$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: MDvDP6BLIk/jBvm+UDCo47okQ/Ljoj00vkZBkOfA/WI= Subject key identifier: 89:37:90:CA:6B:11:68:C0:22:EE:8A:1E:01:33:40:1B:9F:EF:54:0D Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 020C Signing time: Wed 17 Sep 2025 02:44:24 +0000 Manifest this update: Wed 17 Sep 2025 02:44:23 +0000 Manifest next update: Wed 24 Sep 2025 02:44:23 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: Th3qKig6LFpt3+hVgU6SGfEjBYOyWOGFsHndPArDBAM=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: HPAweJ5AgvKWJyiKKcipqvvFPZGOjwLjKkEzF7wcgEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Sep 17 02:44:23 2025 GMT Not After : Sep 24 02:44:23 2025 GMT Subject: CN=68ca2088-3f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:e7:54:33:6b:c8:28:b7:10:dc:1d:ff:65: 86:b2:b9:e7:b7:b8:bb:d7:39:b6:1c:68:c3:58:07: 35:89:8f:c1:76:55:e7:a0:16:9f:e1:83:be:3e:a8: 98:e1:b8:82:dd:56:ea:2a:7c:b4:d2:88:80:de:9e: 45:4b:76:28:c7:67:94:c5:75:1c:2a:8a:a5:56:fe: 97:28:a2:76:d3:f7:df:a1:25:0b:01:ba:f9:15:90: e9:23:33:8b:40:80:2c:f7:fe:08:c0:cb:f3:22:be: 96:bd:9e:0b:db:40:07:d5:50:98:df:aa:27:1b:00: 4c:9c:a6:94:a4:0c:ef:fe:27:c2:ba:15:9a:11:f5: 50:92:c7:0e:2e:6b:ea:ce:24:34:7e:e1:61:5f:7c: 15:22:2f:99:7e:42:e8:f3:05:9f:c7:b2:3e:1d:56: 32:3f:62:87:47:f5:ab:8c:4d:fe:49:d6:aa:55:de: 98:c2:cb:09:e9:34:8e:6d:fd:18:dd:25:6f:cb:d5: f4:21:dd:77:ec:bc:13:e1:f7:4d:11:09:0d:ea:5f: 5a:e3:91:d4:de:a2:1a:8f:1b:df:c5:01:dd:d9:48: ee:1c:3f:12:71:92:33:00:ca:b4:59:f6:59:2d:68: bc:ed:46:17:3f:d5:53:e3:c1:1d:d3:65:0e:15:3c: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:37:90:CA:6B:11:68:C0:22:EE:8A:1E:01:33:40:1B:9F:EF:54:0D X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:12:fd:b9:43:54:02:23:c0:3d:c9:29:53:33:48:83:77:fd: 97:08:03:98:78:e2:52:63:92:b8:80:eb:10:51:c0:8b:df:63: 26:c0:17:4d:7c:bc:d5:3e:d8:08:0f:ac:b9:f5:c1:83:b5:69: 71:3b:63:2c:2f:41:29:db:e5:e7:6b:fc:65:fc:82:90:49:8f: bb:34:cf:5b:3a:75:ea:77:d2:c3:03:69:2f:7e:b2:d1:79:3c: e7:18:05:6f:60:b3:43:4b:fd:8b:bd:cf:50:76:40:99:b0:ed: d5:5b:1d:7f:8d:8b:74:22:68:02:7a:a8:a4:7f:9f:c4:0e:47: 0d:0f:ea:2c:d5:a1:8c:93:ed:33:28:53:ac:ba:72:35:1b:d9: 45:2b:45:9d:6f:e7:2d:76:35:15:29:0a:93:50:1a:6a:7f:0b: 71:66:43:83:b5:3b:1a:53:26:ea:ec:02:2b:e4:f6:9f:60:70: ef:68:b2:44:15:0f:92:fb:66:aa:d8:05:9e:94:8b:65:1c:67: ee:51:f9:b6:d0:31:35:a4:d7:1b:ed:c1:52:c5:0b:3e:42:0e: 41:c5:87:19:7f:b4:7a:2b:bf:46:5e:9a:f3:1a:27:92:ae:75: b8:83:b1:d1:b6:d1:f0:42:45:bf:89:d6:f4:52:0c:36:a6:ba: b6:4c:65:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUwOTE3MDI0NDIzWhcNMjUwOTI0MDI0NDIzWjAYMRYwFAYD VQQDEw02OGNhMjA4OC0zZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KHnVDNryCi3ENwd/2WGsrnnt7i71zm2HGjDWAc1iY/BdlXnoBaf4YO+PqiY 4biC3VbqKny00oiA3p5FS3Yox2eUxXUcKoqlVv6XKKJ20/ffoSULAbr5FZDpIzOL QIAs9/4IwMvzIr6WvZ4L20AH1VCY36onGwBMnKaUpAzv/ifCuhWaEfVQkscOLmvq ziQ0fuFhX3wVIi+ZfkLo8wWfx7I+HVYyP2KHR/WrjE3+SdaqVd6YwssJ6TSObf0Y 3SVvy9X0Id137LwT4fdNEQkN6l9a45HU3qIajxvfxQHd2UjuHD8ScZIzAMq0WfZZ LWi87UYXP9VT48Ed02UOFTx9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk3kMpr EWjAIu6KHgEzQBuf71QNMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmEv25Q1QCI8A9ySlTM0iDd/2XCAOYeOJSY5K4gOsQUcCL32MmwBdN fLzVPtgID6y59cGDtWlxO2MsL0Ep2+Xna/xl/IKQSY+7NM9bOnXqd9LDA2kvfrLR eTznGAVvYLNDS/2Lvc9QdkCZsO3VWx1/jYt0ImgCeqikf5/EDkcND+os1aGMk+0z KFOsunI1G9lFK0Wdb+ctdjUVKQqTUBpqfwtxZkODtTsaUybq7AIr5PafYHDvaLJE FQ+S+2aq2AWelItlHGfuUfm20DE1pNcb7cFSxQs+Qg5BxYcZf7R6K79GXprzGieS rnW4g7HRttHwQkW/idb0Ugw2prq2TGW8 -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:17 2025 by rpki-client