$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: YhfhojUXY2Lj8CBdoGzRq2D5jM75dFZQgecnbvprUqY= Subject key identifier: F1:77:C0:0C:E1:10:5A:33:80:37:8B:3F:F3:7D:1F:41:E3:9D:DA:2D Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 0130 Signing time: Mon 21 Jul 2025 04:43:10 +0000 Manifest this update: Mon 21 Jul 2025 04:43:09 +0000 Manifest next update: Mon 28 Jul 2025 04:43:09 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: BjUsGw78an99AlF4UpuAt9pWbUxVljdl6DfFO3slhBg=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Jul 21 04:43:09 2025 GMT Not After : Jul 28 04:43:09 2025 GMT Subject: CN=687dc55e-dd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:93:53:d3:01:8d:ed:28:91:6c:3f:ef:49: 9d:62:50:97:4a:73:ff:d4:57:41:33:1b:cd:dc:53: de:af:6d:46:be:94:7b:66:e8:2b:e3:3d:7e:60:fb: e2:c2:30:be:c8:a3:2f:1a:f5:62:1d:ca:b1:94:22: ed:01:46:a6:6f:a5:16:14:64:e7:10:76:d1:6a:2b: d5:e1:f7:41:09:49:12:55:90:6b:3a:e7:64:a6:8c: e4:4b:d1:37:11:69:36:13:8b:94:0a:3a:e5:6f:53: 2e:88:53:54:70:20:3e:fd:60:04:84:04:1b:a3:84: e9:f8:c5:c6:68:86:32:4c:3e:43:8d:c7:63:b5:5b: 0e:d8:b0:9b:e8:b3:c6:67:3f:ae:04:c7:7a:1b:86: 10:97:bb:f9:1c:d9:3e:8e:4c:95:54:10:d2:0b:99: 6f:b9:f3:e5:0a:ae:d8:0e:76:90:78:aa:14:ee:06: 0a:a5:68:ee:07:10:45:db:8f:dd:fd:a8:a6:45:c5: f7:ea:cc:3d:24:14:4f:95:ad:1a:87:72:95:4b:c7: 5c:52:bb:05:71:36:69:28:d3:0e:ea:b7:0c:33:94: 31:f9:d8:39:85:09:de:aa:ac:45:00:4e:da:e6:df: 3a:e2:bc:77:03:a8:70:f0:f1:95:1c:75:da:bb:2e: b9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:77:C0:0C:E1:10:5A:33:80:37:8B:3F:F3:7D:1F:41:E3:9D:DA:2D X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:92:5a:7d:41:14:50:85:ff:43:13:79:7f:ba:f9:63:f1:3e: e8:f6:d6:e2:fc:e4:c6:04:c9:22:28:3c:23:c5:d4:9d:39:c4: e9:ae:0f:0d:27:2e:0a:20:a9:b9:7f:bb:55:b9:e4:31:97:dc: 17:0e:16:59:58:fa:38:29:0c:09:27:da:06:78:69:95:20:ef: ad:0a:2f:44:1d:48:4a:3c:ff:6a:ef:69:15:79:d7:6e:95:db: da:31:61:73:c4:01:ad:e7:df:58:97:fe:39:a8:e9:2a:fb:9b: 79:78:39:b2:d2:01:3c:1e:e7:4c:2d:8d:57:6b:1b:91:c7:61: 8b:e1:d6:1c:ba:50:8a:bc:3b:f1:30:5f:71:d2:af:96:d6:6b: 36:90:b2:11:41:f0:04:52:bb:a5:be:18:cb:61:be:48:d0:15: c7:7e:89:ba:98:48:7d:32:e2:6a:97:20:9e:6c:2e:d1:e2:3c: 9b:c4:3d:91:8b:1e:07:5f:2f:58:16:77:19:a8:5d:65:7b:9b: 21:1f:ea:cf:80:db:83:5c:c6:d6:37:2a:3f:0f:dc:a0:c9:2a: 15:12:b7:43:84:ff:f2:7b:c6:66:d6:57:12:27:e8:f9:c1:10: d1:1c:00:25:88:39:a7:2e:d6:a7:10:54:00:82:23:18:a0:d3: 5a:1b:df:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwNzIxMDQ0MzA5WhcNMjUwNzI4MDQ0MzA5WjAYMRYwFAYD VQQDEw02ODdkYzU1ZS1kZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLKTU9MBje0okWw/70mdYlCXSnP/1FdBMxvN3FPer21GvpR7Zugr4z1+YPvi wjC+yKMvGvViHcqxlCLtAUamb6UWFGTnEHbRaivV4fdBCUkSVZBrOudkpozkS9E3 EWk2E4uUCjrlb1MuiFNUcCA+/WAEhAQbo4Tp+MXGaIYyTD5DjcdjtVsO2LCb6LPG Zz+uBMd6G4YQl7v5HNk+jkyVVBDSC5lvufPlCq7YDnaQeKoU7gYKpWjuBxBF24/d /aimRcX36sw9JBRPla0ah3KVS8dcUrsFcTZpKNMO6rcMM5Qx+dg5hQneqqxFAE7a 5t864rx3A6hw8PGVHHXauy65AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF3wAzh EFozgDeLP/N9H0HjndotMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsklp9QRRQhf9DE3l/uvlj8T7o9tbi/OTGBMkiKDwjxdSdOcTprg8N Jy4KIKm5f7tVueQxl9wXDhZZWPo4KQwJJ9oGeGmVIO+tCi9EHUhKPP9q72kVeddu ldvaMWFzxAGt599Yl/45qOkq+5t5eDmy0gE8HudMLY1XaxuRx2GL4dYculCKvDvx MF9x0q+W1ms2kLIRQfAEUrulvhjLYb5I0BXHfom6mEh9MuJqlyCebC7R4jybxD2R ix4HXy9YFncZqF1le5shH+rPgNuDXMbWNyo/D9ygySoVErdDhP/ye8Zm1lcSJ+j5 wRDRHAAliDmnLtanEFQAgiMYoNNaG98d -----END CERTIFICATE-----Generated at Mon Jul 21 06:46:04 2025 by rpki-client