$ rpki-client -vvf rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft File: jFWTypaApeo4eDP9NEAjS56AINA.mft (raw, json) Hash identifier: Xv6/AfPobyIExZ4qoUbIoV+7+UHTtvlcV1jov3Ar77g= Subject key identifier: B9:15:F9:67:35:91:80:A7:7A:3F:81:14:C0:26:65:80:BD:A1:52:1B Authority key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0 Certificate issuer: /CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft Manifest number: 0650 Signing time: Mon 04 Aug 2025 23:03:35 +0000 Manifest this update: Mon 04 Aug 2025 23:03:34 +0000 Manifest next update: Mon 11 Aug 2025 23:03:34 +0000 Files and hashes: 1: jFWTypaApeo4eDP9NEAjS56AINA.crl (hash: Gd/nYGmm2I5kwg7IKpctdNpXpN6+RshSerHjFpk6YME=) 2: F603D584E99611EDB0837738C4F9AE02.roa (hash: Okhu1FQgQA+Kf0eFI37SSlIwutQLAOMIG0YXzuCGyrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D78FD, serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0 Validity Not Before: Aug 4 23:03:34 2025 GMT Not After : Aug 11 23:03:34 2025 GMT Subject: CN=68913c46-66b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:55:6e:23:2e:83:28:4a:b3:9b:96:3e:c8: 70:d7:4f:3d:d5:f8:89:51:48:63:e5:6e:e8:f0:07: 37:5b:2b:4e:90:da:11:ee:98:a0:c9:34:93:82:df: 47:73:80:4b:50:94:46:1c:5a:44:a4:93:95:ef:f1: 44:a4:d5:59:47:0f:e2:a7:16:95:4e:2a:ba:60:e5: 06:10:f4:18:63:bc:a1:35:e7:ad:68:e0:13:44:c9: 1b:b1:f5:03:b8:4b:dc:5b:dc:8c:26:7d:65:05:1e: c4:03:6e:63:b2:27:12:a6:bb:20:40:c9:0e:78:b0: 43:d2:f3:9e:e3:dc:3b:2a:f2:a1:95:8c:32:fd:b7: e3:bc:57:bc:f7:05:d2:2d:21:1f:b4:8c:0f:4f:dc: 55:a3:53:f9:bb:81:a5:e7:f5:51:52:e6:8f:a6:37: b5:47:1c:a2:8c:39:a3:79:f1:88:71:8b:f7:23:de: d6:8b:46:00:71:74:ed:29:b6:d4:e7:4a:bb:e4:dd: 3c:1d:f6:9d:8f:a9:9d:8f:08:63:af:80:6d:0f:42: 11:e8:0e:fa:08:dd:f1:39:59:d6:66:80:e6:5e:23: c0:e0:d2:4e:dc:c5:ea:9c:a4:e3:33:a9:5a:d4:e5: ce:b4:cf:70:a0:73:a1:93:61:4d:db:f8:29:f7:38: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:15:F9:67:35:91:80:A7:7A:3F:81:14:C0:26:65:80:BD:A1:52:1B X509v3 Authority Key Identifier: keyid:8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:0b:ed:11:d4:df:8e:f8:04:32:ee:b0:3e:f3:9b:ec:28:7b: 95:ce:05:f1:ec:ce:95:13:2f:5c:95:88:e0:58:34:3d:23:23: 1e:cf:1e:04:2b:ee:22:b0:f8:33:48:00:f5:b3:86:a6:6f:7a: 27:fa:f9:f1:fe:e9:0b:e0:9a:1b:cc:41:ca:b1:8d:8b:e8:85: bf:f9:14:f4:6a:de:03:ec:4d:f7:31:1f:9e:04:92:9b:82:e8: d7:a4:e2:02:59:39:4f:ee:92:6d:41:ac:cd:6b:7e:fb:65:68: c1:f8:08:23:f9:4e:51:91:ed:18:a3:85:b1:e5:36:03:f5:14: dd:77:a2:27:5f:64:a9:d7:75:50:6c:79:f6:35:f8:17:8f:67: 97:cf:ca:cc:41:18:3f:63:00:89:be:08:80:11:5c:13:83:5e: b9:93:8f:27:d6:e7:e6:cc:dc:34:47:e0:80:e7:38:aa:44:64: ea:3b:15:1e:ac:8d:94:08:b5:52:a4:a5:05:e8:09:c4:c8:aa: 1a:70:ee:67:b0:85:ee:02:f4:02:50:42:66:d0:7b:14:9d:39: cf:78:8f:e2:ac:26:86:c1:91:52:6d:21:2e:6d:35:f4:49:c1: d3:28:c0:d6:cc:5d:ac:fc:63:a6:be:d9:05:77:1b:1f:39:c7: ce:8c:0f:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc4RkQxMTAvBgNVBAUTKDhDNTU5M0NBOTY4MEE1RUEzODc4MzNGRDM0NDAyMzRC OUU4MDIwRDAwHhcNMjUwODA0MjMwMzM0WhcNMjUwODExMjMwMzM0WjAYMRYwFAYD VQQDEw02ODkxM2M0Ni02NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMNVbiMugyhKs5uWPshw10891fiJUUhj5W7o8Ac3WytOkNoR7pigyTSTgt9H c4BLUJRGHFpEpJOV7/FEpNVZRw/ipxaVTiq6YOUGEPQYY7yhNeetaOATRMkbsfUD uEvcW9yMJn1lBR7EA25jsicSprsgQMkOeLBD0vOe49w7KvKhlYwy/bfjvFe89wXS LSEftIwPT9xVo1P5u4Gl5/VRUuaPpje1RxyijDmjefGIcYv3I97Wi0YAcXTtKbbU 50q75N08Hfadj6mdjwhjr4BtD0IR6A76CN3xOVnWZoDmXiPA4NJO3MXqnKTjM6la 1OXOtM9woHOhk2FN2/gp9zj7GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkV+Wc1 kYCnej+BFMAmZYC9oVIbMB8GA1UdIwQYMBaAFIxVk8qWgKXqOHgz/TRAI0uegCDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzhGRC9DODBGNkY5MDlC NkQxMUVCODJGQTAzM0VDNEY5QUUwMi9qRldUeXBhQXBlbzRlRFA5TkVBalM1NkFJ TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGV1R5cGFBcGVvNGVEUDlORUFqUzU2QUlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzhGRC9DODBGNkY5MDlCNkQxMUVCODJGQTAzM0VDNEY5QUUwMi9qRldUeXBhQXBl bzRlRFA5TkVBalM1NkFJTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5C+0R1N+O+AQy7rA+85vsKHuVzgXx7M6VEy9clYjgWDQ9IyMezx4E K+4isPgzSAD1s4amb3on+vnx/ukL4JobzEHKsY2L6IW/+RT0at4D7E33MR+eBJKb gujXpOICWTlP7pJtQazNa377ZWjB+Agj+U5Rke0Yo4Wx5TYD9RTdd6InX2Sp13VQ bHn2NfgXj2eXz8rMQRg/YwCJvgiAEVwTg165k48n1ufmzNw0R+CA5ziqRGTqOxUe rI2UCLVSpKUF6AnEyKoacO5nsIXuAvQCUEJm0HsUnTnPeI/irCaGwZFSbSEubTX0 ScHTKMDWzF2s/GOmvtkFdxsfOcfOjA/Q -----END CERTIFICATE-----Generated at Wed Aug 6 09:22:50 2025 by rpki-client