$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: ZJm4bmuayz+EV7R/hF/ED7iXcTdTtRkT1Q+65+/GYY8= Subject key identifier: 32:43:52:7F:78:E7:C3:C1:0C:A1:54:74:DA:02:44:20:03:8D:B5:37 Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 2D Signing time: Sat 19 Jul 2025 07:59:08 +0000 Manifest this update: Sat 19 Jul 2025 07:59:07 +0000 Manifest next update: Sat 26 Jul 2025 07:59:07 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: rvgLx+Du+12TLcEh8Xxf52QGmiraK7WtJcxBaba6mSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Jul 19 07:59:07 2025 GMT Not After : Jul 26 07:59:07 2025 GMT Subject: CN=687b504b-5dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:1c:4b:1c:eb:66:07:65:c4:80:90:15:8d: b9:f3:63:dd:de:2c:3e:21:a1:bc:42:c9:54:a9:d2: 42:ee:ee:67:a2:25:eb:d8:75:21:78:6e:99:e7:59: 37:f2:b9:e1:e5:dc:bc:8d:3d:11:eb:41:95:e0:3b: 0c:7c:3b:77:50:f3:14:04:8d:7d:58:55:fa:fb:0e: 66:f6:c1:ad:5d:b5:e9:ec:bf:7b:52:93:cc:76:e7: 50:bc:41:b8:d7:41:83:dd:18:5f:e3:56:5e:91:51: 78:b2:bb:66:91:a3:5b:5a:12:93:77:da:d8:1c:9d: 5e:3b:af:c4:ab:ac:80:ef:20:13:0a:7c:e9:a1:73: a7:74:ff:99:62:5f:7d:f1:f7:62:9a:ee:f5:d9:cd: 67:5a:ff:f8:2b:74:b7:e5:47:90:c9:a1:70:6c:99: e9:72:ea:1f:7f:1e:50:7c:f6:54:54:bf:69:de:2b: 87:cf:7f:8b:51:a1:e5:b9:c5:64:05:f1:d2:dd:07: 4c:c4:c1:8c:59:7e:71:54:c0:04:84:d4:fd:1d:f1: 9d:f8:50:d8:31:08:f7:b4:61:37:2b:9b:0e:f3:e9: 88:18:f7:93:ee:1f:a4:dc:20:02:bc:f7:10:f9:9e: be:fa:61:37:a1:3b:11:fa:48:51:a7:d7:a5:29:ca: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:43:52:7F:78:E7:C3:C1:0C:A1:54:74:DA:02:44:20:03:8D:B5:37 X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:48:8f:bc:c5:54:ad:74:76:e6:1f:b1:4e:0b:75:50:35:5e: 75:68:c8:69:4b:83:c1:68:0d:1c:09:a0:fa:e5:99:70:12:42: 8e:d4:13:4d:e6:01:5f:46:40:80:22:cd:f6:06:07:f7:c7:7d: 00:9d:20:cb:91:08:68:98:e7:d3:de:ae:5e:b6:b6:f6:59:d9: 43:3c:e3:0b:e1:28:00:9d:8f:c8:15:80:37:e8:e9:f8:a3:a4: 7b:9e:32:df:81:03:bc:e1:8a:0d:23:15:54:8c:7c:6e:1a:67: df:37:a1:9d:cf:b6:41:12:10:35:c2:f8:08:b8:b9:41:49:b8: 0f:90:49:a6:96:23:b4:91:80:b8:4d:f0:22:d5:1e:9e:ed:9a: e7:62:7b:03:74:12:2a:9e:ca:4a:3b:7a:13:67:e7:07:1c:d3: 38:a9:ed:c0:2f:13:65:62:d0:bf:9d:14:a9:f7:80:19:dd:43: 65:bf:4f:4c:44:24:b1:8f:32:9d:c5:da:2d:b7:dc:9e:06:b1: 04:1e:c6:65:9c:23:03:89:63:c6:2d:30:ae:c2:df:04:9a:04: e4:8b:06:70:93:57:17:c6:05:9e:9b:bc:99:7e:7a:82:c9:d9: c6:94:7f:b0:25:07:8f:2c:af:c9:a4:59:9a:1c:d3:82:4d:e3: d8:23:5c:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTA3MTkwNzU5MDdaFw0yNTA3MjYwNzU5MDdaMBgxFjAUBgNV BAMTDTY4N2I1MDRiLTVkYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVcxxLHOtmB2XEgJAVjbnzY93eLD4hobxCyVSp0kLu7meiJevYdSF4bpnnWTfy ueHl3LyNPRHrQZXgOwx8O3dQ8xQEjX1YVfr7Dmb2wa1dtensv3tSk8x251C8QbjX QYPdGF/jVl6RUXiyu2aRo1taEpN32tgcnV47r8SrrIDvIBMKfOmhc6d0/5liX33x 92Ka7vXZzWda//grdLflR5DJoXBsmely6h9/HlB89lRUv2neK4fPf4tRoeW5xWQF 8dLdB0zEwYxZfnFUwASE1P0d8Z34UNgxCPe0YTcrmw7z6YgY95PuH6TcIAK89xD5 nr76YTehOxH6SFGn16UpyiM7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMkNSf3jn w8EMoVR02gJEIAONtTcwHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZIj7zFVK10duYfsU4LdVA1XnVoyGlLg8FoDRwJoPrlmXASQo7UE03m AV9GQIAizfYGB/fHfQCdIMuRCGiY59Perl62tvZZ2UM84wvhKACdj8gVgDfo6fij pHueMt+BA7zhig0jFVSMfG4aZ983oZ3PtkESEDXC+Ai4uUFJuA+QSaaWI7SRgLhN 8CLVHp7tmudiewN0Eiqeyko7ehNn5wcc0zip7cAvE2Vi0L+dFKn3gBndQ2W/T0xE JLGPMp3F2i233J4GsQQexmWcIwOJY8YtMK7C3wSaBOSLBnCTVxfGBZ6bvJl+eoLJ 2caUf7AlB48sr8mkWZoc04JN49gjXGE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:12:02 2025 by rpki-client