$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json) Hash identifier: GmFXSSBjzpFmdNCvpvAUlR4sTcHLguIMHTGqgCRZwtk= Subject key identifier: F2:23:6D:83:99:1B:E6:FE:55:2D:94:B9:61:B4:E4:D8:BD:D1:55:60 Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft Manifest number: 0654 Signing time: Sat 06 Sep 2025 22:58:19 +0000 Manifest this update: Sat 06 Sep 2025 22:58:19 +0000 Manifest next update: Sat 13 Sep 2025 22:58:19 +0000 Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: O2wwbA33lunulyPQhkGX9yf9Gy49E+gFl2pATCLDPnw=) 2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: R1Y6eiOJRngWNoMb/hZgB+WoPatpFv2M5OZIAKAIm84=) 3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: HVmlfUboreM+5lOMQKNuZ66xB592Xa6SyHAFupxeouM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Validity Not Before: Sep 6 22:58:19 2025 GMT Not After : Sep 13 22:58:19 2025 GMT Subject: CN=68bcbc8b-a59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:39:90:a3:b5:1e:f8:76:8f:be:28:0b:0f: f8:02:9d:2c:cc:64:11:a3:a5:56:7b:11:9b:e8:a9: 0c:a0:38:a4:20:86:d0:78:48:53:e6:7b:0b:a4:d1: cc:fd:ac:50:22:53:9b:02:28:d2:0a:ce:f3:c5:78: 62:0a:07:ed:8b:3d:b9:a6:e1:6d:61:1f:6f:0c:b0: a0:5d:5b:73:ff:66:ca:8e:ed:38:bc:d0:d7:c9:2d: 99:9c:3f:5f:75:c9:44:68:9e:fc:48:6d:09:c0:d0: 65:04:db:af:77:ca:2d:17:05:83:3b:71:3b:75:80: 1f:d1:6a:4b:69:ae:cf:c5:f7:7c:54:41:2e:20:67: 5e:49:e5:a8:09:6a:48:57:67:25:31:3c:83:f3:3a: ad:35:08:31:d5:7c:00:6f:42:eb:ee:91:13:b3:a4: 6f:52:02:42:9e:a5:47:4c:db:60:2f:28:56:02:72: 61:36:0e:f9:6c:1f:cc:b1:57:b9:9f:91:4d:36:c0: 1a:4d:65:2f:bf:17:cd:45:ed:72:fa:47:8b:9d:fe: 53:f1:1e:b4:a1:27:5d:75:01:1b:e8:fb:5c:17:c9: c5:ae:80:86:40:c8:6e:4a:dd:f5:ee:9e:ca:98:de: 17:b9:d3:67:6a:8c:b5:fe:2b:fe:ef:67:b2:0f:19: b9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:23:6D:83:99:1B:E6:FE:55:2D:94:B9:61:B4:E4:D8:BD:D1:55:60 X509v3 Authority Key Identifier: keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0b:40:94:12:94:84:02:39:62:14:3e:77:3f:8f:be:59:2f: 60:fd:35:5e:97:71:80:20:f6:83:99:67:ec:98:49:df:f3:d9: c2:c3:73:fd:cd:51:63:af:7b:53:3e:25:2e:5a:92:c4:12:45: 5b:26:da:5d:b2:46:5d:5d:09:d2:63:4f:a7:15:76:de:47:97: 46:f5:59:23:b7:09:1a:fb:56:84:55:4a:42:27:d8:b2:42:4b: 0d:2e:b3:e5:0d:ce:84:60:a9:5d:67:ca:2f:25:f0:32:5c:19: 1a:ae:02:31:de:82:2d:4c:a4:15:7e:f7:18:1d:eb:cb:af:30: f0:21:f2:57:ec:d3:a1:1b:47:9f:a0:4e:49:38:2e:a3:2c:ac: cf:cc:1f:0d:9c:38:1f:ed:a2:4d:95:cb:18:53:ae:24:54:0b: f3:04:a9:8f:0b:3d:de:0e:27:1a:72:c4:47:34:ba:c3:98:c1: 31:34:94:59:89:ea:09:69:7a:78:ea:a5:0e:83:01:e0:49:a8: d3:36:b6:6b:0d:67:db:3b:cd:55:ad:c0:bb:d0:86:66:7a:d4: 4e:2f:2c:b0:26:01:fe:c4:18:0e:b6:a7:2e:77:c7:d9:3c:49: aa:ab:fc:77:ad:33:40:aa:7f:94:7a:2e:8b:e4:ba:34:c2:83: 26:96:6e:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3 QUIyQjNCMkUwHhcNMjUwOTA2MjI1ODE5WhcNMjUwOTEzMjI1ODE5WjAYMRYwFAYD VQQDEw02OGJjYmM4Yi1hNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzM5kKO1Hvh2j74oCw/4Ap0szGQRo6VWexGb6KkMoDikIIbQeEhT5nsLpNHM /axQIlObAijSCs7zxXhiCgftiz25puFtYR9vDLCgXVtz/2bKju04vNDXyS2ZnD9f dclEaJ78SG0JwNBlBNuvd8otFwWDO3E7dYAf0WpLaa7Pxfd8VEEuIGdeSeWoCWpI V2clMTyD8zqtNQgx1XwAb0Lr7pETs6RvUgJCnqVHTNtgLyhWAnJhNg75bB/MsVe5 n5FNNsAaTWUvvxfNRe1y+keLnf5T8R60oSdddQEb6PtcF8nFroCGQMhuSt317p7K mN4XudNnaoy1/iv+72eyDxm5kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIjbYOZ G+b+VS2UuWG05Ni90VVgMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaC0CUEpSEAjliFD53P4++WS9g/TVel3GAIPaDmWfsmEnf89nCw3P9 zVFjr3tTPiUuWpLEEkVbJtpdskZdXQnSY0+nFXbeR5dG9Vkjtwka+1aEVUpCJ9iy QksNLrPlDc6EYKldZ8ovJfAyXBkargIx3oItTKQVfvcYHevLrzDwIfJX7NOhG0ef oE5JOC6jLKzPzB8NnDgf7aJNlcsYU64kVAvzBKmPCz3eDicacsRHNLrDmMExNJRZ ieoJaXp46qUOgwHgSajTNrZrDWfbO81VrcC70IZmetROLyywJgH+xBgOtqcud8fZ PEmqq/x3rTNAqn+Uei6L5Lo0woMmlm6p -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:18 2025 by rpki-client