$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft File: jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json) Hash identifier: JO5W04JRa9lnPqigHTkzSwootA8pTyh5CYZBroFReEM= Subject key identifier: 9B:D0:CC:5C:AD:10:FE:3F:8E:43:75:79:2E:CD:EE:65:E1:B2:DB:0E Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55 Certificate issuer: /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft Manifest number: 58 Signing time: Mon 21 Jul 2025 07:22:36 +0000 Manifest this update: Mon 21 Jul 2025 07:22:36 +0000 Manifest next update: Mon 28 Jul 2025 07:22:36 +0000 Files and hashes: 1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: l2U9Zv2TqgQGymIiBOyVyIVHOfRh5sIOKCoeP8BCc/c=) 2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955 Validity Not Before: Jul 21 07:22:36 2025 GMT Not After : Jul 28 07:22:36 2025 GMT Subject: CN=687deabc-b15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:27:e5:c6:4d:69:9a:87:5a:70:20:8f:81: a1:b0:56:ef:35:ee:b1:53:9a:a3:0f:9e:8c:eb:09: 74:a4:d1:dc:4a:2f:71:a0:4d:31:67:f5:a8:85:aa: ca:45:9a:ff:4a:ba:2b:34:28:f0:88:92:2e:99:97: c7:0c:ee:88:ea:04:7d:de:cd:1c:32:66:e8:d8:b3: 0a:2f:7a:62:87:88:59:64:24:83:73:79:17:ec:68: 6b:08:7e:8f:ee:87:fb:50:31:fe:e6:be:66:8d:c8: 60:ad:da:42:c8:ff:b4:9c:81:90:8c:80:8d:33:9f: 91:f7:0c:20:0b:89:ae:c9:e6:c9:dc:d1:9d:a1:ad: b1:8e:4e:e8:ca:1b:db:bf:ab:30:c4:68:0f:fd:cf: 36:df:79:23:8a:7e:5e:47:e2:b4:43:cd:21:15:52: 40:df:e6:91:6a:59:04:af:5a:c6:21:3f:96:59:91: 71:9e:74:6f:4f:35:b4:7c:f8:24:b7:2d:fc:02:b6: ca:c8:27:1a:52:1c:69:11:f0:e6:9e:c5:ce:86:95: 99:9c:08:3d:ef:33:ab:6a:6a:da:67:c6:5c:31:6b: ba:43:af:f3:5a:90:4f:6b:35:96:d7:d5:4c:4b:3d: ac:b5:45:eb:fe:3d:16:6c:9d:6d:60:41:14:67:4b: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D0:CC:5C:AD:10:FE:3F:8E:43:75:79:2E:CD:EE:65:E1:B2:DB:0E X509v3 Authority Key Identifier: keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:10:ea:fa:2b:ca:ae:2b:84:b4:50:df:aa:05:15:d8:c0:c9: 5b:b5:ec:c3:98:fd:4c:0b:6c:da:f7:8f:00:bb:69:6d:f2:56: b6:3f:c9:1d:f9:cc:0b:02:79:43:4f:35:1e:07:1c:43:cf:13: b0:c9:f3:9f:3c:df:3d:5e:04:ed:ad:75:c1:05:fe:6c:46:a7: 1d:fd:94:6d:1c:d1:6b:9b:a2:21:2e:3a:40:d5:ce:77:f4:21: 5f:3b:01:05:f0:6b:9d:72:2c:d5:8e:20:6d:a5:95:13:e4:c4: 5e:48:11:8f:fd:64:18:07:bd:21:cc:c7:1b:90:76:8c:8b:05: 5b:84:7e:c2:93:21:69:3b:8a:41:b3:a2:da:71:60:da:f1:ba: e1:7f:71:f0:52:08:05:87:b1:ed:ec:66:de:f3:9d:75:04:1b: 64:45:e3:58:db:2e:e7:98:6c:3a:ae:7e:f7:22:4b:80:c7:6f: ab:48:8b:dc:7a:13:ca:d3:de:c8:07:f3:57:03:c7:fd:fe:81: 16:7d:67:d5:a2:69:5a:1e:d4:24:b0:f0:60:9f:d1:e6:3b:db: ff:29:41:2b:f0:bf:8a:85:c3:00:d4:7f:b4:4f:71:9a:15:8a: 85:f9:69:cd:e9:7e:69:e1:ea:06:7a:95:31:1b:ef:93:83:6c: 73:59:f4:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkM5MDExMC8GA1UEBRMoOEYyMkQxRjU2MkEwNTA3QjExMzU4RjA1M0RBNDJDODA1 MkQ0Qjk1NTAeFw0yNTA3MjEwNzIyMzZaFw0yNTA3MjgwNzIyMzZaMBgxFjAUBgNV BAMTDTY4N2RlYWJjLWIxNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Cyflxk1pmodacCCPgaGwVu817rFTmqMPnozrCXSk0dxKL3GgTTFn9aiFqspF mv9Kuis0KPCIki6Zl8cM7ojqBH3ezRwyZujYswovemKHiFlkJINzeRfsaGsIfo/u h/tQMf7mvmaNyGCt2kLI/7ScgZCMgI0zn5H3DCALia7J5snc0Z2hrbGOTujKG9u/ qzDEaA/9zzbfeSOKfl5H4rRDzSEVUkDf5pFqWQSvWsYhP5ZZkXGedG9PNbR8+CS3 LfwCtsrIJxpSHGkR8Oaexc6GlZmcCD3vM6tqatpnxlwxa7pDr/NakE9rNZbX1UxL Pay1Rev+PRZsnW1gQRRnS1cPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm9DMXK0Q /j+OQ3V5Ls3uZeGy2w4wHwYDVR0jBBgwFoAUjyLR9WKgUHsRNY8FPaQsgFLUuVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QzkwLzMxQjQ1RkVDRTIx RDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhzUk5ZOEZQYVFzZ0ZMVXVW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanlMUjlXS2dVSHNSTlk4RlBhUXNnRkxVdVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QzkwLzMxQjQ1RkVDRTIxRDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhz Uk5ZOEZQYVFzZ0ZMVXVWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALMQ6voryq4rhLRQ36oFFdjAyVu17MOY/UwLbNr3jwC7aW3yVrY/yR35 zAsCeUNPNR4HHEPPE7DJ85883z1eBO2tdcEF/mxGpx39lG0c0WuboiEuOkDVznf0 IV87AQXwa51yLNWOIG2llRPkxF5IEY/9ZBgHvSHMxxuQdoyLBVuEfsKTIWk7ikGz otpxYNrxuuF/cfBSCAWHse3sZt7znXUEG2RF41jbLueYbDqufvciS4DHb6tIi9x6 E8rT3sgH81cDx/3+gRZ9Z9WiaVoe1CSw8GCf0eY72/8pQSvwv4qFwwDUf7RPcZoV ioX5ac3pfmnh6gZ6lTEb75ODbHNZ9OQ= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:46 2025 by rpki-client