$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: 2BbdDf+BfvWiZenDsU/J2+8GjglNrTpNgw3A6EHFBkc= Subject key identifier: 86:CC:F5:41:02:10:4C:EA:85:14:AC:7B:C8:30:F5:A4:A8:A3:92:24 Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 05CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 05C5 Signing time: Thu 18 Sep 2025 23:23:27 +0000 Manifest this update: Thu 18 Sep 2025 23:23:27 +0000 Manifest next update: Thu 25 Sep 2025 23:23:27 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: M3CzhIcjmP6DKK7AFlHVH1/XL/LZ8In45rVJ2ysz6lc=) 2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Sep 18 23:23:27 2025 GMT Not After : Sep 25 23:23:27 2025 GMT Subject: CN=68cc946f-01a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:bf:03:1a:10:d6:1a:10:01:18:c5:bc:87: 0f:66:9f:35:b6:e3:4e:33:c3:96:28:47:80:5a:10: 83:de:16:7e:bb:f9:ae:f2:84:5c:9d:33:37:e6:9e: d2:55:23:b2:be:fe:72:0b:9e:30:b5:a3:0d:b5:8f: a4:34:a4:34:d6:2a:c7:22:cc:a7:0d:79:11:9b:3c: a6:58:92:f5:89:c0:bd:04:9e:8d:a9:36:89:05:37: e7:74:27:40:56:41:8e:46:67:29:7b:ce:5a:c8:c5: 5c:ab:69:31:03:a0:91:e5:84:5a:57:58:43:1f:8b: ad:c7:43:e8:a3:a2:22:5f:41:64:8e:65:33:2f:43: 0a:cd:bc:a3:40:7d:f1:04:79:4f:d9:fe:a8:43:63: 51:e7:05:3d:48:fe:2d:36:8f:47:c4:c6:ee:86:e0: 95:08:a5:82:0c:66:0e:ff:b9:37:53:a6:3d:9e:31: eb:fe:18:30:0b:10:d9:af:ff:a5:5f:bf:eb:63:a7: b2:93:7f:da:aa:43:15:f7:42:aa:74:31:03:d4:2b: 87:17:64:72:28:aa:d6:c8:fd:d7:ba:46:a3:3d:bd: 30:3e:cd:72:e1:2b:cc:4f:9b:93:a3:af:ce:be:a6: f0:30:51:21:16:a7:00:cb:e4:41:bc:e8:14:ad:85: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CC:F5:41:02:10:4C:EA:85:14:AC:7B:C8:30:F5:A4:A8:A3:92:24 X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:69:55:7e:69:49:6d:93:dc:0c:80:66:a5:02:d8:75:ad:d8: e6:9c:eb:6a:f5:85:4d:cd:26:85:26:09:25:60:fe:74:aa:52: eb:df:89:9a:88:e1:d9:0f:34:e0:17:51:3d:96:fe:2e:24:20: b8:90:99:e0:55:09:b1:17:69:9c:8f:d6:74:a5:8e:c6:99:f3: 81:13:88:3c:34:4d:2d:76:66:21:41:98:df:6f:bd:9b:3c:1a: 51:52:5b:25:42:f4:91:de:30:d2:45:12:4b:78:a0:bc:53:37: d5:d4:1b:ba:8a:d2:32:0a:ed:e4:a5:1d:fd:92:12:eb:6d:c3: 65:ff:d6:db:ec:80:69:d1:71:ec:a0:68:7a:75:81:b3:a6:f4: 2a:da:01:5e:56:c9:c9:bb:50:72:f0:bc:71:36:2a:c2:da:6d: 10:66:bc:98:9f:75:b5:4c:d7:5b:74:75:1d:9b:00:49:29:cd: 7c:51:a8:f7:72:0f:79:6f:60:0c:6a:4e:fb:77:3e:cb:6b:8a: 07:fb:4f:3b:ea:08:a0:ae:07:06:42:3b:b8:15:8f:1f:1c:94: be:38:5d:43:4e:30:e9:90:a7:b5:c3:6e:01:86:cf:33:28:0d: 35:53:c7:11:8e:51:0c:93:eb:67:6f:5e:94:55:df:30:79:39: cb:d0:f3:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjUwOTE4MjMyMzI3WhcNMjUwOTI1MjMyMzI3WjAYMRYwFAYD VQQDEw02OGNjOTQ2Zi0wMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni2/AxoQ1hoQARjFvIcPZp81tuNOM8OWKEeAWhCD3hZ+u/mu8oRcnTM35p7S VSOyvv5yC54wtaMNtY+kNKQ01irHIsynDXkRmzymWJL1icC9BJ6NqTaJBTfndCdA VkGORmcpe85ayMVcq2kxA6CR5YRaV1hDH4utx0Poo6IiX0FkjmUzL0MKzbyjQH3x BHlP2f6oQ2NR5wU9SP4tNo9HxMbuhuCVCKWCDGYO/7k3U6Y9njHr/hgwCxDZr/+l X7/rY6eyk3/aqkMV90KqdDED1CuHF2RyKKrWyP3XukajPb0wPs1y4SvMT5uTo6/O vqbwMFEhFqcAy+RBvOgUrYWcWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbM9UEC EEzqhRSse8gw9aSoo5IkMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjaVV+aUltk9wMgGalAth1rdjmnOtq9YVNzSaFJgklYP50qlLr34ma iOHZDzTgF1E9lv4uJCC4kJngVQmxF2mcj9Z0pY7GmfOBE4g8NE0tdmYhQZjfb72b PBpRUlslQvSR3jDSRRJLeKC8UzfV1Bu6itIyCu3kpR39khLrbcNl/9bb7IBp0XHs oGh6dYGzpvQq2gFeVsnJu1By8LxxNirC2m0QZryYn3W1TNdbdHUdmwBJKc18Uaj3 cg95b2AMak77dz7La4oH+0876gigrgcGQju4FY8fHJS+OF1DTjDpkKe1w24Bhs8z KA01U8cRjlEMk+tnb16UVd8weTnL0POD -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:02 2025 by rpki-client