$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: 6z463+mDkeAJaVWLn0wesuGxeZPJd7si1HTF9qZkZl8= Subject key identifier: 59:AB:29:FE:E6:71:5A:F0:F7:28:52:F4:85:5C:68:BA:B3:0A:C1:1F Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 065C Signing time: Fri 08 Aug 2025 22:58:46 +0000 Manifest this update: Fri 08 Aug 2025 22:58:46 +0000 Manifest next update: Fri 15 Aug 2025 22:58:46 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: Z3llRVyeUpJVrFypUMfBKiNBWV5vaMeUz1EHQXL+dWg=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: Aug 8 22:58:46 2025 GMT Not After : Aug 15 22:58:46 2025 GMT Subject: CN=68968126-b1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:5e:77:04:48:b1:37:94:bc:10:f9:7e:c6: e7:3a:c3:c0:7c:70:0b:15:26:67:36:71:5d:0a:4d: f2:f0:1d:54:ef:26:f7:1f:62:a0:83:5a:54:5c:48: 20:fb:50:ce:72:95:98:09:c2:d0:3c:89:40:b7:e8: fd:38:d1:66:e6:5e:67:c3:ee:44:a6:09:38:5d:54: 27:24:2c:f2:a5:c9:0b:97:06:06:29:17:71:cc:5f: 13:c9:66:96:27:3c:dd:43:71:a3:0c:2c:13:14:25: bb:ee:f3:2f:70:61:cd:82:61:e2:ad:40:6e:25:6f: a5:7a:b5:d5:6d:b4:ef:6e:e2:1f:cc:d9:36:08:64: bc:42:18:79:d8:8a:22:28:3d:4a:32:2f:b3:cc:b6: dc:9f:12:94:e8:85:3e:be:8f:cd:7b:ed:9f:70:90: 51:bc:be:01:78:8b:28:65:b2:c7:b3:ed:6c:b2:b8: 77:e3:29:9e:a4:c8:07:7e:f4:0f:c2:e2:5d:ac:8a: 3c:2f:a9:ee:f3:26:34:d2:db:ae:2f:b0:80:ee:89: 70:3a:e5:da:27:b3:af:f2:23:85:ac:3a:9a:d4:6c: 88:3b:55:15:e2:eb:e3:eb:ba:66:66:e3:96:c8:b3: 59:49:8d:1b:62:48:f4:32:e3:0e:5c:20:80:e9:8d: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AB:29:FE:E6:71:5A:F0:F7:28:52:F4:85:5C:68:BA:B3:0A:C1:1F X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:01:bf:36:d3:71:a3:3f:a6:3e:22:44:35:6f:9b:80:bd:ab: 45:ea:ee:17:93:ce:8d:82:79:f1:8b:11:98:77:db:d3:f5:82: 57:46:86:de:cc:3f:42:bb:b4:86:04:1d:ba:66:be:d5:49:75: b0:67:07:95:84:c2:3c:b9:b2:22:0e:b6:60:04:f5:87:98:f8: a9:c7:c5:f5:55:df:86:e3:1b:ec:b6:b5:ec:42:0a:64:ab:6c: 74:53:2c:20:b6:82:10:28:ca:7f:ab:a8:e6:22:04:c2:95:6f: b3:7e:c2:ae:cc:e5:d3:ba:d4:68:d3:4e:6b:46:e0:91:d8:15: 20:f3:0e:17:6e:05:44:e7:5d:a6:07:f2:b1:3e:4f:f1:39:55: ad:e1:71:26:2c:f8:16:a7:de:bf:2b:10:be:f1:1a:1d:0f:da: 44:b3:5d:64:94:a0:fb:c9:78:96:3a:ab:dd:bf:1b:e5:aa:3f: 1e:5c:fb:6b:73:d5:e3:1a:00:ac:6e:b3:3c:e3:8a:ad:bc:89: 4a:b9:13:24:f0:64:ff:81:79:12:ec:e2:2d:55:c5:d7:4c:3d: e2:62:f0:91:8e:0f:e0:b4:0b:69:04:23:a5:fd:24:06:3a:f2: 18:9d:bf:26:3d:d1:6d:24:06:f6:d6:52:ed:86:21:4f:93:45: 6b:b9:6f:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUwODA4MjI1ODQ2WhcNMjUwODE1MjI1ODQ2WjAYMRYwFAYD VQQDEw02ODk2ODEyNi1iMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BdedwRIsTeUvBD5fsbnOsPAfHALFSZnNnFdCk3y8B1U7yb3H2Kgg1pUXEgg +1DOcpWYCcLQPIlAt+j9ONFm5l5nw+5Epgk4XVQnJCzypckLlwYGKRdxzF8TyWaW JzzdQ3GjDCwTFCW77vMvcGHNgmHirUBuJW+lerXVbbTvbuIfzNk2CGS8Qhh52Ioi KD1KMi+zzLbcnxKU6IU+vo/Ne+2fcJBRvL4BeIsoZbLHs+1ssrh34ymepMgHfvQP wuJdrIo8L6nu8yY00tuuL7CA7olwOuXaJ7Ov8iOFrDqa1GyIO1UV4uvj67pmZuOW yLNZSY0bYkj0MuMOXCCA6Y1mOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmrKf7m cVrw9yhS9IVcaLqzCsEfMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxAb8203GjP6Y+IkQ1b5uAvatF6u4Xk86NgnnxixGYd9vT9YJXRobe zD9Cu7SGBB26Zr7VSXWwZweVhMI8ubIiDrZgBPWHmPipx8X1Vd+G4xvstrXsQgpk q2x0UywgtoIQKMp/q6jmIgTClW+zfsKuzOXTutRo005rRuCR2BUg8w4XbgVE512m B/KxPk/xOVWt4XEmLPgWp96/KxC+8RodD9pEs11klKD7yXiWOqvdvxvlqj8eXPtr c9XjGgCsbrM844qtvIlKuRMk8GT/gXkS7OItVcXXTD3iYvCRjg/gtAtpBCOl/SQG OvIYnb8mPdFtJAb21lLthiFPk0VruW8h -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:35 2025 by rpki-client