$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json) Hash identifier: VnaGSC/Gljimn1J4hryvIRPaXXU8brRzeCJrEfVmDUw= Subject key identifier: CC:EE:94:29:4C:D1:29:64:3C:E6:A5:B9:1C:05:49:A2:52:A3:6E:B4 Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft Manifest number: 09 Signing time: Sat 09 Aug 2025 08:41:43 +0000 Manifest this update: Sat 09 Aug 2025 08:41:42 +0000 Manifest next update: Sat 16 Aug 2025 08:41:42 +0000 Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: OlvSLSZx3MUujqm42PbamuV5Dprjois+bzOf5DW/ee4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Validity Not Before: Aug 9 08:41:42 2025 GMT Not After : Aug 16 08:41:42 2025 GMT Subject: CN=689709c7-f0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:05:2b:93:20:6b:3a:9e:dc:97:f4:4a:f5: b5:0a:48:59:a6:3b:16:b9:39:fb:ad:b8:54:94:56: f6:51:ce:43:f4:7c:c2:6a:00:93:31:f2:44:18:c0: 44:ba:a7:6f:79:6c:84:cf:ac:be:0a:02:40:47:db: 5d:09:7e:ff:f4:c9:41:22:dc:10:87:61:ce:aa:37: 14:9a:3d:c7:bd:a5:87:09:a7:04:31:5b:2d:da:fa: 96:04:75:da:9c:3b:72:99:e0:83:c9:c7:5a:e5:69: df:23:fc:e3:c4:5f:87:20:cd:77:df:cb:76:c0:61: e8:5d:af:c5:12:40:80:62:ad:84:98:d9:75:15:8e: 7f:79:35:9d:88:98:58:83:59:d8:4c:b9:7d:4e:45: bd:75:2b:68:1b:d3:18:86:2f:5d:7f:53:a9:80:2a: 15:55:83:2c:bb:a4:7e:ae:88:1d:ad:d0:8d:15:f1: 29:80:a9:91:1f:e8:ea:dd:71:c3:90:f4:f5:09:22: 85:b5:ff:eb:e1:87:4f:31:24:83:98:a1:d0:60:5e: 04:ff:bb:bf:34:d7:c7:9a:75:d1:fc:a5:bd:3a:68: a7:1f:53:24:47:0b:fa:e6:79:6d:d7:fb:6f:9e:82: 85:ec:60:2e:2e:0d:96:25:e4:fb:b4:ca:55:af:91: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EE:94:29:4C:D1:29:64:3C:E6:A5:B9:1C:05:49:A2:52:A3:6E:B4 X509v3 Authority Key Identifier: keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5b:89:fb:a2:d5:a6:d1:b3:30:0b:e0:12:0b:b4:8a:1c:88: 4f:be:bf:a8:fa:df:18:d0:2a:86:7e:34:f4:48:fe:51:84:3a: 68:6f:dd:a4:f5:1b:bb:18:c9:09:71:6c:a0:f9:66:3a:23:df: ee:9c:0a:b8:b5:b6:5b:12:c8:b0:13:b6:a9:8e:a0:fe:3c:0b: 1e:ca:ad:32:52:92:6a:cf:06:23:72:3d:aa:d2:ff:8f:65:e8: 58:a3:f5:7e:71:9b:c7:0c:09:a9:b8:6e:31:b1:ed:ff:99:67: 6d:e6:37:05:22:01:d4:ca:e2:d5:d5:b9:23:10:21:0d:c8:b5: 49:37:b9:9f:58:83:bd:0d:a5:3b:83:8a:ca:bf:82:2c:8d:53: 8e:84:ec:e8:45:91:8c:1b:39:e5:6d:a1:a6:22:6e:87:57:53: 16:08:41:fc:42:7d:b9:ce:ce:0c:a6:3d:bc:9a:7e:1b:7f:eb: 71:7d:ca:91:1b:a2:39:1c:5a:cd:fc:b8:1e:c2:1a:37:2f:ed: cd:f6:e3:16:f5:3d:23:12:00:9e:35:d2:65:52:25:a7:a2:83: ce:32:a3:6b:25:cd:4d:65:50:aa:a1:91:83:3e:35:a2:9f:a2: e1:ec:e7:a7:20:0e:75:56:ac:df:83:22:2f:bb:48:90:ac:c5: ca:eb:5e:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMjVBMTk3NTgxNkNEOUU4OUYzRDZFQTZBNzYzMDIyNDNC RUMzNDVFRTAeFw0yNTA4MDkwODQxNDJaFw0yNTA4MTYwODQxNDJaMBgxFjAUBgNV BAMTDTY4OTcwOWM3LWYwZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/FwUrkyBrOp7cl/RK9bUKSFmmOxa5OfutuFSUVvZRzkP0fMJqAJMx8kQYwES6 p295bITPrL4KAkBH210Jfv/0yUEi3BCHYc6qNxSaPce9pYcJpwQxWy3a+pYEddqc O3KZ4IPJx1rlad8j/OPEX4cgzXffy3bAYehdr8USQIBirYSY2XUVjn95NZ2ImFiD WdhMuX1ORb11K2gb0xiGL11/U6mAKhVVgyy7pH6uiB2t0I0V8SmAqZEf6OrdccOQ 9PUJIoW1/+vhh08xJIOYodBgXgT/u78018eaddH8pb06aKcfUyRHC/rmeW3X+2+e goXsYC4uDZYl5Pu0ylWvkSndAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzO6UKUzR KWQ85qW5HAVJolKjbrQwHwYDVR0jBBgwFoAUJaGXWBbNnonz1upqdjAiQ77DRe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzRGNkQ2RjYwNkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFHWFdCYk5ub256MXVwcWRqQWlRNzdEUmU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzRGNkQ2RjYwNkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9u ejF1cHFkakFpUTc3RFJlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtbifui1abRszAL4BILtIociE++v6j63xjQKoZ+NPRI/lGEOmhv3aT1 G7sYyQlxbKD5Zjoj3+6cCri1tlsSyLATtqmOoP48Cx7KrTJSkmrPBiNyParS/49l 6Fij9X5xm8cMCam4bjGx7f+ZZ23mNwUiAdTK4tXVuSMQIQ3ItUk3uZ9Yg70NpTuD isq/giyNU46E7OhFkYwbOeVtoaYibodXUxYIQfxCfbnOzgymPbyafht/63F9ypEb ojkcWs38uB7CGjcv7c324xb1PSMSAJ410mVSJaeig84yo2slzU1lUKqhkYM+NaKf ouHs56cgDnVWrN+DIi+7SJCsxcrrXuo= -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:41 2025 by rpki-client