$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: EvMpwI1WNfC4uY3jJuD24kuf4QkvHSiXUYMg7owBhsE= Subject key identifier: 6F:F8:BC:23:17:60:B8:7B:1A:14:9A:07:D6:27:C9:AE:8D:A3:04:FE Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 1306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 12F8 Signing time: Thu 18 Sep 2025 17:11:16 +0000 Manifest this update: Thu 18 Sep 2025 17:11:15 +0000 Manifest next update: Thu 25 Sep 2025 17:11:15 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: x+5FW5SVc0JL/Yw89aUvaT6BcgogiAfcuVaQx87DJ68=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 6hOTp4SmpuhM6odO1i0HOQXN93az6Qa4OUEoe22Ijvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4870 (0x1306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Sep 18 17:11:15 2025 GMT Not After : Sep 25 17:11:15 2025 GMT Subject: CN=68cc3d33-8244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:6b:5f:d5:98:3c:b5:b0:aa:8d:4e:a8:9f: 2f:21:db:81:9c:81:e7:25:80:03:e8:b3:5e:27:c1: 51:2f:22:07:ec:be:ef:d8:fd:d6:67:4f:bf:0a:1c: 82:c9:7c:e4:a9:47:04:1a:45:84:14:3f:75:6a:23: 5a:17:c9:c4:0d:38:b0:34:e8:1c:41:11:85:dd:e3: b1:f5:3e:d3:a4:b6:71:f8:f1:6c:35:a1:b4:20:e6: 90:fb:fd:57:2b:f4:16:b5:f8:f4:88:26:27:3d:80: 6f:9b:3f:75:a9:c2:4c:10:0c:38:ca:bd:09:09:14: 3d:e1:01:c2:9b:28:0a:cc:58:fe:15:74:36:ec:91: 4a:9b:d0:a8:54:a5:c8:0e:9a:fd:13:25:a3:f2:e9: 83:16:40:1a:48:96:58:fa:a8:f8:6b:90:f2:26:56: 87:e0:3c:48:ed:c7:5a:c5:aa:d9:09:e7:7d:62:d1: f8:db:7d:1c:b1:61:d1:3b:63:c7:34:83:21:e3:63: 85:d5:22:6e:1c:d2:bb:6a:60:75:fc:15:94:10:32: 4b:d2:d4:b9:c8:24:d2:30:bd:45:63:22:56:1d:1b: 92:d6:3c:17:f5:b6:21:1d:49:64:f4:2c:de:d8:b4: 06:29:9f:e7:96:32:f0:89:7b:f7:5c:ae:71:2e:02: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:BC:23:17:60:B8:7B:1A:14:9A:07:D6:27:C9:AE:8D:A3:04:FE X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:17:9c:39:a7:67:bc:ec:35:46:55:74:8d:2d:f8:ac:e4:3d: 08:f0:15:b3:be:c4:98:05:a4:e9:32:1c:46:a6:de:4b:53:5a: 31:8e:2f:60:7b:26:15:67:cd:cf:76:af:5b:19:09:95:61:d4: 42:24:74:39:ae:c2:c1:96:4c:1b:5b:56:e4:43:68:1c:a7:c1: 07:9c:b0:d1:80:01:13:0c:5a:aa:34:d3:a9:dc:ca:28:c4:ed: eb:e3:23:48:83:f6:3b:34:14:f1:b2:86:94:ce:ab:66:7c:01: 90:2e:26:6d:b1:fb:cf:39:6a:a6:77:16:30:3b:37:da:05:cf: 03:3d:24:84:99:a1:bf:0a:be:74:18:c1:4d:cc:cc:94:e9:1f: a0:0b:55:24:a1:09:0c:4d:a4:81:9a:76:7b:e2:03:79:67:23: 22:3d:1f:ff:37:ac:0a:9a:47:cf:6c:aa:e6:fd:5e:21:19:92: 8d:fb:15:9f:9c:13:42:aa:37:63:6c:68:f2:55:b8:07:09:74: 09:b6:b6:17:1f:97:95:da:52:e9:f6:f1:ba:72:28:8e:25:b2: a0:1a:69:c8:ab:fa:3f:b7:e6:67:72:1a:9e:cc:f5:ac:5a:b0: bd:af:b7:a7:5f:af:01:01:b6:18:61:cd:34:17:b9:24:bb:44: ba:cf:56:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwOTE4MTcxMTE1WhcNMjUwOTI1MTcxMTE1WjAYMRYwFAYD VQQDEw02OGNjM2QzMy04MjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDprX9WYPLWwqo1OqJ8vIduBnIHnJYAD6LNeJ8FRLyIH7L7v2P3WZ0+/ChyC yXzkqUcEGkWEFD91aiNaF8nEDTiwNOgcQRGF3eOx9T7TpLZx+PFsNaG0IOaQ+/1X K/QWtfj0iCYnPYBvmz91qcJMEAw4yr0JCRQ94QHCmygKzFj+FXQ27JFKm9CoVKXI Dpr9EyWj8umDFkAaSJZY+qj4a5DyJlaH4DxI7cdaxarZCed9YtH4230csWHRO2PH NIMh42OF1SJuHNK7amB1/BWUEDJL0tS5yCTSML1FYyJWHRuS1jwX9bYhHUlk9Cze 2LQGKZ/nljLwiXv3XK5xLgK9KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/4vCMX YLh7GhSaB9Ynya6NowT+MB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIF5w5p2e87DVGVXSNLfis5D0I8BWzvsSYBaTpMhxGpt5LU1oxji9g eyYVZ83Pdq9bGQmVYdRCJHQ5rsLBlkwbW1bkQ2gcp8EHnLDRgAETDFqqNNOp3Moo xO3r4yNIg/Y7NBTxsoaUzqtmfAGQLiZtsfvPOWqmdxYwOzfaBc8DPSSEmaG/Cr50 GMFNzMyU6R+gC1UkoQkMTaSBmnZ74gN5ZyMiPR//N6wKmkfPbKrm/V4hGZKN+xWf nBNCqjdjbGjyVbgHCXQJtrYXH5eV2lLp9vG6ciiOJbKgGmnIq/o/t+ZnchqezPWs WrC9r7enX68BAbYYYc00F7kku0S6z1Z9 -----END CERTIFICATE-----Generated at Fri Sep 19 08:28:17 2025 by rpki-client