$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft (raw, json) Hash identifier: fObmb2HwfsfWMjIvs9mFneujmtKY0HUJawtXFDLIptU= Subject key identifier: AD:A4:65:87:32:C9:FF:8E:9A:00:A4:4D:54:01:52:8F:3B:BA:74:6B Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03 Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft Manifest number: 1D Signing time: Sat 09 Aug 2025 08:24:57 +0000 Manifest this update: Sat 09 Aug 2025 08:24:56 +0000 Manifest next update: Sat 16 Aug 2025 08:24:56 +0000 Files and hashes: 1: JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl (hash: rzMA4ie6P3NkFfnklQNoXpFV6puvVX8hbTTMmIyUcks=) 2: E879D5BC4B1911F08F30867AC4F9AE02.roa (hash: OZHK+au5UwVImKpl7QVZcEGwIUNhlUMC18l25bqrmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03 Validity Not Before: Aug 9 08:24:56 2025 GMT Not After : Aug 16 08:24:56 2025 GMT Subject: CN=689705d9-f282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:9b:b1:85:d1:e8:a0:49:7d:4f:44:a7:b1: 15:64:26:11:67:6f:00:fe:8e:73:81:b4:3c:80:7b: 08:15:fc:55:f4:4c:7e:18:1f:f6:30:0f:35:35:db: a9:44:0f:e5:e6:c9:a9:78:9e:42:03:e9:44:32:01: c8:44:ea:76:f9:c2:f6:22:b5:e6:56:61:69:84:2f: 65:3b:ec:38:6b:f2:33:53:96:20:da:31:c1:d8:9b: f8:74:5f:0b:50:46:86:95:50:69:42:76:b3:7b:fc: 1d:cb:5a:d5:9e:4a:09:c4:e7:71:63:d6:aa:a7:4e: a6:82:3e:fa:00:4a:41:9c:90:c5:73:0b:24:87:47: a6:a6:b6:80:54:af:13:72:0d:6b:9c:7c:71:c2:02: 47:64:2c:2e:a8:3d:32:cb:c6:bf:fa:d7:4c:22:18: 80:65:e1:c3:60:b3:6a:0c:3f:31:83:44:71:2a:ee: 6d:b7:69:20:86:95:08:5c:20:7e:11:4e:81:07:23: 38:f1:5b:ba:69:02:1d:25:fe:ce:c8:f7:96:e3:2c: 93:52:14:6f:84:94:e9:16:f8:3e:da:3c:2d:64:52: 28:bd:b5:f5:e2:e6:58:17:8a:7f:4a:3d:b6:e1:ea: eb:b5:bb:ad:34:51:c6:8f:a7:54:8b:62:c9:34:64: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A4:65:87:32:C9:FF:8E:9A:00:A4:4D:54:01:52:8F:3B:BA:74:6B X509v3 Authority Key Identifier: keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4b:82:25:82:19:6a:75:8b:ac:6f:5a:0b:fc:a1:b9:9c:b7: 39:66:a2:8a:cf:66:6b:3e:2c:74:70:74:01:5d:0f:29:98:32: 98:4e:2c:d7:e2:74:1e:62:c3:82:25:ff:d4:74:f5:de:d7:3c: bd:4a:d7:6f:40:4f:2c:f8:74:6a:36:35:22:43:15:63:5e:92: 11:a0:cc:4b:cf:ec:98:e8:f0:48:cd:55:9d:6c:25:45:95:78: aa:ac:9d:37:cf:b3:31:67:d2:d6:75:3b:00:db:a2:41:79:07: a8:37:92:31:5d:09:ea:44:ff:04:b6:88:55:fe:29:89:9d:a1: 04:1c:0e:7c:92:39:06:bb:70:dc:16:ee:09:30:a7:36:8c:16: 96:fb:91:d4:e0:f7:9a:7c:7e:56:91:a4:3a:7d:ed:38:fe:b9: 64:78:ef:22:48:93:3c:61:e7:3c:28:2c:49:4c:7a:a4:42:62: a4:3e:52:93:31:7d:e0:8c:26:e9:1e:a6:ae:d8:1d:fb:10:2e: 48:76:2c:43:f6:9b:fb:d9:26:e4:99:c8:ec:48:60:58:cd:65: 9a:9d:c6:e8:40:cb:ac:1c:ec:c0:3f:0a:b8:59:e6:47:07:75: cb:a9:c8:06:79:ae:c5:da:1e:d9:16:f3:91:d1:f0:ba:80:3c: 91:94:20:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoMjQ1RkY0NUMyODY1MkJGNzE1NjU4NUEzRkQ5QTc5NzRF NTM3NUQwMzAeFw0yNTA4MDkwODI0NTZaFw0yNTA4MTYwODI0NTZaMBgxFjAUBgNV BAMTDTY4OTcwNWQ5LWYyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvXJuxhdHooEl9T0SnsRVkJhFnbwD+jnOBtDyAewgV/FX0TH4YH/YwDzU126lE D+Xmyal4nkID6UQyAchE6nb5wvYiteZWYWmEL2U77Dhr8jNTliDaMcHYm/h0XwtQ RoaVUGlCdrN7/B3LWtWeSgnE53Fj1qqnTqaCPvoASkGckMVzCySHR6amtoBUrxNy DWucfHHCAkdkLC6oPTLLxr/610wiGIBl4cNgs2oMPzGDRHEq7m23aSCGlQhcIH4R ToEHIzjxW7ppAh0l/s7I95bjLJNSFG+ElOkW+D7aPC1kUii9tfXi5lgXin9KPbbh 6uu1u600UcaPp1SLYsk0ZJOzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUraRlhzLJ /46aAKRNVAFSjzu6dGswHwYDVR0jBBgwFoAUJF/0XChlK/cVZYWj/Zp5dOU3XQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0I2M0YzMUFFNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19jVlpZV2pfWnA1ZE9VM1hR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkZfMFhDaGxLX2NWWllXal9acDVkT1UzWFFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0I2M0YzMUFFNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyL0pGXzBYQ2hsS19j VlpZV2pfWnA1ZE9VM1hRTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJLgiWCGWp1i6xvWgv8obmctzlmoorPZms+LHRwdAFdDymYMphOLNfi dB5iw4Il/9R09d7XPL1K129ATyz4dGo2NSJDFWNekhGgzEvP7Jjo8EjNVZ1sJUWV eKqsnTfPszFn0tZ1OwDbokF5B6g3kjFdCepE/wS2iFX+KYmdoQQcDnySOQa7cNwW 7gkwpzaMFpb7kdTg95p8flaRpDp97Tj+uWR47yJIkzxh5zwoLElMeqRCYqQ+UpMx feCMJukepq7YHfsQLkh2LEP2m/vZJuSZyOxIYFjNZZqdxuhAy6wc7MA/CrhZ5kcH dcupyAZ5rsXaHtkW85HR8LqAPJGUIHU= -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:17 2025 by rpki-client