$ rpki-client -vvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft File: Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json) Hash identifier: N8gLI5tW/oKMLtxwUroI46/bS4FXokYmXK6OflhOGks= Subject key identifier: 0C:8B:E9:6A:5D:C1:11:9B:A0:25:EA:92:28:6C:13:61:5A:1B:F5:F6 Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 Certificate issuer: /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft Manifest number: 4B Signing time: Wed 23 Jul 2025 07:41:14 +0000 Manifest this update: Wed 23 Jul 2025 07:41:13 +0000 Manifest next update: Wed 30 Jul 2025 07:41:13 +0000 Files and hashes: 1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: 7mcGjqtYEfPlh24OTKlbFkCZ9pOUxhz4c53NmLTDn80=) 2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: ddGHr0kpolkDLC4jRmYbLqkLIgOm/5JeTXQQ5En7IJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Validity Not Before: Jul 23 07:41:13 2025 GMT Not After : Jul 30 07:41:13 2025 GMT Subject: CN=6880921a-5cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f5:05:cf:e8:8b:10:34:03:0a:8f:87:ce:89: 3a:99:6f:44:ce:fb:ed:09:7e:6d:e2:78:a4:0e:ef: fd:f7:94:c4:dd:d9:61:5b:02:d4:24:11:08:59:74: b5:fe:1a:ae:3d:a6:e9:2d:f1:46:f0:8a:88:5b:3d: b0:6d:32:86:bf:86:9f:08:88:6c:0e:29:38:39:19: ba:69:18:fb:52:ab:dc:e0:c9:94:80:ba:ba:19:80: 61:72:3a:c9:5c:05:48:25:ab:bd:7a:1c:59:76:35: 8a:08:5a:81:c8:82:ee:26:a4:98:35:ff:98:95:71: 5e:c5:9d:0c:f2:db:35:c9:15:14:e2:06:ad:cc:5c: 0f:46:e1:aa:8c:d8:b6:8f:42:e8:22:31:b4:2a:6d: 89:25:a2:1a:e2:f2:51:17:2e:d2:4f:61:27:6f:ff: 5c:e7:bf:c3:3d:2f:da:3f:9d:74:a1:7b:0b:f3:d2: 69:1d:75:54:d9:d8:50:8c:e7:5d:2b:18:42:49:43: e2:81:de:6d:df:20:ed:27:5c:f8:05:85:ec:36:3c: fd:ba:e5:cd:4f:a6:eb:17:1d:38:50:e3:82:78:33: 95:93:b1:5c:ea:04:bb:1f:c6:e3:b0:a8:1b:00:1d: 45:4b:a1:6a:01:08:b6:fe:7f:2a:68:60:52:29:56: f4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8B:E9:6A:5D:C1:11:9B:A0:25:EA:92:28:6C:13:61:5A:1B:F5:F6 X509v3 Authority Key Identifier: keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:6c:c9:c5:79:43:89:bd:6d:02:ea:83:07:ed:8d:fa:3e:b6: cc:fa:b3:ef:c1:31:be:01:55:21:31:47:65:a9:4e:ba:91:7c: 64:b4:65:ce:96:f2:2e:6f:1c:ca:9d:31:7f:bb:df:84:11:03: 76:44:d8:21:2d:9c:77:e9:f4:f6:d0:95:92:40:5b:7a:5d:d6: 5f:bf:d3:45:79:3e:f7:21:c2:92:af:b8:32:8c:60:c4:38:9d: 09:1d:dc:a5:0b:3c:d7:ab:73:e2:9d:f0:ea:38:fd:18:e7:d6: d6:3d:e9:00:9c:af:b6:2e:30:69:9e:9d:be:e0:40:79:3b:d9: 42:0e:8b:b3:70:8c:28:c2:53:45:79:cd:9a:10:4c:d6:96:82: 2e:23:e3:ee:11:11:53:64:d8:50:5d:0b:c1:a8:24:f0:30:c1: b5:bb:10:f9:f7:18:2a:89:41:86:ef:c6:99:7b:d7:01:91:e1: 9e:11:75:36:66:67:f1:19:5a:3b:24:11:93:9b:8a:5f:58:ca: e3:a7:56:4b:0b:f0:96:9b:f0:3f:4a:22:e3:79:98:68:f8:b9: 77:87:ad:9f:a9:ac:ad:cb:da:61:fd:f2:0c:a5:ee:99:99:26: e7:90:ca:10:df:e2:2b:3d:6e:24:13:df:90:f8:bc:21:26:9a: 0d:5d:6b:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NUZBQjExMC8GA1UEBRMoMjZGOEJEMDNDNUEyQjdBQTcxNzU0NTlFQTA0N0E4ODY3 NjIzOUVFMDAeFw0yNTA3MjMwNzQxMTNaFw0yNTA3MzAwNzQxMTNaMBgxFjAUBgNV BAMTDTY4ODA5MjFhLTVjYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz9QXP6IsQNAMKj4fOiTqZb0TO++0Jfm3ieKQO7/33lMTd2WFbAtQkEQhZdLX+ Gq49pukt8UbwiohbPbBtMoa/hp8IiGwOKTg5GbppGPtSq9zgyZSAuroZgGFyOslc BUglq716HFl2NYoIWoHIgu4mpJg1/5iVcV7FnQzy2zXJFRTiBq3MXA9G4aqM2LaP QugiMbQqbYklohri8lEXLtJPYSdv/1znv8M9L9o/nXShewvz0mkddVTZ2FCM510r GEJJQ+KB3m3fIO0nXPgFhew2PP265c1PpusXHThQ44J4M5WTsVzqBLsfxuOwqBsA HUVLoWoBCLb+fypoYFIpVvS/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDIvpal3B EZugJeqSKGwTYVob9fYwHwYDVR0jBBgwFoAUJvi9A8Wit6pxdUWeoEeohnYjnuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1RkFCL0ZBODYzNzcyRjVB QzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZweGRVV2VvRWVvaG5Zam51 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSnZpOUE4V2l0NnB4ZFVXZW9FZW9obllqbnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 RkFCL0ZBODYzNzcyRjVBQzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZw eGRVV2VvRWVvaG5Zam51QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAABsycV5Q4m9bQLqgwftjfo+tsz6s+/BMb4BVSExR2WpTrqRfGS0Zc6W 8i5vHMqdMX+734QRA3ZE2CEtnHfp9PbQlZJAW3pd1l+/00V5PvchwpKvuDKMYMQ4 nQkd3KULPNerc+Kd8Oo4/Rjn1tY96QCcr7YuMGmenb7gQHk72UIOi7NwjCjCU0V5 zZoQTNaWgi4j4+4REVNk2FBdC8GoJPAwwbW7EPn3GCqJQYbvxpl71wGR4Z4RdTZm Z/EZWjskEZObil9YyuOnVksL8Jab8D9KIuN5mGj4uXeHrZ+prK3L2mH98gyl7pmZ JueQyhDf4is9biQT35D4vCEmmg1da9Q= -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:37 2025 by rpki-client