$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft File: JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json) Hash identifier: RlNrynJBM8JMnH2581WoSNnYMX5xjfCxzoTw31eHk10= Subject key identifier: AB:E0:F9:75:CA:77:33:97:89:DD:84:38:76:9D:13:47:B9:2F:95:AF Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6 Certificate issuer: /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:50:30 +0000 Manifest this update: Tue 09 Sep 2025 05:50:30 +0000 Manifest next update: Tue 16 Sep 2025 05:50:30 +0000 Files and hashes: 1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: +Y36mqeTfJjEJpAOgLOhtavm8hZXehAncusLJZxrSfQ=) 2: 369F08805B9B11EFA3A8CD42C4F9AE02.roa (hash: PHdU3YbsBVnKyiJBLqMyf65QtChsTtupcMmQjvSYsFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1FF1, serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6 Validity Not Before: Sep 9 05:50:30 2025 GMT Not After : Sep 16 05:50:30 2025 GMT Subject: CN=68bfc026-f203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:74:12:a5:7e:ab:85:a4:ec:4e:3b:65:9f: 6d:e6:3b:d3:7b:36:07:69:23:d6:e4:fe:d7:ab:cd: 82:14:1e:cd:2f:3b:51:36:c3:0d:2a:c0:6c:8b:f3: 74:c8:15:0e:18:db:31:01:48:95:ab:4e:45:c3:2c: 75:51:4b:c3:06:b4:fd:a4:cb:d1:a1:ef:5c:fd:0a: ef:87:76:db:37:65:7a:8c:48:3a:0e:80:e3:24:f0: 31:3d:80:34:b0:5c:c4:cf:ac:b4:c0:34:5d:10:75: 83:11:7d:72:5e:65:06:0c:1b:62:92:81:85:8e:67: 41:a7:a1:52:b2:a4:18:d5:91:08:45:d0:04:33:54: 9d:06:79:0a:16:84:7b:c4:15:6d:df:0b:cb:dd:f6: 00:89:35:95:23:51:72:5d:2b:40:da:d4:24:bd:11: d6:85:bc:f8:38:43:78:77:f8:20:0d:e7:ce:b8:96: fd:c6:6c:84:ac:e2:90:cb:08:85:2d:50:4e:35:54: d9:de:63:80:cf:88:08:bd:64:ff:62:ab:ab:26:2d: 3e:04:d9:92:a6:65:33:94:46:3c:30:2c:6d:0b:e1: 73:fa:34:19:c9:8d:81:8a:e9:9e:c2:6b:9a:be:23: ef:af:75:f5:ec:7c:cc:d8:1c:60:db:cc:58:d0:53: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:F9:75:CA:77:33:97:89:DD:84:38:76:9D:13:47:B9:2F:95:AF X509v3 Authority Key Identifier: keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:49:de:b6:c3:51:8c:75:98:5d:f3:e0:13:62:f9:63:1a:62: d7:83:48:18:16:b6:47:18:ea:16:b2:d9:ba:0a:8a:b6:3c:7c: 67:ca:65:20:f3:d0:f3:e2:3b:6b:6a:da:17:b1:e4:48:fa:ac: fb:f8:fb:06:a3:8c:14:bd:bf:fb:ff:47:1a:94:5c:ed:69:e3: 39:0a:86:b6:82:6a:fe:fd:98:37:c2:4a:08:da:df:17:b4:22: 9e:b4:5f:7b:54:e4:8d:e1:b4:db:dd:6c:ac:73:d3:08:56:99: 88:1f:6e:00:56:d3:4e:2f:74:f8:84:76:81:f4:4e:78:fb:e1: 60:d3:9d:c1:0c:d1:ca:43:9f:ff:ac:18:74:a5:68:d1:be:d4: 3a:59:96:65:60:b7:00:49:60:90:cd:82:55:d6:4e:27:ac:ab: 97:50:b0:1f:65:13:be:fa:81:57:39:c5:5f:96:a6:85:1a:b5: f2:7d:ee:01:ae:69:45:19:52:c4:9d:0b:b8:f0:ba:4f:d5:17: 3a:53:f6:02:72:72:c5:4c:bc:83:29:6d:61:53:80:4f:53:d5: 26:01:c6:39:71:ec:7f:ca:6f:57:0c:37:f3:86:ec:24:07:b4: c6:0a:eb:d4:58:83:3f:8c:21:69:42:37:95:3c:f4:6e:0f:4e: 37:2f:4d:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFGRjExMTAvBgNVBAUTKDI2M0E1NTE0NkUzMTcyQ0ZEOEYwMEE2QkIxN0JDQjBF QzIwOTE1QzYwHhcNMjUwOTA5MDU1MDMwWhcNMjUwOTE2MDU1MDMwWjAYMRYwFAYD VQQDEw02OGJmYzAyNi1mMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2d0EqV+q4Wk7E47ZZ9t5jvTezYHaSPW5P7Xq82CFB7NLztRNsMNKsBsi/N0 yBUOGNsxAUiVq05Fwyx1UUvDBrT9pMvRoe9c/Qrvh3bbN2V6jEg6DoDjJPAxPYA0 sFzEz6y0wDRdEHWDEX1yXmUGDBtikoGFjmdBp6FSsqQY1ZEIRdAEM1SdBnkKFoR7 xBVt3wvL3fYAiTWVI1FyXStA2tQkvRHWhbz4OEN4d/ggDefOuJb9xmyErOKQywiF LVBONVTZ3mOAz4gIvWT/YqurJi0+BNmSpmUzlEY8MCxtC+Fz+jQZyY2Biumewmua viPvr3X17HzM2Bxg28xY0FNmfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvg+XXK dzOXid2EOHadE0e5L5WvMB8GA1UdIwQYMBaAFCY6VRRuMXLP2PAKa7F7yw7CCRXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUZGMS8wMEQ4RjlBRTVC OUIxMUVGOTZBQTRGNDJDNEY5QUUwMi9KanBWRkc0eGNzX1k4QXByc1h2TERzSUpG Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pqcFZGRzR4Y3NfWThBcHJzWHZMRHNJSkZjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUZGMS8wMEQ4RjlBRTVCOUIxMUVGOTZBQTRGNDJDNEY5QUUwMi9KanBWRkc0eGNz X1k4QXByc1h2TERzSUpGY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAESd62w1GMdZhd8+ATYvljGmLXg0gYFrZHGOoWstm6Coq2PHxnymUg 89Dz4jtratoXseRI+qz7+PsGo4wUvb/7/0calFztaeM5Coa2gmr+/Zg3wkoI2t8X tCKetF97VOSN4bTb3Wysc9MIVpmIH24AVtNOL3T4hHaB9E54++Fg053BDNHKQ5// rBh0pWjRvtQ6WZZlYLcASWCQzYJV1k4nrKuXULAfZRO++oFXOcVflqaFGrXyfe4B rmlFGVLEnQu48LpP1Rc6U/YCcnLFTLyDKW1hU4BPU9UmAcY5cex/ym9XDDfzhuwk B7TGCuvUWIM/jCFpQjeVPPRuD043L00A -----END CERTIFICATE-----Generated at Tue Sep 9 14:22:39 2025 by rpki-client