$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: Vgz5A2M7ci44Hj1B3gIBYOVbIg+YuNjBTEixru/Jw1A= Subject key identifier: A3:BF:2F:11:CF:13:0E:AA:1F:43:28:B1:23:1E:B0:1E:9D:BA:12:63 Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 58 Signing time: Fri 19 Sep 2025 07:56:17 +0000 Manifest this update: Fri 19 Sep 2025 07:56:17 +0000 Manifest next update: Fri 26 Sep 2025 07:56:17 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: MBkSROQD7LRQpbjYjjz6pFD828jAhOGMBHGHMtVPVr4=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: Sep 19 07:56:17 2025 GMT Not After : Sep 26 07:56:17 2025 GMT Subject: CN=68cd0ca1-eb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:71:9b:73:da:52:7e:69:bb:08:1b:f0:b4: f8:41:c5:81:e7:56:38:ac:78:fc:6a:9a:32:40:6b: 23:19:56:9c:ef:f4:ae:ab:29:61:fb:b0:64:61:62: 26:9e:bf:1c:94:98:34:28:71:01:c8:14:68:dd:0d: 93:86:06:6f:c7:9b:63:bb:b3:d0:35:50:d7:d3:b8: 52:e9:c8:a2:8f:2e:51:cc:99:eb:ce:9d:98:ee:b3: ab:0a:5a:08:e6:dc:3f:7f:d9:a6:66:00:0f:5a:9a: 9a:cf:9b:85:2d:ef:ce:6c:f8:44:66:06:c8:a5:42: 9f:dd:ec:fe:36:95:d0:a0:7f:7e:19:68:8f:83:5c: 2b:cc:c9:00:ac:26:7a:4a:1b:0f:c9:9e:47:73:d3: 2a:69:c7:01:67:a4:9a:dc:39:50:01:cd:29:68:c3: 23:c0:3c:e4:ba:b2:b0:06:21:e1:fd:f9:77:86:b2: b5:1a:0a:b8:6d:69:cc:d2:2f:f5:9c:e9:06:a3:14: e4:99:f2:d0:94:1e:20:4f:90:8e:86:0d:76:40:8e: 81:55:f0:58:ef:e0:93:09:2f:a1:99:76:1c:79:39: 09:82:1e:94:a5:66:58:e9:0c:33:d7:cf:71:28:a0: 45:f2:73:6a:97:95:6f:a5:b6:71:fd:b9:15:6a:0c: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BF:2F:11:CF:13:0E:AA:1F:43:28:B1:23:1E:B0:1E:9D:BA:12:63 X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:eb:72:a5:b0:45:a7:0e:a7:3b:06:47:a7:f1:c8:66:1e:0a: 4a:7b:4a:96:6a:8c:8c:93:43:2f:9a:73:fb:a2:de:65:93:8b: bf:81:3a:b1:05:f6:ee:82:c8:25:99:e8:55:97:62:a7:b6:78: eb:28:28:c7:70:d4:4d:17:cc:26:8c:3b:0e:6f:6b:80:c5:36: d7:56:b4:24:8c:27:fc:e4:e7:19:8d:78:ac:56:9c:e7:f5:6a: 5f:27:20:c2:64:ac:61:86:76:b0:18:5e:78:62:94:a2:f5:55: 90:70:1e:ac:51:c1:49:f1:ea:4a:f0:fd:75:7e:1d:50:8e:55: c0:65:4a:33:ad:5c:5a:2e:66:80:54:46:7f:32:1f:e3:f5:87: 29:93:c4:fe:de:da:a9:4e:99:c0:15:31:26:0c:b7:03:9e:49: ba:49:89:6a:6b:e8:4c:1e:d6:f2:63:93:ba:f5:09:9d:0e:e1: 80:24:f4:ea:6a:d1:09:43:65:85:c7:03:e2:c6:e2:44:51:65: 1e:a1:27:f1:00:44:1a:8c:65:4f:6a:f8:af:86:d1:13:bf:f7: 29:43:98:43:c1:95:68:74:ba:36:e7:65:a7:94:1b:f2:5f:22: 0e:46:ad:16:89:88:22:39:d4:05:d8:bb:ba:27:63:4b:00:ca: a3:ab:55:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTA5MTkwNzU2MTdaFw0yNTA5MjYwNzU2MTdaMBgxFjAUBgNV BAMTDTY4Y2QwY2ExLWViNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnPnGbc9pSfmm7CBvwtPhBxYHnVjisePxqmjJAayMZVpzv9K6rKWH7sGRhYiae vxyUmDQocQHIFGjdDZOGBm/Hm2O7s9A1UNfTuFLpyKKPLlHMmevOnZjus6sKWgjm 3D9/2aZmAA9amprPm4Ut785s+ERmBsilQp/d7P42ldCgf34ZaI+DXCvMyQCsJnpK Gw/Jnkdz0yppxwFnpJrcOVABzSlowyPAPOS6srAGIeH9+XeGsrUaCrhtaczSL/Wc 6QajFOSZ8tCUHiBPkI6GDXZAjoFV8Fjv4JMJL6GZdhx5OQmCHpSlZljpDDPXz3Eo oEXyc2qXlW+ltnH9uRVqDErxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo78vEc8T DqofQyixIx6wHp26EmMwHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzrcqWwRacOpzsGR6fxyGYeCkp7SpZqjIyTQy+ac/ui3mWTi7+BOrEF 9u6CyCWZ6FWXYqe2eOsoKMdw1E0XzCaMOw5va4DFNtdWtCSMJ/zk5xmNeKxWnOf1 al8nIMJkrGGGdrAYXnhilKL1VZBwHqxRwUnx6krw/XV+HVCOVcBlSjOtXFouZoBU Rn8yH+P1hymTxP7e2qlOmcAVMSYMtwOeSbpJiWpr6Ewe1vJjk7r1CZ0O4YAk9Opq 0QlDZYXHA+LG4kRRZR6hJ/EARBqMZU9q+K+G0RO/9ylDmEPBlWh0ujbnZaeUG/Jf Ig5GrRaJiCI51AXYu7onY0sAyqOrVUM= -----END CERTIFICATE-----Generated at Fri Sep 19 15:15:33 2025 by rpki-client