$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: 7LtSQ/1Hgl0CyqNOdFq+BfWG2mk2SiZNMhMCZ2xwYmI= Subject key identifier: B8:84:CF:28:95:20:AD:6A:82:4C:C7:A4:D9:1A:EC:30:3F:E4:1A:89 Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 06CC Signing time: Sun 20 Jul 2025 22:13:08 +0000 Manifest this update: Sun 20 Jul 2025 22:13:08 +0000 Manifest next update: Sun 27 Jul 2025 22:13:08 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: IkwIWBREN+DHfyzJav4n2xh1xVWnrs1aXtiPg3lH09c=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Jul 20 22:13:08 2025 GMT Not After : Jul 27 22:13:08 2025 GMT Subject: CN=687d69f4-107a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:f9:26:51:9a:42:f4:fb:45:7b:c7:95:b5: 79:08:0c:13:ad:34:7e:76:f5:f6:ca:44:10:3c:95: 23:c5:bc:1e:b9:24:98:1c:6c:4d:21:18:97:1b:65: 6f:9c:6d:1d:86:1b:14:86:9d:c2:72:88:b8:4f:4e: f5:b9:93:85:0f:84:a5:39:ed:20:4c:0a:f8:b1:8f: ec:94:e0:dc:03:c4:b5:60:fc:67:4d:7b:40:53:fa: a7:1e:c6:c1:76:b0:81:fb:08:e0:aa:03:b1:72:cb: ae:7a:d2:64:bd:93:d6:e4:87:13:e6:74:f7:3b:b2: ed:c8:5c:06:4b:3f:64:5f:4e:e1:7c:e3:4c:cc:5c: e9:28:84:d3:58:4a:8f:92:8d:c3:f5:71:80:81:2f: de:ec:8b:47:0b:48:b6:35:d8:19:ac:1b:22:36:b9: a9:bf:15:c8:b3:c4:a7:1f:21:a8:01:df:a8:18:de: 28:a7:ab:16:d0:1d:39:78:cc:91:79:bd:71:35:39: 3d:c5:4d:37:27:c4:d4:41:a6:b1:61:96:3c:08:b6: ed:59:fd:65:9f:d0:4f:b5:8b:2a:26:6a:3e:d8:c5: 25:8c:9c:8e:1f:68:7f:c0:5e:db:71:12:c4:01:98: dd:54:dd:9d:64:a2:68:36:77:e5:6c:6a:c1:d8:83: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:CF:28:95:20:AD:6A:82:4C:C7:A4:D9:1A:EC:30:3F:E4:1A:89 X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:af:0c:25:f1:e0:84:8a:4e:fe:62:36:b9:e3:77:f1:7b:2e: 54:14:22:49:1c:17:3f:2b:4e:41:72:59:93:ed:7a:1b:af:1e: 21:f5:9b:0d:52:e4:ec:95:c6:75:5e:9c:04:27:1b:82:6e:37: a5:e2:86:a1:43:01:2b:8e:81:6c:9b:f0:9e:75:1e:ed:7e:0a: 5a:ec:57:31:1f:24:b0:9d:2a:61:31:89:97:96:3d:3b:c0:69: 5d:e4:b6:25:1d:42:ee:b2:d0:fc:43:ce:50:e3:05:28:94:73: ce:8f:12:17:ea:62:a9:80:cd:51:45:7a:b6:a6:a4:4d:4d:10: 9c:d1:7d:a5:6c:01:b7:dc:61:6d:4d:2b:60:67:e1:12:02:aa: 24:82:8e:69:3c:46:63:6c:5b:13:85:39:b5:41:4d:b1:47:e1: de:e3:c6:7f:bc:5e:2e:a9:3b:a9:44:ff:60:56:80:07:1e:04: 6f:58:0d:bd:2e:f1:06:ab:a0:6f:f3:a7:b0:df:81:f0:c2:fa: 88:a4:86:14:3d:cb:5f:5b:46:e7:9e:f5:8f:9a:d2:4f:71:30: 38:14:22:d1:35:61:43:b0:21:a7:1b:84:77:d2:b9:8f:37:70: 9b:59:c0:4a:d3:15:a6:d1:23:bc:7c:b9:fe:3f:be:97:67:5a: 51:78:57:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUwNzIwMjIxMzA4WhcNMjUwNzI3MjIxMzA4WjAYMRYwFAYD VQQDEw02ODdkNjlmNC0xMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbv5JlGaQvT7RXvHlbV5CAwTrTR+dvX2ykQQPJUjxbweuSSYHGxNIRiXG2Vv nG0dhhsUhp3Ccoi4T071uZOFD4SlOe0gTAr4sY/slODcA8S1YPxnTXtAU/qnHsbB drCB+wjgqgOxcsuuetJkvZPW5IcT5nT3O7LtyFwGSz9kX07hfONMzFzpKITTWEqP ko3D9XGAgS/e7ItHC0i2NdgZrBsiNrmpvxXIs8SnHyGoAd+oGN4op6sW0B05eMyR eb1xNTk9xU03J8TUQaaxYZY8CLbtWf1ln9BPtYsqJmo+2MUljJyOH2h/wF7bcRLE AZjdVN2dZKJoNnflbGrB2IMVwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiEzyiV IK1qgkzHpNka7DA/5BqJMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5rwwl8eCEik7+Yja543fxey5UFCJJHBc/K05BclmT7Xobrx4h9ZsN UuTslcZ1XpwEJxuCbjel4oahQwErjoFsm/CedR7tfgpa7FcxHySwnSphMYmXlj07 wGld5LYlHULustD8Q85Q4wUolHPOjxIX6mKpgM1RRXq2pqRNTRCc0X2lbAG33GFt TStgZ+ESAqokgo5pPEZjbFsThTm1QU2xR+He48Z/vF4uqTupRP9gVoAHHgRvWA29 LvEGq6Bv86ew34HwwvqIpIYUPctfW0bnnvWPmtJPcTA4FCLRNWFDsCGnG4R30rmP N3CbWcBK0xWm0SO8fLn+P76XZ1pReFf2 -----END CERTIFICATE-----Generated at Mon Jul 21 05:48:14 2025 by rpki-client