$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: rnDCibq4/VRngY8SEJ95HBLjedz0E/H3aB5sbXn63l8= Subject key identifier: 33:F6:57:E8:00:65:D8:95:E3:6F:84:D4:AF:FD:5C:02:78:93:49:97 Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 04CB Signing time: Sat 19 Jul 2025 00:12:36 +0000 Manifest this update: Sat 19 Jul 2025 00:12:36 +0000 Manifest next update: Sat 26 Jul 2025 00:12:35 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: MLKTmPEOCWEpYS6Hd4ozp797yzfkxLGRmLzQoG+3NSw=) 2: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: tVHP7vE09ih639kPT+zHjlRDQm6GDfHkbd/XlPHcK/0=) 3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: 8OgnHoASF/UsFAo8WcuH4tg18eHyDNchCEmDTI3RcYo=) 4: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: Egnw+r9qbejML3EvsCqcWRH67VrUmMQV/ILZahM9IPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Jul 19 00:12:36 2025 GMT Not After : Jul 26 00:12:35 2025 GMT Subject: CN=687ae2f4-5932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:d2:e9:1c:4b:b7:fd:f0:3a:e8:a4:af:3b: f9:92:02:de:d1:29:20:0a:82:9f:2d:20:13:1c:2d: 0b:28:68:4e:c1:5d:62:d9:76:4d:84:3f:ff:81:af: 1e:be:1e:f6:00:c4:e7:1d:f8:b7:95:b4:9a:97:e2: 27:c7:9a:16:96:0c:e3:9c:6c:ca:79:96:fb:49:d0: 25:c2:c7:5b:23:b3:4f:fc:bd:8a:12:23:f7:10:82: 4c:1e:c0:a6:92:d9:9b:a8:55:6e:bf:c5:0d:c2:a2: 17:b5:8a:f5:fd:2f:e2:65:73:ea:ef:51:57:b6:5c: c1:d9:2f:0f:5d:d8:57:ec:a1:65:93:3d:8a:a5:b1: 78:00:51:c7:46:5f:b8:7f:fa:69:89:16:72:80:f2: 8d:8e:2b:85:3d:cf:cf:5c:9b:d5:a1:ef:48:70:a7: 49:57:5a:d1:b5:1b:f7:ae:05:a2:88:74:06:63:5e: 7a:a0:0d:22:20:cc:ef:eb:3e:cf:3d:4f:62:50:16: 7b:fa:d3:ae:06:96:a7:e0:fc:48:b9:47:28:b3:5d: 66:07:31:30:8d:79:39:c8:f5:64:06:a5:e2:ae:1e: 28:e9:a9:5b:26:07:d9:fb:ae:48:a8:41:93:5e:95: c4:49:88:5e:cc:6c:2f:85:05:b4:68:7a:09:98:cf: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F6:57:E8:00:65:D8:95:E3:6F:84:D4:AF:FD:5C:02:78:93:49:97 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4b:4f:c2:f1:1a:d6:40:91:c6:9b:07:ec:ef:87:d8:f6:a8: 9b:6b:0e:c6:bb:35:46:f1:a1:40:65:ee:df:d2:d1:98:55:d5: e0:e1:93:96:d4:23:9c:06:93:8b:10:69:66:59:4e:3c:74:f5: 2c:25:72:89:d5:07:39:e3:2b:c2:a4:78:1b:a1:fd:09:28:dc: 13:31:d2:e9:e5:88:3d:07:0f:18:a0:fa:57:f5:5e:4e:97:55: 97:3e:f3:6b:62:03:31:45:e7:ff:d9:a4:f3:55:7b:b9:eb:59: d5:1e:2e:02:eb:c7:51:3d:6c:55:df:02:ae:4f:40:6e:70:f8: 9f:7a:a3:df:fd:e4:fd:06:4c:c9:d6:61:d5:af:43:39:25:a1: 29:4b:79:40:56:62:7a:7c:cb:2d:24:73:a7:3e:8a:d2:b3:51: 02:87:bc:f6:91:54:e4:e9:ee:23:84:50:af:00:d6:95:ba:67: a5:a8:24:88:38:f0:bc:f7:31:4f:77:f0:6b:8a:83:46:86:b4: 69:6c:f3:45:0e:e2:70:53:ed:43:dc:da:a1:06:1a:9c:94:d4: 14:9c:a8:43:67:77:7a:c3:30:60:fb:0b:94:9f:6d:11:92:9b: db:32:17:94:5b:71:d0:45:6a:2c:8f:03:4f:ec:79:0f:40:52: 8c:09:de:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjUwNzE5MDAxMjM2WhcNMjUwNzI2MDAxMjM1WjAYMRYwFAYD VQQDEw02ODdhZTJmNC01OTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytXS6RxLt/3wOuikrzv5kgLe0SkgCoKfLSATHC0LKGhOwV1i2XZNhD//ga8e vh72AMTnHfi3lbSal+Inx5oWlgzjnGzKeZb7SdAlwsdbI7NP/L2KEiP3EIJMHsCm ktmbqFVuv8UNwqIXtYr1/S/iZXPq71FXtlzB2S8PXdhX7KFlkz2KpbF4AFHHRl+4 f/ppiRZygPKNjiuFPc/PXJvVoe9IcKdJV1rRtRv3rgWiiHQGY156oA0iIMzv6z7P PU9iUBZ7+tOuBpan4PxIuUcos11mBzEwjXk5yPVkBqXirh4o6albJgfZ+65IqEGT XpXESYhezGwvhQW0aHoJmM/lhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP2V+gA ZdiV42+E1K/9XAJ4k0mXMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgS0/C8RrWQJHGmwfs74fY9qibaw7GuzVG8aFAZe7f0tGYVdXg4ZOW 1COcBpOLEGlmWU48dPUsJXKJ1Qc54yvCpHgbof0JKNwTMdLp5Yg9Bw8YoPpX9V5O l1WXPvNrYgMxRef/2aTzVXu561nVHi4C68dRPWxV3wKuT0BucPifeqPf/eT9BkzJ 1mHVr0M5JaEpS3lAVmJ6fMstJHOnPorSs1ECh7z2kVTk6e4jhFCvANaVumelqCSI OPC89zFPd/BrioNGhrRpbPNFDuJwU+1D3NqhBhqclNQUnKhDZ3d6wzBg+wuUn20R kpvbMheUW3HQRWosjwNP7HkPQFKMCd7I -----END CERTIFICATE-----Generated at Sun Jul 20 19:09:54 2025 by rpki-client