$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: N2LN4iG0Yb/dxtwWN5Tt5FoHswgy8njLJ2WxU0ciLlU= Subject key identifier: 99:51:2D:D4:25:7E:EC:84:FF:A6:DD:F1:89:90:75:A4:0B:96:FA:D5 Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0C8A Signing time: Sun 24 Aug 2025 18:12:49 +0000 Manifest this update: Sun 24 Aug 2025 18:12:49 +0000 Manifest next update: Sun 31 Aug 2025 18:12:49 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: mPtpSaPCjbqPVFoCxBpVO1W2cBWjCdLjOUoRdPTlxdI=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Aug 24 18:12:49 2025 GMT Not After : Aug 31 18:12:49 2025 GMT Subject: CN=68ab5621-9443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:99:69:1e:e9:14:63:92:56:3e:8d:26:d2: f9:80:a2:13:84:43:44:da:04:75:87:f4:82:88:81: 8c:83:b2:3c:96:76:f2:f7:5a:cc:39:9f:a4:62:2f: 8a:8b:44:2b:cf:6b:a1:10:05:f1:da:66:dc:3e:9f: bd:80:1d:01:72:9c:22:9e:7b:76:f2:5c:ef:41:a2: fc:25:a3:81:46:b3:12:4a:15:ca:74:f7:6f:70:e4: 73:13:92:b3:92:bc:47:91:f5:92:8b:0a:2a:80:cd: 1d:db:f3:97:d0:b1:74:d7:fa:f9:ab:41:94:26:ad: 4c:85:2c:0a:33:1e:d8:04:9d:41:28:29:db:62:f8: 75:09:e2:94:c2:8c:f6:e4:c3:c2:b5:2c:c5:75:d1: 95:c7:19:04:3a:ec:5e:65:38:4d:15:6d:bf:20:36: a9:df:78:6a:46:a4:09:35:96:af:6c:ea:47:b6:e3: df:a3:d2:a9:18:51:21:e5:8b:38:d1:55:14:45:5d: 91:21:8d:be:cf:a7:8a:68:54:ce:19:a3:93:27:69: 2b:71:a8:9b:23:fb:cb:2a:ef:00:f9:4b:68:7d:ad: 1c:78:c8:83:83:73:14:92:f0:62:72:11:4d:3a:65: 57:32:f1:30:c5:73:72:ae:c3:e9:ed:c3:85:fb:a3: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:51:2D:D4:25:7E:EC:84:FF:A6:DD:F1:89:90:75:A4:0B:96:FA:D5 X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:06:51:ea:80:36:90:66:99:50:80:6c:28:50:6e:ff:e1:fb: 03:a5:4d:89:25:8c:0d:f9:cc:bf:cc:24:ba:59:8c:06:ef:e8: 66:f5:a2:d8:68:92:7f:40:7c:5e:41:39:25:c0:36:de:66:be: e5:26:b5:b6:4e:44:f1:c3:a1:77:63:70:be:a5:22:96:9d:c8: 6e:e1:5b:f5:72:33:2c:3e:9f:03:7f:7c:7e:d5:c2:cc:5b:78: 9b:5b:c4:0e:e0:52:e4:4b:77:0d:23:0b:b3:a2:74:23:d9:ea: 5a:92:c9:fa:c9:05:5d:f5:27:6d:de:94:95:15:77:64:79:39: 02:3f:f9:15:48:ca:da:1e:02:1a:fe:31:46:3a:05:ae:29:c3: e4:87:7c:3c:57:d7:cf:76:da:5d:70:f2:00:ae:2b:77:3e:77: 6f:cb:b0:cf:06:3e:4e:f2:e3:ec:85:45:10:a0:b3:1f:f4:0f: 85:3b:d2:4b:f4:3c:70:59:d4:a0:6a:b5:e6:b8:c4:0b:cd:3e: e6:bc:10:1a:94:c1:74:a5:1f:f7:72:56:2a:58:b3:92:ac:e5: dd:3b:71:96:0e:a5:78:4d:57:07:ec:fb:b2:1c:22:40:40:36: 13:08:c6:e2:34:6b:31:a2:31:97:e6:08:6b:62:fc:21:ae:3b: 1a:a4:79:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUwODI0MTgxMjQ5WhcNMjUwODMxMTgxMjQ5WjAYMRYwFAYD VQQDEw02OGFiNTYyMS05NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0yZaR7pFGOSVj6NJtL5gKIThENE2gR1h/SCiIGMg7I8lnby91rMOZ+kYi+K i0Qrz2uhEAXx2mbcPp+9gB0Bcpwinnt28lzvQaL8JaOBRrMSShXKdPdvcORzE5Kz krxHkfWSiwoqgM0d2/OX0LF01/r5q0GUJq1MhSwKMx7YBJ1BKCnbYvh1CeKUwoz2 5MPCtSzFddGVxxkEOuxeZThNFW2/IDap33hqRqQJNZavbOpHtuPfo9KpGFEh5Ys4 0VUURV2RIY2+z6eKaFTOGaOTJ2krcaibI/vLKu8A+Utofa0ceMiDg3MUkvBichFN OmVXMvEwxXNyrsPp7cOF+6O3gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlRLdQl fuyE/6bd8YmQdaQLlvrVMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgBlHqgDaQZplQgGwoUG7/4fsDpU2JJYwN+cy/zCS6WYwG7+hm9aLY aJJ/QHxeQTklwDbeZr7lJrW2TkTxw6F3Y3C+pSKWnchu4Vv1cjMsPp8Df3x+1cLM W3ibW8QO4FLkS3cNIwuzonQj2epaksn6yQVd9Sdt3pSVFXdkeTkCP/kVSMraHgIa /jFGOgWuKcPkh3w8V9fPdtpdcPIArit3Pndvy7DPBj5O8uPshUUQoLMf9A+FO9JL 9DxwWdSgarXmuMQLzT7mvBAalMF0pR/3clYqWLOSrOXdO3GWDqV4TVcH7PuyHCJA QDYTCMbiNGsxojGX5ghrYvwhrjsapHnH -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:52 2025 by rpki-client