$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: RBy0bEMAZY1rql+kSgh4ZShgI8SErQcWdm0XgNF0lck= Subject key identifier: B1:08:A8:D2:F0:BC:8C:78:1F:47:E8:B2:1D:CA:F0:BD:43:95:16:B8 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 3503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 34DA Signing time: Thu 18 Sep 2025 14:56:20 +0000 Manifest this update: Thu 18 Sep 2025 14:56:19 +0000 Manifest next update: Thu 25 Sep 2025 14:56:19 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: LtFp+kpvzcsjqxv9FNwx0N+/YWgtoR6ZbxFZiwp+sSw=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13571 (0x3503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Sep 18 14:56:19 2025 GMT Not After : Sep 25 14:56:19 2025 GMT Subject: CN=68cc1d93-8213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:72:f8:3c:e4:1b:2b:d7:b2:86:e0:be:de: 47:17:e4:ba:1c:21:de:d6:81:5c:ef:c3:e0:7d:58: 51:2b:14:23:1f:33:e8:51:48:26:28:c6:f9:ac:64: a1:8b:8d:df:bd:59:9d:0d:04:03:64:b8:71:81:17: 21:04:0a:2f:fe:ff:c8:cd:98:8e:e2:cd:3a:3c:ad: a9:24:72:33:7d:b1:69:8e:3d:73:aa:84:17:98:c4: b9:27:ac:d9:65:be:ed:78:17:c2:5b:79:d8:c0:1f: 68:96:5d:0a:38:41:fc:ab:72:0b:75:c5:1c:07:bf: 29:e0:10:cd:0e:a4:d9:ae:95:6b:94:65:ad:46:6a: 88:16:a9:d5:83:b3:b1:0e:e8:28:3b:06:a2:e1:d8: d2:36:e9:b4:82:c3:60:77:52:e5:3c:08:6d:dc:c9: e5:f0:5b:34:7a:7b:37:5d:49:97:24:92:7b:7e:aa: 22:a5:19:c3:48:22:7b:8a:9f:4c:0e:58:1b:f9:55: d6:38:dc:de:2f:5e:b1:a7:75:a1:ca:e3:83:8d:ce: 7e:69:0f:82:53:bc:8b:27:28:2e:76:a4:fe:ed:65: ae:a3:14:f4:3a:cf:28:f2:3f:a8:a7:24:63:b4:78: 53:b6:94:73:91:d7:b6:5a:eb:8b:2c:b4:aa:40:76: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:08:A8:D2:F0:BC:8C:78:1F:47:E8:B2:1D:CA:F0:BD:43:95:16:B8 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:52:ad:26:17:7e:7d:bc:82:67:cf:a3:7e:47:cd:64:5f:22: a6:0a:3e:b6:c4:63:d4:91:67:48:94:1b:f0:c3:4b:de:38:6f: d1:bb:c0:23:c1:6b:c2:36:ce:90:97:2b:f8:18:74:d3:fe:cd: cd:2f:a9:7e:85:7d:7b:84:70:16:3f:62:f5:e2:cf:c1:38:b7: d1:c7:40:12:dd:80:b9:ca:30:94:56:4c:2c:ad:c1:ea:ae:05: c7:1b:e8:5e:87:7a:17:f2:df:d4:cb:fc:24:e8:e6:fe:2a:a8: 2f:c2:eb:9e:53:cb:40:38:32:b1:2d:6a:8b:fc:54:70:f3:b1: 47:cf:e9:90:cf:81:8a:63:11:6d:08:c1:b1:07:36:c0:e9:b8: 64:37:c1:93:44:8d:1b:38:9f:6d:e8:d3:c1:5b:c1:92:a7:db: 23:b8:88:8e:c4:9e:a0:3a:cf:38:df:a1:46:90:cb:c0:f0:8c: 02:08:df:9f:f9:e6:f4:86:9b:44:40:25:e9:67:c3:f5:07:47: 99:a8:2a:73:0f:04:85:da:3d:6b:41:46:30:72:94:29:8f:31: 17:43:02:b3:fd:1a:0f:59:48:58:2e:33:cb:46:16:7d:fd:03: 2d:c7:1f:68:13:1a:f7:88:63:03:50:0c:93:6d:bd:47:62:d5: e4:74:cb:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwOTE4MTQ1NjE5WhcNMjUwOTI1MTQ1NjE5WjAYMRYwFAYD VQQDEw02OGNjMWQ5My04MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4xy+DzkGyvXsobgvt5HF+S6HCHe1oFc78PgfVhRKxQjHzPoUUgmKMb5rGSh i43fvVmdDQQDZLhxgRchBAov/v/IzZiO4s06PK2pJHIzfbFpjj1zqoQXmMS5J6zZ Zb7teBfCW3nYwB9oll0KOEH8q3ILdcUcB78p4BDNDqTZrpVrlGWtRmqIFqnVg7Ox DugoOwai4djSNum0gsNgd1LlPAht3Mnl8Fs0ens3XUmXJJJ7fqoipRnDSCJ7ip9M Dlgb+VXWONzeL16xp3WhyuODjc5+aQ+CU7yLJygudqT+7WWuoxT0Os8o8j+opyRj tHhTtpRzkde2WuuLLLSqQHYaBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEIqNLw vIx4H0fosh3K8L1DlRa4MB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjUq0mF359vIJnz6N+R81kXyKmCj62xGPUkWdIlBvww0veOG/Ru8Aj wWvCNs6Qlyv4GHTT/s3NL6l+hX17hHAWP2L14s/BOLfRx0AS3YC5yjCUVkwsrcHq rgXHG+heh3oX8t/Uy/wk6Ob+KqgvwuueU8tAODKxLWqL/FRw87FHz+mQz4GKYxFt CMGxBzbA6bhkN8GTRI0bOJ9t6NPBW8GSp9sjuIiOxJ6gOs8436FGkMvA8IwCCN+f +eb0hptEQCXpZ8P1B0eZqCpzDwSF2j1rQUYwcpQpjzEXQwKz/RoPWUhYLjPLRhZ9 /QMtxx9oExr3iGMDUAyTbb1HYtXkdMvj -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:59 2025 by rpki-client