$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: yLRqtz1uh3bLpwUUQUJg2TC50z9iM0UFRBIRyYmEsrg= Subject key identifier: 9A:A3:F5:73:71:C0:51:D2:CB:95:01:6F:D5:62:A6:30:4B:78:75:BD Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 04EA Signing time: Wed 20 Aug 2025 23:49:29 +0000 Manifest this update: Wed 20 Aug 2025 23:49:29 +0000 Manifest next update: Wed 27 Aug 2025 23:49:29 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: c2HkYI9LfiJMwXwQQWQ9amPUYkX2ISkCdz3eFLbGXLI=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: m/3ymxdJG8CXZbfb70uX2NUY/PGPgWmUyTPz+BVxJ1w=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: l5THryZWDs9PaYkc4EAibFlrwJ85CdhXihjnSzgLwkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Aug 20 23:49:29 2025 GMT Not After : Aug 27 23:49:29 2025 GMT Subject: CN=68a65f09-f1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:95:0b:ba:e9:53:d8:39:fe:0f:2b:4d:05: 2b:e9:78:af:f2:61:e8:b4:ab:56:58:87:51:06:a7: da:a9:a1:37:bd:b8:83:d1:18:38:fa:fa:d5:03:7a: 54:da:0b:c4:2e:ea:f7:59:e3:23:8e:8c:54:b4:b0: 4c:45:50:c8:d4:ac:ff:57:ca:67:e0:64:78:49:ec: ac:82:dc:8f:06:c4:f4:2a:6c:fd:fa:73:88:e2:c0: 08:0e:a4:af:ad:11:ae:fd:2d:3c:02:1d:a8:7f:5d: 84:02:2f:82:95:2a:8f:8d:34:4e:48:94:aa:9c:18: a4:60:ca:d8:6e:3d:42:de:25:7f:68:c0:b6:2a:f2: 98:71:53:1a:c4:93:07:2b:09:60:e7:bd:2c:5b:ef: f3:a6:27:ff:75:ea:61:fe:48:cb:e3:16:05:8d:c2: 03:92:51:87:32:e8:47:6f:89:92:4a:50:67:c4:cf: d5:b7:63:e9:5d:52:e5:53:d4:76:39:b2:cc:95:c0: 8b:2b:b5:6f:3a:98:b6:8c:c4:81:1d:73:29:05:7c: 81:87:54:0e:3a:90:69:14:00:a0:72:3e:c6:c0:27: bb:fe:93:63:30:67:a1:09:b3:64:e6:71:9f:05:66: 5d:11:b6:5e:27:9e:e8:32:4c:02:b4:ea:8c:37:6f: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:F5:73:71:C0:51:D2:CB:95:01:6F:D5:62:A6:30:4B:78:75:BD X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:89:f7:6b:e9:bc:85:f8:94:33:25:09:14:11:d1:cb:cf:36: 34:c7:80:4e:29:c1:c7:a4:e9:27:68:41:5a:0e:ae:0a:e7:ed: 1a:54:4d:51:fa:a5:9c:f8:89:19:32:df:80:35:38:86:2c:34: ec:1e:36:ed:0b:0f:9e:a6:55:cf:c6:26:47:58:35:55:04:2d: 6f:97:1f:c0:b5:a7:49:f7:a0:0f:ab:3c:9f:9f:99:c4:4c:c3: 3f:fb:54:e4:44:78:38:41:44:01:01:7d:89:05:db:e7:c3:7e: 8e:f8:d9:9f:f2:5c:39:58:65:a4:e4:7d:01:84:4a:1c:b4:f5: 7f:e1:61:ec:5f:fa:79:db:45:11:ab:17:81:7a:03:3b:8e:f9: 67:59:15:02:ed:cc:a1:87:76:59:c5:c0:da:4b:78:28:c9:90: ad:f5:26:df:b9:83:d0:9b:d3:ca:27:90:b8:63:2d:8f:3e:88: 9c:e2:55:6e:32:01:50:49:47:c0:8c:a7:77:bf:83:31:c3:f2: 71:ff:1e:01:2d:41:72:47:bc:fe:12:ea:c2:00:16:a1:05:96: 57:de:df:87:6b:ff:0b:03:15:04:f0:50:f3:d5:76:6c:ec:e8: 5c:1c:cb:d7:fa:b6:79:19:07:d7:cc:0f:64:6d:e0:40:11:c4: 85:dd:88:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjUwODIwMjM0OTI5WhcNMjUwODI3MjM0OTI5WjAYMRYwFAYD VQQDEw02OGE2NWYwOS1mMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oaVC7rpU9g5/g8rTQUr6Xiv8mHotKtWWIdRBqfaqaE3vbiD0Rg4+vrVA3pU 2gvELur3WeMjjoxUtLBMRVDI1Kz/V8pn4GR4SeysgtyPBsT0Kmz9+nOI4sAIDqSv rRGu/S08Ah2of12EAi+ClSqPjTROSJSqnBikYMrYbj1C3iV/aMC2KvKYcVMaxJMH Kwlg570sW+/zpif/deph/kjL4xYFjcIDklGHMuhHb4mSSlBnxM/Vt2PpXVLlU9R2 ObLMlcCLK7VvOpi2jMSBHXMpBXyBh1QOOpBpFACgcj7GwCe7/pNjMGehCbNk5nGf BWZdEbZeJ57oMkwCtOqMN28u+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqj9XNx wFHSy5UBb9VipjBLeHW9MB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbifdr6byF+JQzJQkUEdHLzzY0x4BOKcHHpOknaEFaDq4K5+0aVE1R +qWc+IkZMt+ANTiGLDTsHjbtCw+eplXPxiZHWDVVBC1vlx/AtadJ96APqzyfn5nE TMM/+1TkRHg4QUQBAX2JBdvnw36O+Nmf8lw5WGWk5H0BhEoctPV/4WHsX/p520UR qxeBegM7jvlnWRUC7cyhh3ZZxcDaS3goyZCt9SbfuYPQm9PKJ5C4Yy2PPoic4lVu MgFQSUfAjKd3v4Mxw/Jx/x4BLUFyR7z+EurCABahBZZX3t+Ha/8LAxUE8FDz1XZs 7OhcHMvX+rZ5GQfXzA9kbeBAEcSF3YhC -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:41 2025 by rpki-client