$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: OrBzaQlUFrM9CQM2+bNqbrV2kWK4tQoje9EoMM6onyw= Subject key identifier: 89:C2:5B:C4:EC:2C:70:96:80:9D:16:71:B1:7A:68:8D:98:34:F5:93 Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 0858 Signing time: Fri 22 Aug 2025 20:50:11 +0000 Manifest this update: Fri 22 Aug 2025 20:50:10 +0000 Manifest next update: Fri 29 Aug 2025 20:50:10 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: jiGRIM52XQPBc/6ZfUREZpkmL+U3iZ2ku+i3FKrvtNE=) 2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: iVfJEeg3Wgdof0gIfzSRbq9faDNqlEFVPNcvpNlnmRA=) 3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: w4WjZepte0rY+jWEuTZEQB8JcDFa63LXhrBQUJaEGlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: Aug 22 20:50:10 2025 GMT Not After : Aug 29 20:50:10 2025 GMT Subject: CN=68a8d802-5ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:5b:3e:cb:0f:05:86:7d:6b:ec:8b:d8:0f: 6c:b3:3d:7c:0f:1b:37:57:32:7a:e1:69:96:48:ac: 45:cd:0e:0f:51:f7:9f:46:ed:a7:44:56:d7:a1:9e: 3c:17:a7:c6:4b:d6:01:c2:fc:ee:36:dd:82:30:53: 42:3f:74:6f:9c:67:1e:97:f2:a0:e9:fe:ed:98:f6: ad:4f:a6:28:51:95:d3:3d:09:a4:d5:87:c3:b0:27: 20:3a:c3:bb:07:3a:46:3f:5a:e4:c1:9a:af:58:0c: e2:b4:6b:f2:50:fe:9d:c3:5c:c7:32:c6:cd:9f:3b: ff:3f:e8:4b:f7:e4:94:c1:5c:30:cb:42:ea:c9:bd: a6:57:49:31:c0:63:bc:78:a3:0d:36:9d:6f:53:c4: f4:3d:46:56:ca:fd:a2:c1:4f:b9:ab:0e:c6:9a:68: 85:71:ea:99:73:2d:32:37:8c:87:8d:b5:c0:1c:6e: b5:a2:c1:3c:17:1a:f2:77:cf:ee:ab:9e:9d:a3:b4: 64:b7:de:0e:49:0f:1a:d1:14:89:e7:1f:ca:f8:a3: 55:e9:fb:78:28:41:c5:4f:91:f8:85:08:35:ab:a9: 15:94:71:34:99:f7:3a:34:78:a2:56:eb:73:65:ca: a7:54:cd:0a:4e:5d:94:fb:7c:71:50:05:7b:f8:6e: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C2:5B:C4:EC:2C:70:96:80:9D:16:71:B1:7A:68:8D:98:34:F5:93 X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:67:0c:42:19:4c:7a:08:59:1b:3f:73:83:fd:4f:d7:c6:da: ae:42:65:b1:5e:70:32:51:68:20:12:7e:0e:5b:e0:31:c9:58: 71:62:89:89:b5:fe:d4:74:52:84:9f:09:6f:3f:29:78:6b:7c: af:49:65:f8:1b:d8:44:17:a9:8f:32:ec:84:09:08:76:90:cf: 48:0f:9b:fc:0d:de:84:ef:a6:56:0f:c3:64:d4:fb:27:21:5c: 03:c6:ac:40:6a:c6:f3:24:16:db:09:a1:d2:7a:54:ae:f0:ff: 01:0d:03:dc:af:d9:b7:c7:85:55:bb:68:92:ac:2a:c4:e8:95: 77:3c:7b:72:c6:71:ba:f2:6e:30:da:49:d8:8b:c7:5e:31:f8: 6d:a2:d4:35:e5:38:8c:06:de:db:6e:e9:0b:0c:45:fe:bb:ae: ea:7d:83:b0:fe:6a:9a:23:cc:63:7f:40:4e:03:ac:4c:fa:5b: 73:a5:e5:67:19:61:d2:cf:43:99:99:12:2f:cd:9e:61:f7:07: 15:ca:74:c3:ec:28:9a:89:db:94:b8:90:cc:d1:4a:a8:03:a1: 9a:1d:dd:f7:11:93:07:71:d3:11:d1:d2:2d:88:58:0a:17:fe: 48:28:12:d3:a9:0d:93:0f:42:1a:3e:d0:ad:de:4e:48:c4:79: f2:ee:88:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjUwODIyMjA1MDEwWhcNMjUwODI5MjA1MDEwWjAYMRYwFAYD VQQDEw02OGE4ZDgwMi01ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiNbPssPBYZ9a+yL2A9ssz18Dxs3VzJ64WmWSKxFzQ4PUfefRu2nRFbXoZ48 F6fGS9YBwvzuNt2CMFNCP3RvnGcel/Kg6f7tmPatT6YoUZXTPQmk1YfDsCcgOsO7 BzpGP1rkwZqvWAzitGvyUP6dw1zHMsbNnzv/P+hL9+SUwVwwy0Lqyb2mV0kxwGO8 eKMNNp1vU8T0PUZWyv2iwU+5qw7GmmiFceqZcy0yN4yHjbXAHG61osE8Fxryd8/u q56do7Rkt94OSQ8a0RSJ5x/K+KNV6ft4KEHFT5H4hQg1q6kVlHE0mfc6NHiiVutz ZcqnVM0KTl2U+3xxUAV7+G7BIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInCW8Ts LHCWgJ0WcbF6aI2YNPWTMB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXZwxCGUx6CFkbP3OD/U/XxtquQmWxXnAyUWggEn4OW+AxyVhxYomJ tf7UdFKEnwlvPyl4a3yvSWX4G9hEF6mPMuyECQh2kM9ID5v8Dd6E76ZWD8Nk1Psn IVwDxqxAasbzJBbbCaHSelSu8P8BDQPcr9m3x4VVu2iSrCrE6JV3PHtyxnG68m4w 2knYi8deMfhtotQ15TiMBt7bbukLDEX+u67qfYOw/mqaI8xjf0BOA6xM+ltzpeVn GWHSz0OZmRIvzZ5h9wcVynTD7CiaiduUuJDM0UqoA6GaHd33EZMHcdMR0dItiFgK F/5IKBLTqQ2TD0IaPtCt3k5IxHny7oir -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:12 2025 by rpki-client