$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: eWqqX2HYlMG/EtoETJzuNqusL1cQ6fKX2/wc+YOm468= Subject key identifier: 58:C9:66:31:BA:9A:E7:A2:A0:A8:B8:6A:2A:D5:E9:4B:C9:F8:38:25 Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DED Signing time: Wed 20 Aug 2025 17:57:21 +0000 Manifest this update: Wed 20 Aug 2025 17:57:21 +0000 Manifest next update: Wed 27 Aug 2025 17:57:21 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: rA9FEkIxA7fMaLgYYvoB+o9/5zyhImnZL0kFRIW1YPw=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: cYdmS5wLlGFfq5Y1sGvt09KmgEcXdc6nHMkHCfvEFrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3572 (0xdf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Aug 20 17:57:21 2025 GMT Not After : Aug 27 17:57:21 2025 GMT Subject: CN=68a60c81-bbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:84:8b:9a:f5:2b:61:b6:75:59:0c:3a:0b: a6:bc:a4:0e:c1:16:ec:68:ef:1b:b2:be:7c:68:6e: 17:e1:08:b3:1e:dd:52:b7:f2:7f:be:65:66:29:cd: e5:3b:c6:8c:00:5d:3b:a8:d3:e8:1e:70:43:a7:9f: 54:b2:9a:9f:40:ab:44:6b:77:1b:54:c8:38:48:a7: 7b:f5:4f:21:cf:5c:31:52:38:9d:6c:eb:c9:90:6b: 94:46:b2:e7:c2:ca:30:eb:3f:af:3b:a6:25:17:ff: 20:a8:60:68:9f:a2:f7:59:a3:68:2b:26:d8:5c:41: f1:bc:a5:f8:76:f3:7f:63:00:3f:85:2d:ab:2c:01: 80:ca:d9:1f:7c:9e:5b:35:a4:a4:9d:91:46:54:52: d4:f7:52:ab:72:d0:34:17:e8:6f:58:36:1c:a6:7e: 38:03:cc:62:ea:26:34:96:d2:1f:4f:2b:82:b0:d1: 92:08:a0:0f:05:79:e7:0c:6d:42:46:79:3f:7a:59: f6:fa:bf:9e:2a:7c:33:30:dc:01:ba:e4:88:fb:50: fa:00:84:7c:ce:a8:94:aa:c0:d5:b9:f3:27:8d:59: 97:97:98:e7:e1:3a:ea:1d:39:51:cd:eb:39:ee:06: e9:96:2b:0c:80:c6:5e:55:77:f0:df:ad:7c:95:0c: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C9:66:31:BA:9A:E7:A2:A0:A8:B8:6A:2A:D5:E9:4B:C9:F8:38:25 X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:54:2f:00:81:81:db:1e:e5:c9:99:4d:6f:32:4e:42:9c: 2c:1f:45:3c:d8:37:87:80:96:f1:44:83:93:6a:be:ec:f4:55: e1:8d:96:f1:c9:af:8e:51:b9:76:91:08:c1:67:63:8b:de:1e: 1a:92:af:da:86:39:d7:9f:2f:3e:b7:c6:7f:ba:98:92:02:e9: 76:fd:b7:be:47:85:7b:09:64:20:dc:e2:45:f7:62:ef:80:ca: 0e:a9:6b:46:2a:7a:3a:47:c0:d3:21:f5:c6:24:1b:85:7e:a7: b4:d7:c9:35:35:00:17:05:3f:94:42:3e:f2:a8:d6:47:65:e5: e3:33:40:be:e5:4f:61:25:8a:1e:a2:38:04:fe:44:dd:8c:01: 23:31:9d:88:65:bb:e5:f0:83:d0:8e:ee:76:c4:dd:bc:57:7a: 87:fd:40:ce:05:41:b1:49:57:fc:90:39:4e:e6:80:cb:f2:8e: 9f:42:55:68:8c:52:73:f8:e1:a2:a0:86:8c:e3:fb:53:30:60: 2f:00:11:6e:d9:53:7f:21:12:f7:0a:7e:12:f9:64:42:30:9f: 16:df:84:8c:cb:b6:ae:8a:ad:e0:fd:2c:e7:11:ac:6c:bf:86: 1b:f8:bf:fd:fe:ef:05:6c:d5:f9:2b:36:7e:fb:3d:11:fc:13: d6:9d:d2:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwODIwMTc1NzIxWhcNMjUwODI3MTc1NzIxWjAYMRYwFAYD VQQDEw02OGE2MGM4MS1iYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjCEi5r1K2G2dVkMOgumvKQOwRbsaO8bsr58aG4X4QizHt1St/J/vmVmKc3l O8aMAF07qNPoHnBDp59UspqfQKtEa3cbVMg4SKd79U8hz1wxUjidbOvJkGuURrLn wsow6z+vO6YlF/8gqGBon6L3WaNoKybYXEHxvKX4dvN/YwA/hS2rLAGAytkffJ5b NaSknZFGVFLU91KrctA0F+hvWDYcpn44A8xi6iY0ltIfTyuCsNGSCKAPBXnnDG1C Rnk/eln2+r+eKnwzMNwBuuSI+1D6AIR8zqiUqsDVufMnjVmXl5jn4TrqHTlRzes5 7gbplisMgMZeVXfw3618lQyUrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjJZjG6 mueioKi4airV6UvJ+DglMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+GFQvAIGB2x7lyZlNbzJOQpwsH0U82DeHgJbxRIOTar7s9FXhjZbx ya+OUbl2kQjBZ2OL3h4akq/ahjnXny8+t8Z/upiSAul2/be+R4V7CWQg3OJF92Lv gMoOqWtGKno6R8DTIfXGJBuFfqe018k1NQAXBT+UQj7yqNZHZeXjM0C+5U9hJYoe ojgE/kTdjAEjMZ2IZbvl8IPQju52xN28V3qH/UDOBUGxSVf8kDlO5oDL8o6fQlVo jFJz+OGioIaM4/tTMGAvABFu2VN/IRL3Cn4S+WRCMJ8W34SMy7auiq3g/SznEaxs v4Yb+L/9/u8FbNX5KzZ++z0R/BPWndLD -----END CERTIFICATE-----Generated at Fri Aug 22 16:23:01 2025 by rpki-client