$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft File: js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json) Hash identifier: kMgSN3Sauf3rRWPeFgdyueORpMePT9qDft2LZcrYowI= Subject key identifier: 38:6D:A2:AF:CF:9A:2D:02:3C:24:7E:F8:37:0E:C8:85:68:D5:FF:5C Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft Manifest number: 02D8 Signing time: Sun 07 Sep 2025 01:46:30 +0000 Manifest this update: Sun 07 Sep 2025 01:46:30 +0000 Manifest next update: Sun 14 Sep 2025 01:46:30 +0000 Files and hashes: 1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: FP+41DgSrXzJYDO3P/pjs2mORQ11TUXkv78iP1rfyEY=) 2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: Z1+2srjHcffoSnsNHW/6kMtu1QEBMk8cg+vN7B6fKN0=) 3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: b/uz4uUGbldWv98MGi9g31ZiA1AfDx60qTlS76qiVkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Validity Not Before: Sep 7 01:46:30 2025 GMT Not After : Sep 14 01:46:30 2025 GMT Subject: CN=68bce3f6-ba1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:92:76:8f:c5:83:d7:0a:26:16:b5:bf:5c: a5:8a:56:f1:e0:00:7d:49:19:60:16:b3:6f:fc:c0: 94:91:4a:0b:40:19:9f:17:e6:de:d6:d3:20:36:ee: 75:72:cd:f3:ba:a4:fa:34:dd:fb:2c:ac:96:86:4b: fe:6f:08:a6:6b:cd:93:ab:43:a7:59:00:c3:0e:f9: 2a:fc:3f:55:d3:36:c3:50:de:de:e7:0b:5f:3b:be: c7:c9:6c:a6:f0:ad:0a:26:ae:1c:f0:e3:9a:f3:5c: be:08:6f:1d:7f:41:d0:ed:a5:59:bc:e9:db:3d:bb: 0e:15:3d:fc:3f:ad:13:1e:a2:16:74:c4:72:75:6a: ed:80:e5:14:59:e9:a4:5e:6a:b3:2b:01:50:0f:64: 10:d4:6c:4f:39:67:62:74:eb:a2:ad:48:8a:06:d1: 05:b4:18:7c:b5:8b:95:c9:b3:ee:c6:76:b3:35:5c: 86:fb:ac:5c:ae:cb:f2:8f:26:0f:f1:75:db:7c:1d: 8b:dd:a7:0f:e9:c9:f9:5d:d0:db:39:26:70:45:4c: e1:6d:0a:d1:d6:b1:cf:43:f2:e6:6e:85:9f:b1:2d: 03:d4:dc:47:90:2b:45:8b:a4:9e:67:b2:65:9f:bb: 9d:84:c4:bb:58:d1:12:4a:af:4c:a8:85:ae:5b:58: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6D:A2:AF:CF:9A:2D:02:3C:24:7E:F8:37:0E:C8:85:68:D5:FF:5C X509v3 Authority Key Identifier: keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ac:36:e4:38:42:ad:75:54:b9:76:d5:ac:34:f4:90:a3:9f: ee:62:8d:e9:14:fe:a4:d8:7f:82:93:27:fe:cb:7b:6d:f6:e5: cb:7f:09:a8:1f:87:6f:a8:73:3b:14:89:73:dd:dc:69:87:05: 16:e4:a4:9d:f4:44:be:a8:52:1f:96:b2:91:fd:de:8f:18:5b: 75:51:12:93:bb:bd:5f:36:71:0f:8d:78:c4:1b:10:99:cc:69: 80:0c:75:9b:57:a9:56:bb:26:2b:06:f0:80:4b:11:06:e4:7f: e4:e6:29:eb:e8:ac:42:bb:4f:50:e0:19:8e:a7:ee:80:8f:43: 5d:cc:7d:68:d5:86:0f:40:c6:28:ad:a8:cf:98:a5:37:d1:e3: 3d:33:68:ea:01:df:d1:5e:33:f5:eb:65:cc:7b:da:67:27:b0: 90:98:14:1a:50:68:44:e7:78:b6:15:25:28:e0:ba:cf:a8:cb: 12:73:25:e3:cb:94:5f:c8:2e:1c:92:b0:81:dc:48:32:32:c1: 9f:9d:c3:03:0a:57:d0:fe:70:b3:d5:88:b7:40:4e:d9:af:6c: 89:0c:33:26:4c:0f:2e:72:a6:74:34:45:24:47:36:7f:a0:76: 54:cd:b6:0d:a7:c5:74:20:17:97:e2:d0:53:7c:ca:d2:da:a8: e6:67:e8:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD QzFCRTFDMzgwHhcNMjUwOTA3MDE0NjMwWhcNMjUwOTE0MDE0NjMwWjAYMRYwFAYD VQQDEw02OGJjZTNmNi1iYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloGSdo/Fg9cKJha1v1ylilbx4AB9SRlgFrNv/MCUkUoLQBmfF+be1tMgNu51 cs3zuqT6NN37LKyWhkv+bwima82Tq0OnWQDDDvkq/D9V0zbDUN7e5wtfO77HyWym 8K0KJq4c8OOa81y+CG8df0HQ7aVZvOnbPbsOFT38P60THqIWdMRydWrtgOUUWemk XmqzKwFQD2QQ1GxPOWdidOuirUiKBtEFtBh8tYuVybPuxnazNVyG+6xcrsvyjyYP 8XXbfB2L3acP6cn5XdDbOSZwRUzhbQrR1rHPQ/LmboWfsS0D1NxHkCtFi6SeZ7Jl n7udhMS7WNESSq9MqIWuW1hJxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhtoq/P mi0CPCR++DcOyIVo1f9cMB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzrDbkOEKtdVS5dtWsNPSQo5/uYo3pFP6k2H+Ckyf+y3tt9uXLfwmo H4dvqHM7FIlz3dxphwUW5KSd9ES+qFIflrKR/d6PGFt1URKTu71fNnEPjXjEGxCZ zGmADHWbV6lWuyYrBvCASxEG5H/k5inr6KxCu09Q4BmOp+6Aj0NdzH1o1YYPQMYo rajPmKU30eM9M2jqAd/RXjP162XMe9pnJ7CQmBQaUGhE53i2FSUo4LrPqMsScyXj y5RfyC4ckrCB3EgyMsGfncMDClfQ/nCz1Yi3QE7Zr2yJDDMmTA8ucqZ0NEUkRzZ/ oHZUzbYNp8V0IBeX4tBTfMrS2qjmZ+hs -----END CERTIFICATE-----Generated at Mon Sep 8 10:04:21 2025 by rpki-client