$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: /Py44WX606/sCpLcfcixXl7nmIOFal9CKm4GKUNoj/c= Subject key identifier: D3:4E:AF:64:68:12:15:42:03:ED:5C:AE:C1:81:48:0F:61:7C:B7:BC Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 47 Signing time: Thu 07 Aug 2025 08:07:56 +0000 Manifest this update: Thu 07 Aug 2025 08:07:56 +0000 Manifest next update: Thu 14 Aug 2025 08:07:56 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: hugmMoHvfnMKYiIP1zjrulZpHo5f0ODhmSvbVV3fSqg=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: SWRmAGbxh5hY7JV5X8hEzDbtYDfPhYpW9hzMkzuDG3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Aug 7 08:07:56 2025 GMT Not After : Aug 14 08:07:56 2025 GMT Subject: CN=68945edc-ba21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:bb:34:2a:a3:08:3a:20:3c:69:cf:e8:ce: c8:48:34:01:ab:9c:40:a2:ab:bb:c4:32:89:2e:7d: 95:6f:79:71:36:1f:2f:2f:43:f6:69:00:e8:bf:eb: ea:a6:85:3d:ad:a0:de:4a:19:fc:f3:df:b0:24:35: 86:49:7a:c0:6c:70:06:f0:58:e3:a0:6c:9f:86:83: ec:e2:e5:7d:20:50:0d:e2:59:28:88:ac:0e:02:74: b7:11:61:ef:be:4e:76:3e:b3:4f:31:29:08:9f:17: 15:41:cd:93:23:81:62:ba:dd:cd:62:fe:9e:10:eb: 4f:9d:50:97:ea:14:29:b1:3e:11:4e:cc:13:35:68: 8c:d5:4b:54:36:71:7b:4e:f4:d4:4b:ac:7a:33:22: 63:6e:49:81:14:b0:be:dd:11:2b:1b:bf:dc:da:ea: d0:1d:e7:04:49:d7:4a:9b:cb:cf:b0:8e:e1:d8:b1: 47:e1:31:fa:6b:32:b7:f8:73:85:38:b7:15:30:2f: f5:47:d6:d4:3c:61:3d:42:71:e1:7a:7c:51:13:20: c7:45:a8:62:65:3d:87:ad:70:bb:c7:af:7a:d3:9a: 7a:12:03:41:6a:f1:e4:22:c7:6b:30:55:4e:b3:6a: 7f:86:ce:67:9a:4f:6b:dd:fc:32:80:77:51:bc:55: 53:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4E:AF:64:68:12:15:42:03:ED:5C:AE:C1:81:48:0F:61:7C:B7:BC X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f2:a0:a3:45:8b:a6:34:38:23:31:22:bd:9a:7c:dc:a1:e3: 14:bf:fb:31:f1:9a:ad:98:cb:75:47:d4:de:78:87:aa:c6:35: f2:b2:31:1d:46:1a:7d:c1:b1:d8:20:27:ef:79:ef:da:c6:53: 02:66:84:2f:d3:ee:ed:fa:67:38:cf:ee:c8:72:a2:4c:50:3d: 2a:7e:4d:21:c3:0c:09:f2:da:95:2a:d6:32:58:1c:1f:93:eb: f8:ec:5e:d4:6c:f6:15:42:ad:20:81:c0:67:86:a8:a0:4e:fa: 70:4b:4a:5c:cf:30:b8:7b:0f:76:53:25:b5:a0:8a:94:ee:46: 48:c1:92:d7:77:a0:37:ec:26:69:00:30:b6:94:9a:f2:ab:d7: 6b:59:87:7d:f9:cd:e8:06:ac:af:66:32:d1:d4:72:de:9e:89: bf:d6:06:b1:8d:d0:2f:f6:14:42:2d:03:19:82:db:53:38:ac: 58:d5:36:1b:6d:43:31:fe:c7:62:24:5f:8d:d1:8c:1a:85:11: 98:83:94:79:d7:ef:dd:56:2e:d0:b7:dc:fc:05:91:45:99:a7: 88:fd:5c:3d:46:32:d0:53:06:d5:17:c6:8c:53:71:ec:0c:5f: 5e:78:5e:4f:31:06:ae:99:d2:4e:d8:9d:b4:aa:0f:87:51:d1: f6:24:c9:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0I1RjExMC8GA1UEBRMoOTQ5NkIxRkM2MDYzNjQ0MzcyMzk4Q0VBMzM4QjgyMjQy NTkxNzVDQjAeFw0yNTA4MDcwODA3NTZaFw0yNTA4MTQwODA3NTZaMBgxFjAUBgNV BAMTDTY4OTQ1ZWRjLWJhMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA9Ls0KqMIOiA8ac/ozshINAGrnECiq7vEMokufZVveXE2Hy8vQ/ZpAOi/6+qm hT2toN5KGfzz37AkNYZJesBscAbwWOOgbJ+Gg+zi5X0gUA3iWSiIrA4CdLcRYe++ TnY+s08xKQifFxVBzZMjgWK63c1i/p4Q60+dUJfqFCmxPhFOzBM1aIzVS1Q2cXtO 9NRLrHozImNuSYEUsL7dESsbv9za6tAd5wRJ10qby8+wjuHYsUfhMfprMrf4c4U4 txUwL/VH1tQ8YT1CceF6fFETIMdFqGJlPYetcLvHr3rTmnoSA0Fq8eQix2swVU6z an+GzmeaT2vd/DKAd1G8VVMLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU006vZGgS FUID7VyuwYFID2F8t7wwHwYDVR0jBBgwFoAUlJax/GBjZENyOYzqM4uCJCWRdcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQjVGL0JBMDBDNTE0MTM2 NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEpheF9HQmpaRU55T1l6cU00dUNKQ1dSZGNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVO eU9ZenFNNHVDSkNXUmRjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFXyoKNFi6Y0OCMxIr2afNyh4xS/+zHxmq2Yy3VH1N54h6rGNfKyMR1G Gn3BsdggJ+9579rGUwJmhC/T7u36ZzjP7shyokxQPSp+TSHDDAny2pUq1jJYHB+T 6/jsXtRs9hVCrSCBwGeGqKBO+nBLSlzPMLh7D3ZTJbWgipTuRkjBktd3oDfsJmkA MLaUmvKr12tZh335zegGrK9mMtHUct6eib/WBrGN0C/2FEItAxmC21M4rFjVNhtt QzH+x2IkX43RjBqFEZiDlHnX791WLtC33PwFkUWZp4j9XD1GMtBTBtUXxoxTcewM X154Xk8xBq6Z0k7YnbSqD4dR0fYkyTo= -----END CERTIFICATE-----Generated at Fri Aug 8 20:51:53 2025 by rpki-client