$ rpki-client -vvf rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft File: jFWTypaApeo4eDP9NEAjS56AINA.mft (raw, json) Hash identifier: oFyaYIIxUxWGTbYCkK1CcmVJl2swfdOXioEe3l/8HjM= Subject key identifier: DD:55:74:F1:C3:16:DF:A8:23:6C:F1:EB:94:52:50:E1:91:37:9A:FE Authority key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0 Certificate issuer: /CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft Manifest number: 0648 Signing time: Sun 20 Jul 2025 22:50:53 +0000 Manifest this update: Sun 20 Jul 2025 22:50:53 +0000 Manifest next update: Sun 27 Jul 2025 22:50:53 +0000 Files and hashes: 1: jFWTypaApeo4eDP9NEAjS56AINA.crl (hash: mftD4mv+lri37veJi4WMOBUtvgABhionaxIm6vTuKCY=) 2: F603D584E99611EDB0837738C4F9AE02.roa (hash: Okhu1FQgQA+Kf0eFI37SSlIwutQLAOMIG0YXzuCGyrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D78FD, serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0 Validity Not Before: Jul 20 22:50:53 2025 GMT Not After : Jul 27 22:50:53 2025 GMT Subject: CN=687d72cd-493f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:c9:a9:50:07:2a:ba:b3:8e:8b:04:87:12: 96:fd:49:a5:c9:73:1f:36:0c:bd:a2:28:93:21:c8: 25:24:53:54:3f:10:b2:4b:fd:59:2b:77:df:17:de: ae:6e:c8:e2:2b:97:6d:65:1b:b2:a4:bd:a8:5d:9c: 13:be:e3:77:eb:5d:3d:cd:1b:f0:c7:f5:99:ce:b7: 04:45:f3:ad:81:06:59:b3:03:d2:44:21:10:61:2c: 69:6e:88:d8:68:94:9b:a1:4b:04:ac:1e:17:8e:44: cf:bc:7b:2c:b1:08:86:34:0e:63:9c:f2:49:d8:d2: 85:bf:06:14:2a:25:71:b4:f8:dc:d1:67:bd:7c:d1: e3:22:43:1e:9f:99:91:7e:80:7e:dd:f5:5d:59:22: a6:29:4b:90:0d:43:d3:5a:a9:96:59:55:f8:de:6d: 50:2a:90:f3:8c:ce:66:29:2d:d7:ac:ef:10:bd:a8: a9:ff:33:96:b4:4f:ea:bd:12:d5:9e:82:6d:ec:b7: fe:c2:4d:b4:65:e8:db:94:48:06:a3:04:7b:52:8f: 80:50:56:a2:18:82:80:4d:55:aa:01:74:9c:a7:60: 4e:6c:61:49:8c:f1:d5:0f:21:21:c2:07:9c:05:b2: 80:8c:c4:b8:3f:b1:64:8e:79:d5:29:55:ea:df:ad: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:55:74:F1:C3:16:DF:A8:23:6C:F1:EB:94:52:50:E1:91:37:9A:FE X509v3 Authority Key Identifier: keyid:8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0b:df:8e:5c:b8:ac:8b:ab:19:ca:85:03:70:d7:23:d6:5b: cb:1c:e1:ba:6b:03:4f:1f:9c:22:4a:7f:3d:3e:d7:a1:43:63: 6f:2e:8a:8a:6d:bd:27:8d:92:e2:b7:18:97:e2:69:da:a5:fd: ad:af:a5:fc:d1:03:ed:a8:a6:84:3a:79:fa:64:37:c3:dd:62: bd:41:00:7f:03:a9:32:53:2d:65:eb:0e:5f:7f:1e:7b:57:a2: fd:6c:c7:13:4e:a8:c8:b0:07:0f:85:93:a9:ff:90:71:db:77: 72:97:96:c7:77:24:82:b9:c5:39:3b:36:59:9f:f6:7b:b6:a4: a2:0b:1e:13:ac:d1:38:32:1b:82:0b:c1:0a:b8:90:79:6d:80: 91:20:34:d5:03:aa:93:3f:5f:7c:ac:0a:05:92:30:39:8b:d2: 3e:0a:b5:aa:3e:e1:c0:5f:65:00:aa:b7:23:d6:e7:4b:c0:96: 05:11:a1:47:6a:11:58:d6:40:f9:aa:6f:01:46:ce:ba:3a:e2: e0:de:8a:7c:4c:16:ca:08:85:9e:db:aa:d4:2f:fe:09:37:ab: 32:e1:26:46:6c:83:08:c8:d6:85:a3:00:fe:f7:ec:02:cb:9a: 6e:5f:e0:32:e3:9e:68:fa:d3:f8:f4:02:6f:47:6f:fc:44:62: 00:45:85:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc4RkQxMTAvBgNVBAUTKDhDNTU5M0NBOTY4MEE1RUEzODc4MzNGRDM0NDAyMzRC OUU4MDIwRDAwHhcNMjUwNzIwMjI1MDUzWhcNMjUwNzI3MjI1MDUzWjAYMRYwFAYD VQQDEw02ODdkNzJjZC00OTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6XJqVAHKrqzjosEhxKW/UmlyXMfNgy9oiiTIcglJFNUPxCyS/1ZK3ffF96u bsjiK5dtZRuypL2oXZwTvuN36109zRvwx/WZzrcERfOtgQZZswPSRCEQYSxpbojY aJSboUsErB4XjkTPvHsssQiGNA5jnPJJ2NKFvwYUKiVxtPjc0We9fNHjIkMen5mR foB+3fVdWSKmKUuQDUPTWqmWWVX43m1QKpDzjM5mKS3XrO8Qvaip/zOWtE/qvRLV noJt7Lf+wk20ZejblEgGowR7Uo+AUFaiGIKATVWqAXScp2BObGFJjPHVDyEhwgec BbKAjMS4P7FkjnnVKVXq360sdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1VdPHD Ft+oI2zx65RSUOGRN5r+MB8GA1UdIwQYMBaAFIxVk8qWgKXqOHgz/TRAI0uegCDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzhGRC9DODBGNkY5MDlC NkQxMUVCODJGQTAzM0VDNEY5QUUwMi9qRldUeXBhQXBlbzRlRFA5TkVBalM1NkFJ TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGV1R5cGFBcGVvNGVEUDlORUFqUzU2QUlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzhGRC9DODBGNkY5MDlCNkQxMUVCODJGQTAzM0VDNEY5QUUwMi9qRldUeXBhQXBl bzRlRFA5TkVBalM1NkFJTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABC9+OXLisi6sZyoUDcNcj1lvLHOG6awNPH5wiSn89PtehQ2NvLoqK bb0njZLitxiX4mnapf2tr6X80QPtqKaEOnn6ZDfD3WK9QQB/A6kyUy1l6w5ffx57 V6L9bMcTTqjIsAcPhZOp/5Bx23dyl5bHdySCucU5OzZZn/Z7tqSiCx4TrNE4MhuC C8EKuJB5bYCRIDTVA6qTP198rAoFkjA5i9I+CrWqPuHAX2UAqrcj1udLwJYFEaFH ahFY1kD5qm8BRs66OuLg3op8TBbKCIWe26rUL/4JN6sy4SZGbIMIyNaFowD+9+wC y5puX+Ay455o+tP49AJvR2/8RGIARYVQ -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:22 2025 by rpki-client