$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json) Hash identifier: LRNjy7r1+ZcVnxXURwi/a5SmF8ZVbd0yhSy3TTkfOjo= Subject key identifier: AA:A6:F8:4D:A8:61:50:DD:7E:50:5A:21:A5:C0:53:4C:A5:AB:F6:66 Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft Manifest number: 07C7 Signing time: Sun 20 Jul 2025 21:15:49 +0000 Manifest this update: Sun 20 Jul 2025 21:15:48 +0000 Manifest next update: Sun 27 Jul 2025 21:15:48 +0000 Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: CBR1gd/AjEqlH3fJj1GK2f+ADXy0t2gzvgeJgI5dflU=) 2: 076948B2428E11EF912F3710C4F9AE02.roa (hash: TUrfxp2ZB674b0yMhOuMDImIoCsh/4WxM1ekk3XEVBs=) 3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: 5DLrlaEwDnRAYVGqsc8MbRxK5SZfYcfygcKSB5RewQw=) 4: 9ADCD3BA0CC211ED8C32645BC4F9AE02.roa (hash: 9AR0wajPgZJi4aan8+IRMeXtcBiZo3LvqeT/rc/ePUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Validity Not Before: Jul 20 21:15:48 2025 GMT Not After : Jul 27 21:15:48 2025 GMT Subject: CN=687d5c85-8e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:83:e2:79:5a:cd:d6:23:fc:31:9b:1d:ba: 73:81:04:af:0a:fa:db:f1:31:61:e1:fc:01:2f:b1: 19:67:b0:f6:91:57:41:9f:b3:a0:88:c1:1f:64:95: 63:53:21:f6:55:88:22:d4:8a:d5:c5:db:3d:82:f2: e5:5b:95:39:ca:88:8c:b0:fb:f4:19:f5:61:96:d0: 68:46:69:93:c7:3f:54:82:7a:fb:fa:1a:a5:d7:e7: fa:65:1e:ee:08:11:3a:e7:04:ce:ef:ac:75:d7:97: ae:26:43:a6:75:23:87:40:3d:71:1e:0f:d0:8f:23: 84:70:f5:d2:f4:21:f6:d3:12:3b:38:b5:a6:69:57: e1:eb:37:d4:80:91:0d:8a:6a:12:68:15:89:7e:e3: 22:77:22:b7:ea:9e:0b:71:bc:aa:30:ef:6d:bb:b7: 63:41:a5:cc:62:61:e4:61:54:d3:be:40:c2:81:1d: c6:26:e0:09:e1:18:43:b6:1c:89:07:32:67:d7:e1: 52:05:5c:f1:42:5f:13:a2:e3:53:f5:0c:42:54:56: 57:2a:b4:51:28:71:df:d7:e5:79:48:ec:55:51:29: b1:f5:f1:38:ce:8f:46:39:40:5e:73:e9:af:35:a5: 9b:c5:ad:7a:ce:81:37:2c:10:35:7e:51:33:45:7b: 6a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:F8:4D:A8:61:50:DD:7E:50:5A:21:A5:C0:53:4C:A5:AB:F6:66 X509v3 Authority Key Identifier: keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:9f:b6:81:76:e9:8f:f3:29:5f:73:fa:20:be:ab:0f:1c:e6: 0c:f0:ae:d7:9d:8b:d6:37:4f:a9:59:67:7f:15:37:b5:33:5f: f4:10:5b:06:1b:3b:dd:61:53:99:cb:21:81:e3:35:f8:7b:6b: 35:e2:f0:01:44:0d:d9:84:3c:22:b4:91:27:ab:9a:df:a4:6f: 4c:2f:f9:ba:78:9e:2d:7b:04:69:f9:0c:10:37:50:ab:a9:97: 3a:2e:47:cf:d4:48:f4:62:b5:81:99:6c:b5:98:60:0f:d9:f8: 03:54:0e:b6:a0:f8:5f:3f:71:b5:14:28:f7:cc:ab:e6:1a:d1: 49:58:a9:a4:21:da:06:e1:e2:41:70:5e:72:f2:7a:bc:f6:15: d8:57:e2:30:74:32:a2:08:49:2f:57:c1:79:74:c9:0b:9d:a7: c8:6b:09:4d:26:8f:52:c7:21:bc:fa:20:99:94:6d:fd:f6:ff: 44:6f:5a:9e:e7:ee:a8:cb:39:50:e6:64:99:3a:66:7b:f4:db: 90:57:e8:b7:2d:94:c2:72:02:fd:b9:ec:50:1f:95:e6:c1:96: 1c:e9:bf:e0:00:7b:1e:c2:a2:8f:f8:80:cc:41:94:14:da:9b: f5:37:81:91:81:a9:ad:a7:40:36:3d:5d:a1:dc:4d:08:3f:e1: 6f:4c:a1:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0 OTg2RERGMDgwHhcNMjUwNzIwMjExNTQ4WhcNMjUwNzI3MjExNTQ4WjAYMRYwFAYD VQQDEw02ODdkNWM4NS04ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qCD4nlazdYj/DGbHbpzgQSvCvrb8TFh4fwBL7EZZ7D2kVdBn7OgiMEfZJVj UyH2VYgi1IrVxds9gvLlW5U5yoiMsPv0GfVhltBoRmmTxz9Ugnr7+hql1+f6ZR7u CBE65wTO76x115euJkOmdSOHQD1xHg/QjyOEcPXS9CH20xI7OLWmaVfh6zfUgJEN imoSaBWJfuMidyK36p4LcbyqMO9tu7djQaXMYmHkYVTTvkDCgR3GJuAJ4RhDthyJ BzJn1+FSBVzxQl8TouNT9QxCVFZXKrRRKHHf1+V5SOxVUSmx9fE4zo9GOUBec+mv NaWbxa16zoE3LBA1flEzRXtqZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqm+E2o YVDdflBaIaXAU0ylq/ZmMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2n7aBdumP8ylfc/ogvqsPHOYM8K7XnYvWN0+pWWd/FTe1M1/0EFsG GzvdYVOZyyGB4zX4e2s14vABRA3ZhDwitJEnq5rfpG9ML/m6eJ4tewRp+QwQN1Cr qZc6LkfP1Ej0YrWBmWy1mGAP2fgDVA62oPhfP3G1FCj3zKvmGtFJWKmkIdoG4eJB cF5y8nq89hXYV+IwdDKiCEkvV8F5dMkLnafIawlNJo9SxyG8+iCZlG399v9Eb1qe 5+6oyzlQ5mSZOmZ79NuQV+i3LZTCcgL9uexQH5XmwZYc6b/gAHsewqKP+IDMQZQU 2pv1N4GRgamtp0A2PV2h3E0IP+FvTKHs -----END CERTIFICATE-----Generated at Mon Jul 21 13:23:50 2025 by rpki-client