: Mon 18 Aug 2025 00:33:58 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: Zgr8DzH2m2bgIFx0hUUdiw1D18BhRujyXmKoEOLF1Vk=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Aug 11 00:33:58 2025 GMT Not After : Aug 18 00:33:58 2025 GMT Subject: CN=68993a76-e98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:6f:18:bb:0e:e7:7c:d2:62:a8:9a:d3:aa: b0:b7:22:2d:ae:2d:42:b3:41:89:28:16:bc:48:06: 2f:e4:7a:32:5b:26:e4:1d:cb:9e:20:43:b3:91:c3: 85:80:47:16:46:ac:7d:8b:2d:b7:a4:a5:51:c7:ed: 52:66:e1:60:d2:4a:13:a0:6b:ce:f3:1e:12:f8:47: 02:b4:e7:70:b8:9f:2f:28:6a:2b:08:50:d6:e4:f5: c6:70:05:21:e6:07:14:f6:e9:b8:17:c9:99:a1:60: 4d:b8:51:05:b9:5a:54:7f:1c:df:94:92:ef:38:26: 6d:6f:04:c8:84:08:7c:a9:ac:cf:61:a9:cf:9f:db: e4:94:dd:79:79:64:99:be:82:e3:d1:a2:e8:3e:a0: 9f:17:ae:e8:fa:d7:65:61:ba:da:a7:36:1b:0c:c4: fd:55:b7:52:6c:13:da:3e:2a:45:fd:40:5e:a7:2a: 79:a8:21:c8:8c:62:04:ad:de:4b:17:61:36:69:f8: 45:39:7a:4b:f8:f4:1d:7d:a7:67:ca:4b:03:f9:7c: 3c:28:e1:de:df:e8:5f:3e:4b:fc:72:5b:ba:85:fe: 59:91:63:43:6c:45:e7:ea:e0:80:ec:94:21:7c:cd: 5f:b6:c5:68:cc:d5:1c:2c:23:ee:fd:9c:98:5d:41: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BA:88:A3:39:ED:19:A9:9C:F8:7C:86:B5:73:2B:E1:92:F8:78:68 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:30:f0:3d:5a:db:c6:74:01:23:0a:c2:2a:54:dc:44:b6:08: ee:bc:94:ab:a3:f3:73:63:91:33:2c:88:c4:2f:7d:12:c7:ec: 78:61:b5:f2:d9:14:1d:22:0b:04:bd:b8:0b:5f:87:f2:61:3e: cf:71:42:c0:ae:de:86:94:eb:d2:b4:f1:0d:2e:84:7c:0f:62: ed:a3:eb:88:cb:ba:03:a8:0b:1a:81:65:d3:91:ca:a2:a6:21: 05:34:f4:10:96:3c:70:b5:6f:60:64:25:51:f7:60:d3:8c:45: fc:f9:2d:a2:bb:ea:12:b4:6c:b2:9d:74:8e:c9:ad:3c:0c:3e: c2:27:23:fd:ca:fe:92:ec:c8:62:44:d3:fb:5e:7b:8d:29:64: 6b:f2:7e:e5:ec:37:df:68:5c:f0:cf:ea:f8:be:17:67:4f:b2: 15:e1:ac:70:ef:f9:62:31:ae:d7:60:43:62:af:9e:f3:de:39: bd:ff:b3:57:a7:53:db:0a:23:24:97:05:0a:b8:9c:da:59:55: 4b:e7:b9:64:96:cc:7a:57:56:f1:2a:6f:50:e3:9b:ef:ca:5c: f3:94:e0:67:7b:54:03:0b:34:10:e2:78:7b:c6:4f:cd:a7:0e: 2c:b7:79:fd:ec:58:c6:70:35:07:99:cb:58:2d:2e:3f:91:aa: 08:69:12:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUwODExMDAzMzU4WhcNMjUwODE4MDAzMzU4WjAYMRYwFAYD VQQDEw02ODk5M2E3Ni1lOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q9vGLsO53zSYqia06qwtyItri1Cs0GJKBa8SAYv5HoyWybkHcueIEOzkcOF gEcWRqx9iy23pKVRx+1SZuFg0koToGvO8x4S+EcCtOdwuJ8vKGorCFDW5PXGcAUh 5gcU9um4F8mZoWBNuFEFuVpUfxzflJLvOCZtbwTIhAh8qazPYanPn9vklN15eWSZ voLj0aLoPqCfF67o+tdlYbrapzYbDMT9VbdSbBPaPipF/UBepyp5qCHIjGIErd5L F2E2afhFOXpL+PQdfadnyksD+Xw8KOHe3+hfPkv8clu6hf5ZkWNDbEXn6uCA7JQh fM1ftsVozNUcLCPu/ZyYXUEiXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+6iKM5 7RmpnPh8hrVzK+GS+HhoMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVMPA9WtvGdAEjCsIqVNxEtgjuvJSro/NzY5EzLIjEL30Sx+x4YbXy 2RQdIgsEvbgLX4fyYT7PcULArt6GlOvStPENLoR8D2Lto+uIy7oDqAsagWXTkcqi piEFNPQQljxwtW9gZCVR92DTjEX8+S2iu+oStGyynXSOya08DD7CJyP9yv6S7Mhi RNP7XnuNKWRr8n7l7DffaFzwz+r4vhdnT7IV4axw7/liMa7XYENir57z3jm9/7NX p1PbCiMklwUKuJzaWVVL57lklsx6V1bxKm9Q45vvylzzlOBne1QDCzQQ4nh7xk/N pw4st3n97FjGcDUHmctYLS4/kaoIaRJ+ -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:17 2025 by rpki-client