$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: xFXac/wkx5vjjCg0u1zpkFYZWWFVjdGIxKONodRrIsc= Subject key identifier: 84:BA:CD:E5:81:ED:07:B1:8F:CB:14:50:5F:C6:20:54:9A:AD:7D:24 Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 8A Signing time: Sat 19 Jul 2025 06:46:23 +0000 Manifest this update: Sat 19 Jul 2025 06:46:22 +0000 Manifest next update: Sat 26 Jul 2025 06:46:22 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: RP3JggOhvJaw9RwfRcpI3Iaa4nxrgLrmA8ecNvHmPhI=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Jul 19 06:46:22 2025 GMT Not After : Jul 26 06:46:22 2025 GMT Subject: CN=687b3f3f-8ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:a7:2d:e5:61:a6:23:89:7b:7b:dd:c3:97: 04:45:22:13:37:94:18:8b:3a:85:2c:e0:b4:48:d4: 43:9d:1a:b3:de:a9:1a:0a:b5:ca:d3:ab:f0:99:a0: 1c:ab:f6:ee:08:54:31:14:c4:c4:ad:81:73:38:32: 89:53:37:45:67:60:c1:da:bc:10:48:0f:43:92:f9: 9c:2a:5f:a4:55:85:08:b2:0f:d9:f5:d1:d4:47:fc: 04:3d:ce:f0:5d:83:2d:d2:2a:6e:dd:17:fe:2c:ef: 82:8f:4d:a5:a3:d3:ed:07:60:91:9d:f2:8b:49:01: 2e:7d:6e:1e:3b:b1:7e:d8:6c:40:9c:33:f3:cc:74: 42:59:e0:ed:9a:2e:90:12:70:9d:55:96:7c:7d:be: 9a:de:0f:aa:29:f6:a9:ca:7a:af:dd:9f:68:4b:62: ac:6e:40:f2:c7:ff:d4:ed:80:fb:0c:51:ef:6c:30: f3:fa:31:61:c7:ee:0a:16:54:2d:a3:37:2a:31:63: 8d:70:91:82:68:cb:6a:9d:43:ba:d4:a7:68:9e:c4: 7a:ff:9f:d8:46:5e:32:1c:24:53:7b:ca:bc:52:bc: cd:e7:51:66:95:dd:16:39:c2:60:4c:74:e7:e9:8c: 0b:ac:ef:4f:45:cd:8c:04:dc:05:1a:cb:a3:0c:58: 27:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:CD:E5:81:ED:07:B1:8F:CB:14:50:5F:C6:20:54:9A:AD:7D:24 X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:77:57:7b:ca:b1:db:1f:18:41:0d:77:97:30:54:d0:5a:0e: db:54:c1:c4:0d:18:8e:47:f5:45:26:89:31:37:99:26:be:b4: ba:f8:87:f3:19:87:a9:ee:6b:61:03:a1:17:99:9c:92:e5:11: 9d:d4:03:4a:c7:d5:51:f8:47:ed:38:09:1c:c9:a1:27:dd:ef: cb:cf:a6:82:f6:b1:d0:b2:25:a7:3f:63:33:56:39:6d:f6:d7: 07:98:74:bf:5a:35:87:87:68:8a:09:bb:4c:30:c7:c7:19:0c: 7e:08:96:67:b3:dd:fb:6d:e2:62:a2:0b:10:52:4d:d5:8e:84: cd:94:f2:85:af:a2:ab:e7:2e:13:1a:2f:af:3d:82:ee:08:33: 70:8e:23:b0:41:eb:b0:b5:93:78:e4:82:a1:f7:bd:5b:8f:b5: 77:a7:5b:d3:10:7f:f1:7f:40:b6:cf:ce:d9:94:c5:94:f7:24: d6:95:a1:2b:7d:95:ee:0f:62:5c:29:18:10:6e:7b:88:0d:18: ba:1d:19:57:3d:2f:5e:74:73:01:53:59:bd:ac:f9:7e:c9:10: 04:51:d9:8c:ff:91:35:40:b2:78:12:29:5e:9d:a0:5a:0e:d5: e0:27:44:30:fd:c0:ef:96:37:a2:98:b4:e6:79:cb:5a:36:2b: e2:ae:cc:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjUwNzE5MDY0NjIyWhcNMjUwNzI2MDY0NjIyWjAYMRYwFAYD VQQDEw02ODdiM2YzZi04YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3OnLeVhpiOJe3vdw5cERSITN5QYizqFLOC0SNRDnRqz3qkaCrXK06vwmaAc q/buCFQxFMTErYFzODKJUzdFZ2DB2rwQSA9DkvmcKl+kVYUIsg/Z9dHUR/wEPc7w XYMt0ipu3Rf+LO+Cj02lo9PtB2CRnfKLSQEufW4eO7F+2GxAnDPzzHRCWeDtmi6Q EnCdVZZ8fb6a3g+qKfapynqv3Z9oS2KsbkDyx//U7YD7DFHvbDDz+jFhx+4KFlQt ozcqMWONcJGCaMtqnUO61KdonsR6/5/YRl4yHCRTe8q8UrzN51Fmld0WOcJgTHTn 6YwLrO9PRc2MBNwFGsujDFgnjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS6zeWB 7Qexj8sUUF/GIFSarX0kMB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhd1d7yrHbHxhBDXeXMFTQWg7bVMHEDRiOR/VFJokxN5kmvrS6+Ifz GYep7mthA6EXmZyS5RGd1ANKx9VR+EftOAkcyaEn3e/Lz6aC9rHQsiWnP2MzVjlt 9tcHmHS/WjWHh2iKCbtMMMfHGQx+CJZns937beJiogsQUk3VjoTNlPKFr6Kr5y4T Gi+vPYLuCDNwjiOwQeuwtZN45IKh971bj7V3p1vTEH/xf0C2z87ZlMWU9yTWlaEr fZXuD2JcKRgQbnuIDRi6HRlXPS9edHMBU1m9rPl+yRAEUdmM/5E1QLJ4EilenaBa DtXgJ0Qw/cDvljeimLTmectaNivirszb -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:44 2025 by rpki-client