$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: 2g6d2FhOb8FBn5O9mPo/voIYkgETVSfr9YuUYdFMUUM= Subject key identifier: B5:0E:8D:47:7A:A7:CA:61:02:15:D8:3C:ED:19:DA:1D:BF:1E:AF:CE Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 3B Signing time: Sat 19 Jul 2025 07:52:25 +0000 Manifest this update: Sat 19 Jul 2025 07:52:24 +0000 Manifest next update: Sat 26 Jul 2025 07:52:24 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: roz6EWjK60N9v/j0LgWHUWA5tOMukzOku6tjQiM9Uas=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: SWRmAGbxh5hY7JV5X8hEzDbtYDfPhYpW9hzMkzuDG3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Jul 19 07:52:24 2025 GMT Not After : Jul 26 07:52:24 2025 GMT Subject: CN=687b4eb9-bded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:c3:0f:44:e9:08:cf:22:57:54:e6:07:dd: ec:cc:2d:3d:a0:06:c3:4d:32:67:dd:62:f7:d5:11: 43:db:b4:b8:a7:05:3d:03:c0:a4:b8:47:ae:46:b3: b9:8b:9c:b3:2c:e1:79:12:9d:89:82:bf:57:8d:4b: 75:73:3b:ac:0e:66:dc:62:b5:0e:6f:62:24:14:82: e4:cf:72:08:d3:67:a3:25:13:c5:56:52:a0:93:12: fb:b9:05:83:92:4a:18:7b:9e:26:2a:7e:24:31:96: 12:59:51:0c:c3:a6:d8:f5:19:44:4f:70:b4:fe:7b: 9b:d4:61:a5:9e:2a:04:25:2b:dc:06:1b:d9:10:60: d7:c6:00:1a:b3:a4:b0:91:b9:60:ba:23:cb:31:1b: dd:dd:87:9d:63:45:7a:72:03:18:0a:7b:d4:26:d7: 42:ce:93:6f:c9:b0:e7:52:c7:40:36:35:c8:09:cf: ed:29:32:8c:6f:b2:29:a6:ac:c9:11:71:86:03:54: 15:e4:f4:89:1d:9e:1f:ef:9e:e1:f5:c6:7e:a6:73: 4b:81:15:bd:a8:02:e4:34:8b:40:02:69:b6:89:7d: 73:a6:19:4a:81:43:43:85:f2:86:cc:8a:9b:97:fe: 05:b6:2b:f0:e3:9f:27:73:dd:7f:17:30:2b:6c:08: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0E:8D:47:7A:A7:CA:61:02:15:D8:3C:ED:19:DA:1D:BF:1E:AF:CE X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:1d:c7:29:f4:a8:57:85:00:31:79:16:ea:17:fd:f8:97:a0: 1e:7f:15:34:e4:d4:74:35:c5:d6:e6:9d:81:f2:79:58:15:a8: b3:17:67:48:f0:dc:50:16:b9:fd:93:16:12:7f:d7:cc:7f:a7: 1f:e6:20:f1:6a:69:be:d1:fc:3a:a3:17:30:50:88:4d:0a:60: 77:77:be:9f:25:01:92:b2:8f:f4:4c:c3:78:97:1b:43:ce:c7: 31:07:23:f7:e1:31:83:83:16:c7:dd:6b:a5:7f:a1:3c:04:0b: 0e:30:c2:eb:04:a9:64:42:9c:32:13:e8:36:7c:61:a7:0d:c4: 44:0a:e5:8b:1b:d0:40:39:48:90:c9:bc:2c:58:e0:01:fe:67: a7:57:7f:43:75:45:03:51:f8:fb:7d:41:08:79:b9:f1:52:60: e0:46:78:85:1d:93:4f:4f:e9:62:9d:e8:16:22:78:87:38:d8: ed:76:ce:62:b1:12:fa:df:c4:50:a3:46:cd:1f:0c:4c:68:24: e9:0c:50:e4:31:aa:30:b8:ec:c3:9d:e8:b0:e4:95:bc:12:86: ca:ac:bb:7e:f4:f1:3d:4f:4e:11:9d:cc:ce:70:06:93:f8:1f: a8:a0:41:d8:f5:08:ef:98:49:e6:85:cb:43:ed:17:a6:04:37: ed:53:49:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0I1RjExMC8GA1UEBRMoOTQ5NkIxRkM2MDYzNjQ0MzcyMzk4Q0VBMzM4QjgyMjQy NTkxNzVDQjAeFw0yNTA3MTkwNzUyMjRaFw0yNTA3MjYwNzUyMjRaMBgxFjAUBgNV BAMTDTY4N2I0ZWI5LWJkZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFFcMPROkIzyJXVOYH3ezMLT2gBsNNMmfdYvfVEUPbtLinBT0DwKS4R65Gs7mL nLMs4XkSnYmCv1eNS3VzO6wOZtxitQ5vYiQUguTPcgjTZ6MlE8VWUqCTEvu5BYOS Shh7niYqfiQxlhJZUQzDptj1GURPcLT+e5vUYaWeKgQlK9wGG9kQYNfGABqzpLCR uWC6I8sxG93dh51jRXpyAxgKe9Qm10LOk2/JsOdSx0A2NcgJz+0pMoxvsimmrMkR cYYDVBXk9Ikdnh/vnuH1xn6mc0uBFb2oAuQ0i0ACabaJfXOmGUqBQ0OF8obMipuX /gW2K/Djnydz3X8XMCtsCInrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtQ6NR3qn ymECFdg87RnaHb8er84wHwYDVR0jBBgwFoAUlJax/GBjZENyOYzqM4uCJCWRdcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQjVGL0JBMDBDNTE0MTM2 NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEpheF9HQmpaRU55T1l6cU00dUNKQ1dSZGNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVO eU9ZenFNNHVDSkNXUmRjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMdxyn0qFeFADF5FuoX/fiXoB5/FTTk1HQ1xdbmnYHyeVgVqLMXZ0jw 3FAWuf2TFhJ/18x/px/mIPFqab7R/DqjFzBQiE0KYHd3vp8lAZKyj/RMw3iXG0PO xzEHI/fhMYODFsfda6V/oTwECw4wwusEqWRCnDIT6DZ8YacNxEQK5Ysb0EA5SJDJ vCxY4AH+Z6dXf0N1RQNR+Pt9QQh5ufFSYOBGeIUdk09P6WKd6BYieIc42O12zmKx EvrfxFCjRs0fDExoJOkMUOQxqjC47MOd6LDklbwShsqsu3708T1PThGdzM5wBpP4 H6igQdj1CO+YSeaFy0PtF6YEN+1TSfQ= -----END CERTIFICATE-----Generated at Sun Jul 20 06:26:06 2025 by rpki-client