$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft File: JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json) Hash identifier: 7F6y8vZuADV9IOhvJHK/pl5+fmBqj+awonktvV8020k= Subject key identifier: 2E:0D:AB:71:AF:10:F5:DD:9A:C1:A5:22:7B:6B:7B:91:52:D1:24:F5 Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 Certificate issuer: /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft Manifest number: 0292 Signing time: Sat 19 Jul 2025 02:02:36 +0000 Manifest this update: Sat 19 Jul 2025 02:02:35 +0000 Manifest next update: Sat 26 Jul 2025 02:02:35 +0000 Files and hashes: 1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: 2SmlU2HwCj+6Bt200AHWQaF2tHux1nv/t08gI9dE3z4=) 2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: MWEsRQVRa9qaHn6fTEOexcENWAVY9rzeLcSk3zwVJV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF37, serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Validity Not Before: Jul 19 02:02:35 2025 GMT Not After : Jul 26 02:02:35 2025 GMT Subject: CN=687afcbc-6b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:58:13:92:dd:46:88:2b:4d:15:9b:59:66: 96:18:5e:e0:44:65:9f:be:7d:38:bf:69:2d:e1:21: 2a:b1:9b:6b:57:32:fc:1e:63:a9:de:b1:53:d4:b8: ee:ea:4e:4e:46:dd:d1:7a:80:30:8a:35:d3:f6:7b: 71:f7:79:9a:2a:e6:e7:70:32:3d:bc:63:4a:7b:cd: 89:a5:d0:16:94:54:a2:56:0d:61:e7:05:6c:bc:b3: fe:74:5a:aa:37:cd:a1:a3:9e:3c:bf:92:b8:76:31: d3:e9:39:3f:24:f2:b0:ea:70:33:b9:96:37:04:97: fe:be:9e:95:72:55:24:ed:92:4a:73:47:fb:76:ed: 0e:32:a2:60:60:04:d1:d5:c4:71:da:9b:65:dd:c1: 8e:2a:13:77:70:70:a2:74:b3:7b:c1:be:52:6b:a8: 69:6d:54:1a:29:4f:70:b8:19:a9:17:57:ad:05:17: 91:b7:9a:db:0f:0e:6e:88:64:25:61:64:f8:d6:dd: d3:8b:f5:c6:8a:ed:43:c1:27:3d:47:fa:e6:71:36: 9d:65:d0:d5:fe:61:d0:69:31:80:c4:85:82:39:09: 27:10:d1:d0:fa:67:4b:f0:ab:5a:3e:7b:21:ac:0e: 1b:79:22:73:4a:43:e3:c9:62:f1:7b:86:b7:9f:f6: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0D:AB:71:AF:10:F5:DD:9A:C1:A5:22:7B:6B:7B:91:52:D1:24:F5 X509v3 Authority Key Identifier: keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:82:c2:94:f4:d0:ed:77:9d:8b:7f:b0:a0:34:ff:2d:a0:5b: e4:7f:e0:91:98:f4:77:ef:55:d2:c4:a4:fb:38:d0:da:0c:26: e2:9a:55:35:03:47:44:66:6b:6b:88:a8:1d:70:db:f4:3b:6a: 17:28:48:05:f6:d6:6e:36:a1:1d:a2:2a:95:a3:6a:9a:10:16: 59:b3:7b:9e:64:40:90:28:4d:98:e5:87:e8:0d:57:a3:92:13: e4:fe:f7:b1:64:de:ab:3b:7c:35:a0:39:71:d2:e1:3d:4a:82: 18:2b:57:5b:16:3f:b3:11:c5:bc:d5:c4:8a:59:ce:08:da:ca: 5d:32:4d:60:a1:20:a7:1d:a9:08:69:13:d6:85:48:a2:71:71: 16:b0:47:de:68:b2:19:14:85:37:2a:88:77:cb:52:97:c9:2a: ac:07:51:d5:77:62:03:62:93:f6:e7:6b:b7:a3:74:82:34:1a: e7:73:84:e2:46:88:bf:55:27:c2:74:c0:79:b7:e5:bc:f3:48: 87:3f:ae:d6:ff:ce:b1:cb:3b:3a:48:45:1b:8a:26:d0:13:cc: 72:21:93:52:c7:46:da:a5:e8:40:80:c9:d8:27:43:cb:67:6d: 11:59:ea:31:b7:87:e5:41:4f:cf:3e:e1:b4:9b:b2:1d:e4:e8: 5a:05:ea:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMzcxMTAvBgNVBAUTKDI1NjY1NjZBODRDNURDRTc2RjNCN0YzOTA4REU3RjMy Qjg2NzY3MDcwHhcNMjUwNzE5MDIwMjM1WhcNMjUwNzI2MDIwMjM1WjAYMRYwFAYD VQQDEw02ODdhZmNiYy02YjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0khYE5LdRogrTRWbWWaWGF7gRGWfvn04v2kt4SEqsZtrVzL8HmOp3rFT1Lju 6k5ORt3ReoAwijXT9ntx93maKubncDI9vGNKe82JpdAWlFSiVg1h5wVsvLP+dFqq N82ho548v5K4djHT6Tk/JPKw6nAzuZY3BJf+vp6VclUk7ZJKc0f7du0OMqJgYATR 1cRx2ptl3cGOKhN3cHCidLN7wb5Sa6hpbVQaKU9wuBmpF1etBReRt5rbDw5uiGQl YWT41t3Ti/XGiu1DwSc9R/rmcTadZdDV/mHQaTGAxIWCOQknENHQ+mdL8KtaPnsh rA4beSJzSkPjyWLxe4a3n/arRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4Nq3Gv EPXdmsGlIntre5FS0ST1MB8GA1UdIwQYMBaAFCVmVmqExdznbzt/OQjefzK4Z2cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYzNy9DOENDNUFCNDBE MkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNPZHZPMzg1Q041X01yaG5a d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXWldhb1RGM09kdk8zODVDTjVfTXJoblp3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYzNy9DOENDNUFCNDBEMkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNP ZHZPMzg1Q041X01yaG5ad2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArgsKU9NDtd52Lf7CgNP8toFvkf+CRmPR371XSxKT7ONDaDCbimlU1 A0dEZmtriKgdcNv0O2oXKEgF9tZuNqEdoiqVo2qaEBZZs3ueZECQKE2Y5YfoDVej khPk/vexZN6rO3w1oDlx0uE9SoIYK1dbFj+zEcW81cSKWc4I2spdMk1goSCnHakI aRPWhUiicXEWsEfeaLIZFIU3Koh3y1KXySqsB1HVd2IDYpP252u3o3SCNBrnc4Ti Roi/VSfCdMB5t+W880iHP67W/86xyzs6SEUbiibQE8xyIZNSx0bapehAgMnYJ0PL Z20RWeoxt4flQU/PPuG0m7Id5OhaBeoA -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:28 2025 by rpki-client