$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft File: jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json) Hash identifier: jT5PCWr+oIM3U3tTrBTeSufugjuAmxVH3Y7Nh3h/PUs= Subject key identifier: FE:0F:77:9A:B4:9F:0A:A6:12:3E:60:7D:5F:57:2D:C0:B9:44:47:6B Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 Certificate issuer: /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft Manifest number: 0789 Signing time: Sun 20 Jul 2025 21:39:25 +0000 Manifest this update: Sun 20 Jul 2025 21:39:24 +0000 Manifest next update: Sun 27 Jul 2025 21:39:24 +0000 Files and hashes: 1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: kh5rfZVuqi+c4qrVAAKXxgrYsaCRxKQsJlg7Zm3YfFQ=) 2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Validity Not Before: Jul 20 21:39:24 2025 GMT Not After : Jul 27 21:39:24 2025 GMT Subject: CN=687d620c-3669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:ed:38:a6:19:15:92:a0:5b:e4:80:73:0c: 76:1e:c7:da:33:6a:7f:a0:df:68:df:1d:98:43:31: 9f:f2:2d:36:81:35:04:22:15:4f:c6:6b:02:e4:45: fb:c1:3e:0c:b3:e3:85:84:18:50:7a:a3:3a:98:b0: 51:fa:8e:db:0a:32:ec:27:b7:81:06:b1:4b:70:31: d9:25:eb:9e:da:a7:40:7a:d5:c2:66:1e:04:e2:2e: 86:c2:1d:f8:ba:cf:8a:ea:f2:d5:d3:78:9c:96:b6: 9b:de:0d:b8:b2:52:f1:cc:c8:75:2a:f8:7b:c5:6a: d2:b2:87:7c:77:72:37:b7:c0:02:ee:d3:13:dc:d7: e4:df:d4:c6:9e:c7:4d:ff:9c:35:7b:d4:09:c2:51: 30:24:db:36:d6:f5:d9:90:b8:78:ef:20:49:98:c9: 6b:31:4c:51:a3:4b:58:41:8c:73:e7:a8:26:2b:06: 4b:bd:5a:08:73:3b:d6:ef:9a:ca:d7:5a:2a:ac:48: ed:41:a3:1f:57:89:c0:49:f3:ad:8f:b5:21:0d:04: f3:db:d6:ad:67:0c:3b:42:e9:00:19:cb:8f:99:89: 45:de:99:dd:c9:cc:06:63:34:f0:42:d8:c0:0d:e3: 47:77:14:7b:df:1a:15:d1:62:fc:b3:d0:3d:8b:83: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:77:9A:B4:9F:0A:A6:12:3E:60:7D:5F:57:2D:C0:B9:44:47:6B X509v3 Authority Key Identifier: keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:86:f1:b6:ea:70:70:e6:47:2c:07:cb:6e:6e:e6:81:18:a9: 97:d0:99:c1:be:60:fa:db:b6:ea:2a:b5:a0:19:5b:ab:ca:8c: 42:e8:ec:e4:5f:16:e2:f8:ed:53:2b:b9:87:6b:99:91:fc:d8: f2:22:61:68:3f:b8:e6:b8:6e:f9:c1:7c:4a:76:78:fd:55:d3: e8:7f:06:05:0c:53:8c:7f:c7:6e:f7:69:96:b8:6b:04:1f:f7: e5:86:dc:9f:d9:9d:18:3b:fc:fe:35:37:84:51:ef:d6:41:1e: 07:81:ad:8c:1d:6e:63:b6:03:17:b6:12:e7:94:49:6c:cc:82: 24:71:f9:b1:21:fc:2c:fc:5e:0f:a8:f9:0f:70:95:45:50:1f: e2:a7:60:47:5e:91:00:33:b8:1c:54:50:41:92:b4:1a:2e:4c: f6:20:39:a8:11:f8:46:bd:dd:88:8a:e9:7d:3e:71:6b:c9:aa: bf:84:49:a6:0a:fa:3c:f3:a5:5d:3b:a2:7c:40:bc:a9:4c:5a: 2c:2a:e8:8b:da:90:bc:2c:7b:cb:78:25:ca:c0:96:1e:f5:66: 0c:59:8d:d1:61:7c:e1:92:22:a5:27:22:53:48:79:48:77:e8: ac:31:1a:25:7f:93:13:5e:be:85:84:54:6b:79:be:5e:07:14: 24:94:33:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx N0YyMUJFMjAwHhcNMjUwNzIwMjEzOTI0WhcNMjUwNzI3MjEzOTI0WjAYMRYwFAYD VQQDEw02ODdkNjIwYy0zNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9HtOKYZFZKgW+SAcwx2HsfaM2p/oN9o3x2YQzGf8i02gTUEIhVPxmsC5EX7 wT4Ms+OFhBhQeqM6mLBR+o7bCjLsJ7eBBrFLcDHZJeue2qdAetXCZh4E4i6Gwh34 us+K6vLV03iclrab3g24slLxzMh1Kvh7xWrSsod8d3I3t8AC7tMT3Nfk39TGnsdN /5w1e9QJwlEwJNs21vXZkLh47yBJmMlrMUxRo0tYQYxz56gmKwZLvVoIczvW75rK 11oqrEjtQaMfV4nASfOtj7UhDQTz29atZww7QukAGcuPmYlF3pndycwGYzTwQtjA DeNHdxR73xoV0WL8s9A9i4MJBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4Pd5q0 nwqmEj5gfV9XLcC5REdrMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjdFRC8zMDg4Nzg5ODFGM0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9k NUNBY1RBVTFYLXNYOGh2aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqhvG26nBw5kcsB8tubuaBGKmX0JnBvmD627bqKrWgGVuryoxC6Ozk Xxbi+O1TK7mHa5mR/NjyImFoP7jmuG75wXxKdnj9VdPofwYFDFOMf8du92mWuGsE H/flhtyf2Z0YO/z+NTeEUe/WQR4Hga2MHW5jtgMXthLnlElszIIkcfmxIfws/F4P qPkPcJVFUB/ip2BHXpEAM7gcVFBBkrQaLkz2IDmoEfhGvd2Iiul9PnFryaq/hEmm Cvo886VdO6J8QLypTFosKuiL2pC8LHvLeCXKwJYe9WYMWY3RYXzhkiKlJyJTSHlI d+isMRolf5MTXr6FhFRreb5eBxQklDPo -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:16 2025 by rpki-client